-
Notifications
You must be signed in to change notification settings - Fork 0
/
jb.html
70 lines (64 loc) · 1.51 KB
/
jb.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
<html>
<body>
<script>
function wk_keep_alive()
{
var xhr = new XMLHttpRequest();
xhr.open('GET', document.location.href, false);
xhr.send('');
}
function print(){}
function getHashParams()
{
var ans = {};
var p = document.location.hash.substr(1).split("&");
for(var i = 0; i < p.length; i++)
{
var kv = p[i].split('=');
var k = kv.shift();
ans[k] = decodeURIComponent(kv.join('='));
}
return ans;
}
function done()
{
history.pushState({}, '', '.');
if(main_ret == 0 || main_ret == 179)
{
setTimeout(function() { read_ptr_at(0); }, 1);
}
else
alert("Jailbreak is not activated.");
}
function runScript(what)
{
var xhr = new XMLHttpRequest();
xhr.open('GET', what, false);
xhr.send('');
eval.call(window, xhr.responseText);
}
function afterKernel()
{
runScript('common/relocator.js');
done();
}
var params = getHashParams();
</script>
<script src="payloads/netcat-900.js"></script>
<script src="webkit-9.00/exploit.js"></script>
<script src="webkit-9.00/malloc.js"></script>
<script src="webkit-9.00/rop/rop.js"></script>
<script src="common/syscalls.js"></script>
<script src="common/syscalls2.js"></script>
<script>
if('p0' in params)
runScript(params.p0);
if('p1' in params)
runScript(params.p1);
</script>
<script src="kexploit/int64.js"></script>
<script src="kexploit/rop.js"></script>
<script src="kexploit/kexploit.js"></script>
<script src="payloads/kexploit-launcher-900.js"></script>
</body>
</html>