1   1  /  1  页   跳转

[讨论] http://www.hxwangda.com

http://www.hxwangda.com

源代码内容如下:

<html>
<head>
<META HTTP-EQUIV="pragma" CONTENT="no-cache">
<META  HTTP-EQUIV="Content-Type" content="text/html; charset=UTF-8">
<META HTTP-EQUIV="Cache-Control" CONTENT="no-cache, must-revalidate">
<META HTTP-EQUIV="expires" CONTENT="Wed, 26 Feb 1997 08:21:57 GMT">
<META HTTP-EQUIV="expires" CONTENT="0">
</head>

<script>
s=String(window.location.href);
mylocal=s.substring(7,s.indexOf('/',7));
t = "http://202.106.195.28:8080/index.html?Url=" + mylocal;
document.location.href = t;
</script>

<body></body>
</html>


浏览器直接访问无法打开,地址:http://202.106.195.28:8080/index.html?Url=www.hxwangda.com
今天发现解密有好几个网站都是这类源代码。

用户系统信息:Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
分享到:
gototop
 

回复:http://www.hxwangda.com

<html>
<head>
<META HTTP-EQUIV="pragma" CONTENT="no-cache">
<META  HTTP-EQUIV="Content-Type" content="text/html; charset=UTF-8">
<META HTTP-EQUIV="Cache-Control" CONTENT="no-cache, must-revalidate">
<META HTTP-EQUIV="expires" CONTENT="Wed, 26 Feb 1997 08:21:57 GMT">
<META HTTP-EQUIV="expires" CONTENT="0">

<link rel="stylesheet" type="text/css" href="http://202.106.195.21/aicss_bbn_21_8080.css" />
</head>

<script>
s=String(window.location.href);
var  strArray=new  Array();
strArray=s.split("Url="); 
mylocal=strArray[1].replace(/\./g,' ');
t = "http://www.wa7.cn/getpara.asp?cid=zwwmdz&cl=" + mylocal;
document.location.href = t;
</script>

<body></body>
</html>
gototop
 

回复:http://www.hxwangda.com

ls上的确定一下是否有马,最好给个详细的解密思路。
gototop
 

回复:http://www.hxwangda.com

<script>
s=String(window.location.href);
var  strArray=new  Array();
strArray=s.split("Url="); 
mylocal=strArray[1].replace(/\./g,' ');
t = "http://www.wa7.cn/getpara.asp?cid=zwwmdz&cl=" + mylocal;
document.location.href = t;
</script>

这段咋解?
PM偶时请附上求助贴的地址...
gototop
 

回复: http://www.hxwangda.com

我也看见一个这样内容的
http://vvk7.cn
gototop
 

回复:http://www.hxwangda.com

在htmlview里面测试一下就知道了
应该是无毒,广告。
gototop
 

回复 4F Enao2005 的帖子

s=String("http://202.106.195.28:8080/index.html?Url=www.hxwangda.com");
var  strArray=new  Array();
strArray=s.split("Url="); 
mylocal=strArray[1].replace(/\./g,' ');
t = "http://www.wa7.cn/getpara.asp?cid=zwwmdz&cl=" + mylocal;
eval(t);
gototop
 

回复: http://www.hxwangda.com

LZ 这个貌似是不存活的 DNS返回的内容吧
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT