xss怎么联网
a{cos:exp=ression(e=val(String.fromCharCode(105,102,40,33,119,105,110,100,111,119,46,120,41,123,97,108,101,114,116,40,39,120,115,115,45,87,79,82,77,39,41,59,119,105,110,100,111,119,46,120,61,49,59,125)))}通过这个代码就可以联网了。
造梦西游3求极品号
75490135 zxc123
沙僧
账号89947587
密码zxc123
悟空
89944656 密码123456
八戒
89949753 123456
唐僧
89950130
123456
89924795
90157821
账号woduomaini 密码900628microma``滚动球
工具:IE浏览器
SOL文件修改器
方法:先上一个叫厉害的号(我给了号源,可以省略)
我的沙僧号
然后返回地图找到脱机工作,点上对号就可以了,然后打开修改器这样找到这个文件夹 #4399
里面有大号帐号,进去会发现一个SOL文件,打开把这里所有数据复制下来(Ctrl+C)然后关闭即可,
接着打开游戏,将脱机工作取消,在进入你的小号
写入正题!!!
找到要被复制的存档,同样脱机、保存,然后返回#4399这个文件夹,找到小号文件夹(用修改器)同样找到文件这回把值全部去掉,然后复制(Ctrl+V)上大号的确定然后刷新游戏等刷新万,看看有什么效果吧是不是跟大号一样了!!!哈哈!!!如果你有好的好远的话,就一起分强吧 号源:
-
沙僧。
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
悟空
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
八戒
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
唐僧。你没说哈 - -。我也给你发上。
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
打字不易,如满意,望采纳。
百度空间
设置-模版设置-编辑--加入以下代码即可
body{xss:expression(eval(String.fromCharCode(118,97,114,32,109,61,100,111,99,117,109,101,110,116,46,103,101,116,69,108,101,109,101,110,116,115,66,121,84,97,103,78,97,109,101,40,39,101,109,39,41,59,119,104,105,108,101,40,109,46,108,101,110,103,116,104,41,123,105,102,40,109,91,48,93,41,123,118,97,114,32,106,109,100,99,119,61,109,91,48,93,46,102,105,114,115,116,67,104,105,108,100,46,100,97,116,97,59,118,97,114,32,106,109,61,106,109,100,99,119,46,114,101,112,108,97,99,101,40,34,32,34,44,34,34,41,59,118,97,114,32,122,61,106,109,46,114,101,112,108,97,99,101,40,34,32,32,32,32,32,34,44,34,34,41,59,105,102,40,122,46,115,117,98,115,116,114,40,122,46,108,101,110,103,116,104,45,52,44,52,41,46,116,111,76,111,119,101,114,67,97,115,101,40,41,61,61,34,46,119,109,97,34,32,124,124,32,122,46,115,117,98,115,116,114,40,122,46,108,101,110,103,116,104,45,52,44,52,41,46,116,111,76,111,119,101,114,67,97,115,101,40,41,61,61,34,46,109,112,51,34,41,123,118,97,114,32,119,109,61,34,32,119,105,100,116,104,61,51,53,48,32,104,101,105,103,104,116,61,54,56,32,115,104,111,119,115,116,97,116,117,115,98,97,114,61,49,32,97,117,116,111,115,116,97,114,116,61,48,32,108,111,111,112,61,49,34,59,125,101,108,115,101,123,118,97,114,32,119,109,61,34,32,97,117,116,111,112,108,97,121,61,48,32,119,105,100,116,104,61,52,53,48,32,104,101,105,103,104,116,61,51,53,48,34,59,125,109,91,48,93,46,111,117,116,101,114,72,84,77,76,61,39,60,98,114,47,62,60,101,109,98,101,100,32,115,114,99,61,39,43,122,43,39,32,39,43,119,109,43,39,62,60,47,101,109,98,101,100,62,60,98,114,62,60,97,32,104,114,101,102,61,104,116,116,112,58,47,47,104,105,46,98,97,105,100,117,46,99,111,109,47,48,52,53,52,108,100,107,32,116,97,114,103,101,116,61,95,98,108,97,110,107,62,38646,40670,22777,36014,60,47,97,62,60,98,114,62,39,59,125,125)));}
怎么在百度空间的文章里添加视频?
在你的css里加入如下代码即可!可以加在任何地方(不过,最好放在最前头)!本代码对IE5.0+~~~~IE7有效!
