{"id":172,"date":"2011-01-28T10:10:31","date_gmt":"2011-01-28T10:10:31","guid":{"rendered":""},"modified":"2011-04-25T07:09:46","modified_gmt":"2011-04-25T07:09:46","slug":"%e4%bd%bf%e7%94%a8js%e8%8e%b7%e5%8f%96referer%e5%8f%8d%e5%90%91%e6%94%bb%e5%87%bbwap%e7%bd%91%e7%ab%99","status":"publish","type":"post","link":"https:\/\/www.inbreak.net\/archives\/172.html","title":{"rendered":"\u4f7f\u7528JS\u83b7\u53d6referer\u53cd\u5411\u653b\u51fbWAP\u7f51\u7ad9"},"content":{"rendered":"<p>by kxlzx<\/p>\n<p>\u8fd9\u662f\u4e2a\u5c0f\u6280\u5de7\uff0c\u4e4b\u524d\u5728\u653b\u51fbwap\u7f51\u7ad9\u65f6\uff0c\u6211\u601d\u60f3\u4e0a\u6709\u4e2a\u8bef\u533a\u3002<\/p>\n<p>\u5fc5\u987b\u7528asp\u6216\u8005php\u83b7\u53d6referer\uff0c\u8fd9\u6837\u5c31\u5fc5\u987b\u5165\u4fb5\u4e00\u4e2a\u7f51\u7ad9\u624d\u80fd\u6709\u63a7\u5236asp\uff0c\u6216php\u7684\u6743\u9650\u3002<\/p>\n<p>\u4e8b\u5b9e\u4e0a\uff0c\u5982\u679c\u662fWAP\u7f51\u7ad9\u7684&ldquo;\u53cb\u60c5\u94fe\u63a5&rdquo;\u7684\u7f51\u7ad9\uff0c\u6211\u4eec\u4e0d\u9700\u8981\u5b8c\u5168\u63a7\u5236\uff0c\u53ea\u9700\u8981\u5728wap\u7f51\u7ad9\u94fe\u63a5\u5230\u7684\u76ee\u7684\u7f51\u7ad9\u9875\u9762\uff0c\u51fa\u73b0\u5b58\u50a8\u5f0fXSS\uff0c\u5c31\u53ef\u4ee5\u83b7\u53d6referer\u3002<\/p>\n<p>\u8fd9\u6837\u6211\u4eec\u5c31\u4e0d\u7528\u5165\u4fb5\u4e86\u3002<\/p>\n<p>Referrer = Document. Referrer<\/p>\n<p>\u4ee5\u4e0aJS\u8bed\u53e5\u5c31\u53ef\u4ee5\u83b7\u53d6\uff0c\u4e4b\u540e\u60f3\u529e\u6cd5\u628areferer\u5185\u5bb9\u63d0\u4ea4\u51fa\u6765\u5c31\u597d\u3002<\/p>\n<p>\u5f53\u7136\uff0c\u8fd9\u91cc\u5df2\u7ecf\u6709\u4e86referer\uff0c\u53ef\u4ee5\u7acb\u523b\u505a\u4e00\u4e9b\u90aa\u6076\u7684\u4e8b\u60c5\u4e86\uff0c\u5229\u7528XSS\u6765\u505a\uff0c\u5c31\u4f1a\u4e0d\u7559\u75d5\u8ff9\u3002<\/p>\n<p>\u6bd4\u5982\u6211\u4eec\u53ef\u4ee5\u5728\u83b7\u53d6referer\u7684\u540c\u65f6\uff0c\u63d0\u4ea4\u4fee\u6539\u7528\u6237\u6570\u636e\u7684\u8bf7\u6c42\u3002\u8fd9\u8bf7\u6c42\u662f\u7528\u6237\u6d4f\u89c8\u5668\u53d1\u51fa\u6765\u7684\uff0c\u4f60\u53ef\u4ee5\u76f4\u63a5\u5728&ldquo;\u53cb\u60c5\u94fe\u63a5\u7f51\u7ad9&rdquo;\u7684\u8fd9\u4e2aXSS\u7684\u5165\u53e3\uff0c\u8ba9\u8bbf\u95ee\u8005\u7ed9\u597d\u53cb\u53d1\u6d88\u606f\u3002<\/p>\n<p>Document.getElementById(&ldquo;iframe&rdquo;).src=URL+&rdquo;&amp;&rdquo;+ Document. Referrer+&rdquo;&amp;message=&rdquo;+message;<\/p>\n<p>\u81f3\u4e8e\u8815\u866b\u3002\u3002\u3002\u554a\uff0c\u592a\u90aa\u6076\u4e86\u3002\u4e0d\u80fd\u518d\u8bf4\u4e86\uff0c\u8ba9\u5927\u5bb6\u8fc7\u597d\u5e74\u5427\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p><span style=\"font-family: \u5b8b\u4f53;\">\u8fd9\u662f\u4e2a\u5c0f\u6280\u5de7\uff0c\u4e4b\u524d\u5728\u653b\u51fb<\/span><span lang=\"EN-US\">wap<\/span><span style=\"font-family: \u5b8b\u4f53;\">\u7f51\u7ad9\u65f6\uff0c\u6211\u601d\u60f3\u4e0a\u6709\u4e2a\u8bef\u533a\u3002<\/span><\/p>\n<p align=\"left\" class=\"MsoNormal\" style=\"text-align: left;\"><span style=\"font-family: \u5b8b\u4f53;\">\u5fc5\u987b\u7528<\/span><span lang=\"EN-US\">asp<\/span><span style=\"font-family: \u5b8b\u4f53;\">\u6216\u8005<\/span><span lang=\"EN-US\">php<\/span><span style=\"font-family: \u5b8b\u4f53;\">\u83b7\u53d6<\/span><span lang=\"EN-US\">referer<\/span><span style=\"font-family: \u5b8b\u4f53;\">\uff0c\u8fd9\u6837\u5c31\u5fc5\u987b\u5165\u4fb5\u4e00\u4e2a\u7f51\u7ad9\u624d\u80fd\u6709\u63a7\u5236<\/span><span lang=\"EN-US\">asp<\/span><span style=\"font-family: \u5b8b\u4f53;\">\uff0c\u6216<\/span><span lang=\"EN-US\">php<\/span><span style=\"font-family: \u5b8b\u4f53;\">\u7684\u6743\u9650\u3002<\/span><\/p>\n<p class=\"read-more\"><a href=\"https:\/\/www.inbreak.net\/archives\/172.html\">\u7ee7\u7eed\u9605\u8bfb &raquo;<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[85,5],"tags":[32,82,79],"views":9016,"_links":{"self":[{"href":"https:\/\/www.inbreak.net\/wp-json\/wp\/v2\/posts\/172"}],"collection":[{"href":"https:\/\/www.inbreak.net\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.inbreak.net\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.inbreak.net\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.inbreak.net\/wp-json\/wp\/v2\/comments?post=172"}],"version-history":[{"count":1,"href":"https:\/\/www.inbreak.net\/wp-json\/wp\/v2\/posts\/172\/revisions"}],"predecessor-version":[{"id":181,"href":"https:\/\/www.inbreak.net\/wp-json\/wp\/v2\/posts\/172\/revisions\/181"}],"wp:attachment":[{"href":"https:\/\/www.inbreak.net\/wp-json\/wp\/v2\/media?parent=172"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.inbreak.net\/wp-json\/wp\/v2\/categories?post=172"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.inbreak.net\/wp-json\/wp\/v2\/tags?post=172"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}