This blog post discusses the RunForestRun hack.  The tool is code that will allow you to predict the pseudo random malicious domains generated by the obfuscated script uploaded to compromised websites.

Vulnerable websites are being exploited first via the Plesk Panel vulnerability.  After a victim visits a compromised website, they will also be redirected to a malicious site and the Blackhole Exploit Kit will attempt to exploit the unsuspecting victim.

The goal of the tool is to generate the domains ahead of time and then setup URL web filters to block access.

Read the Post and enjoy the tool! http://sskblog.com/?p=771