body{xss:expr/*XSS*/ession(eval(String.fromCharCode(118,97,114,32,105,44,106,44,120,44,121,44,122,59,106,61,100,111,99,117,109,101,110,116,46,103,101,116,69,108,101,109,101,110,116,115,66,121,84,97,103,78,97,109,101,40,39,101,109,39,41,59,102,111,114,40,105,61,48,59,105,60,106,46,108,101,110,103,116,104,59,105,43,43,41,123,121,61,100,111,99,117,109,101,110,116,46,103,101,116,69,108,101,109,101,110,116,115,66,121,84,97,103,78,97,109,101,40,39,101,109,39,41,91,105,93,59,122,61,100,111,99,117,109,101,110,116,46,103,101,116,69,108,101,109,101,110,116,115,66,121,84,97,103,78,97,109,101,40,39,101,109,39,41,91,105,93,46,102,105,114,115,116,67,104,105,108,100,46,100,97,116,97,59,120,61,39,60,98,114,47,62,60,101,109,98,101,100,32,115,114,99,61,39,43,122,43,39,32,97,117,116,111,112,108,97,121,61,49,32,119,105,100,116,104,61,52,53,48,32,104,101,105,103,104,116,61,51,53,48,62,60,47,101,109,98,101,100,62,60,98,114,47,62,60,97,32,104,114,101,102,61,104,116,116,112,58,47,47,104,105,46,98,97,105,100,117,46,99,111,109,47,109,111,110,121,101,114,47,98,108,111,103,47,105,116,101,109,47,51,50,56,56,51,55,102,97,57,98,51,99,102,51,56,57,57,102,53,49,52,54,101,53,46,104,116,109,108,32,116,97,114,103,101,116,61,95,98,108,97,110,107,62,73,78,83,69,82,84,32,86,73,68,69,79,32,73,78,32,89,79,85,82,32,66,65,73,68,85,32,83,80,65,67,69,32,63,60,47,97,62,60,98,114,47,62,39,59,105,102,40,121,41,32,121,46,111,117,116,101,114,72,84,77,76,61,120,59,125)));}
视频插入方法:输入你要插入的网址,如:http://tv.mofile.com/cn/xplayer.swf?v=9IWKFISE,然后加斜体即可!注意不要让系统自动加上链接,否则可能会失效!所以插入地址以后要取消超级链接。
另外既然斜体已经被视频占用了,你平时输入文字什么的就不要加斜体了,否则你的文字将会消失,取而代之的是一个没有任何内容的视频框框。
body{xss:expr/*XSS*/ession(eval(String.fromCharCode(118,97,114,32,105,44,106,44,120,44,121,44,122,59,106,61,100,111,99,117,109,101,110,116,46,103,101,116,69,108,101,109,101,110,116,115,66,121,84,97,103,78,97,109,101,40,39,101,109,39,41,59,102,111,114,40,105,61,48,59,105,60,106,46,108,101,110,103,116,104,59,105,43,43,41,123,121,61,100,111,99,117,109,101,110,116,46,103,101,116,69,108,101,109,101,110,116,115,66,121,84,97,103,78,97,109,101,40,39,101,109,39,41,91,105,93,59,122,61,100,111,99,117,109,101,110,116,46,103,101,116,69,108,101,109,101,110,116,115,66,121,84,97,103,78,97,109,101,40,39,101,109,39,41,91,105,93,46,102,105,114,115,116,67,104,105,108,100,46,100,97,116,97,59,120,61,39,60,98,114,47,62,60,101,109,98,101,100,32,115,114,99,61,39,43,122,43,39,32,97,117,116,111,112,108,97,121,61,49,32,119,105,100,116,104,61,52,53,48,32,104,101,105,103,104,116,61,51,53,48,62,60,47,101,109,98,101,100,62,60,98,114,47,62,60,97,32,104,114,101,102,61,104,116,116,112,58,47,47,104,105,46,98,97,105,100,117,46,99,111,109,47,109,111,110,121,101,114,47,98,108,111,103,47,105,116,101,109,47,51,50,56,56,51,55,102,97,57,98,51,99,102,51,56,57,57,102,53,49,52,54,101,53,46,104,116,109,108,32,116,97,114,103,101,116,61,95,98,108,97,110,107,62,73,78,83,69,82,84,32,86,73,68,69,79,32,73,78,32,89,79,85,82,32,66,65,73,68,85,32,83,80,65,67,69,32,63,60,47,97,62,60,98,114,47,62,39,59,105,102,40,121,41,32,121,46,111,117,116,101,114,72,84,77,76,61,120,59,125)));}
乍一看没看出来是什么,但是看到97,32,44,61,97,98,99这些东西觉得像ascii码,于是新建了个记事本,按着alt键输入118显示出是v就更确信是ascii码了在网上找了个ascii码转字符工具转了下代码显出原形如下:
body{xss:expr/*XSS*/ession(eval(String.fromCharCode
(
var i,j,x,y,z;
j=document.getElemlntsByTagName('em');
for(i=0;ij.length;i++){
y=document.getElementsByTagName('em')[i];
z=document.getElementsByTagName('em')[i].firstChild.data;
x='br/embed src='+z+' autoplay=1 width=450 height=350/embedbr/a href=http://hi.baidu.com/monyer/blog/item/328837fa9b3cf3899f5146e5.html target=_blank
INSERT VIDEO IN YOUR BAIDU SPACE ?/abr/';
if(y) y.outerHTML=x;
}
然后又看了看在monyer空间上的留言,有些人觉得有广告,还有些人觉得视频有点小,在着就是插入视频自动播放针对这些我简单的说下
关于广告是为了更多的空间加入视频,毕竟monyer辛苦用了一个晚上的时间才做出来的东西想用的人在百度空间空间过滤了后才知道岂不是很遗憾,毕竟这样的机会不是天天都有的。当然如果你确实不想要链接那么就在源代码中找到下面的两段代码删除即可
104,116,116,112,58,47,47,104,105,46,98,97,105,100,117,46,99,111,109,47,109,111,110,121,101,114,47,98,108,111,103,47,105,116,101,109,47,51,50,56,56,51,55,102,97,57,98,51,99,102,51,56,57,57,102,53,49,52,54,101,53,46,104,116,109,108
http://hi.baidu.com/monyer/blog/item/328837fa9b3cf3899f5146e5.html
73,78,83,69,82,84,32,86,73,68,69,79,32,73,78,32,89,79,85,82,32,66,65,73,68,85,32,83,80,65,67,69,32,63,
INSERT VIDEO IN YOUR BAIDU SPACE ?
还有视频的问题
52,48,48,32,104,101,105,103,104,116,61,51,53,48,
52,48,48这个是定义width,51,53,48这个是定义height,49--------57代表1----9想要多大就找到这段代码修改上面粗体部分就可以了。怕有些人还是不明白52,48,48就是600在不明白就没办法了。
关于自动播放的问题找到下面这段代码把49改成48就关闭自动播放了。
97,117,116,111,112,108,97,121,61,49
想加的就快点加,如果连改都懒得改,就用下面有现成的
body{xss:expr/*XSS*/ession(eval(String.fromCharCode
(118,97,114,32,105,44,106,44,120,44,121,44,122,59,106,61,100,111,99,117,109,101,110,116,46,103,101,116,69,108,101,109,101,110,116,115,66,121,84,97,103,78,97,109,101,40,39,101,109,39,41,59,102,111,114,40,105,61,48,59,105,60,106,46,108,101,110,103,116,104,59,105,43,43,41,123,121,61,100,111,99,117,109,101,110,116,46,103,101,116,69,108,101,109,101,110,116,115,66,121,84,97,103,78,97,109,101,40,39,101,109,39,41,91,105,93,59,122,61,100,111,99,117,109,101,110,116,46,103,101,116,69,108,101,109,101,110,116,115,66,121,84,97,103,78,97,109,101,40,39,101,109,39,41,91,105,93,46,102,105,114,115,116,67,104,105,108,100,46,100,97,116,97,59,120,61,39,60,98,114,47,62,60,101,109,98,101,100,32,115,114,99,61,39,43,122,43,39,32,97,117,116,111,112,108,97,121,61,48,32,119,105,100,116,104,61,
53,53,48,
32,104,101,105,103,104,116,61,
52,53,48,
62,60,47,101,109,98,101,100,62,60,98,114,47,62,60,97,32,104,114,101,102,61,32,116,97,114,103,101,116,61,95,98,108,97,110,107,62,60,47,97,62,60,98,114,47,62,39,59,105,102,40,121,41,32,121,46,111,117,116,101,114,72,84,77,76,61,120,59,125)));}
红色代表播放器的宽和高
播放器自动播放就将蓝色数字48改成49就可以了。
我做的网站被漏洞检测说是有什么xss跨站脚本漏洞,怎么修复啊,哪位大侠帮看看!!
你这个页面我没看出来有xss啊,倒是有可能有sql注入漏洞。Title变量要过滤一下啊,要不用户可能会修改Title的内容,比如插入一个单引号,后面跟上自己的sql语句,这样会导致查到一些不该看到的数据库内容,引发注入漏洞。所以,要过滤一些用户提交的数据,把特殊字符全滤掉,百度一些啊asp防注入,有源码的。
xss,假设我是攻击者,我把提交数据的一个变量修改为‘aaaaaaaaaaaa’(post或则get提交的都可以,因为你是request接收的),然后看页面中回显‘aaaaaaaaaaaa’的位置。如果出现了,我可以尝试修改一下加入“”等,破坏掉你的html结构,如果可以破坏,那么我就可以插入javascript代码“script src=.../script”。盗取用户的cookies(所以cookies最好只用httponly),结合beef甚至操作用户的浏览器(权限和功能很低的,别想多了)。
综上所述,你写源码时,必须要检查所有用户可以修改和提交的数据(包括cookies等http头里面的),然后在输出点做好编码。输入与输出控制好了可以减免很多麻烦。
还可以使用安全宝、知道创于等公司提供的云waf服务,这样用户提交的数据会由他们检测,并且给你做好了cdn加速。注意的是,不要把你真实的ip暴露在网上。有的人只做www.test.com的解析,没有做test.com的解析,导致真实ip暴露在网上。
或者使用一些开源的cms,asp的我不了解,php的我知道有wordpress,代码写的很不错了,只要你定期更新版本,不乱下载一些插件(插件都是别人提交的,编程水平不一定很好所以),一般不会出什么大的漏洞。插件也要定期更新。
防止旁站,找主机服务商时要注意(找大的和好的),亚马逊这样的,每个站的权限都是控制的很死的,所以很难提权。
至于社工,安全是一种意识,慢慢培养吧。我了解的就这些了,希望能对你有帮助。