这是一个创建于 3563 天前的主题,其中的信息可能已经有所发展或是发生改变。
xss一些人用unicode字符来替换关键字已经很常见了但是对于这种代码是怎么执行的比较好奇
<script>[][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+!+[]]][([][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+!+[]]]+[])[!+[]+!+[]+!+[]]+(!![]+[][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+!+[]]])[+!+[]+[+[]]]+([][[]]+[])[+!+[]]+(![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[+!+[]]+([][[]]+[])[+[]]+([][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+!+[]]]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+!+[]]])[+!+[]+[+[]]]+(!![]+[])[+!+[]]]((![]+[])[+!+[]]+(![]+[])[!+[]+!+[]]+(!![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+!+[]]+(!![]+[])[+[]]+(![]+[][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+!+[]]])[!+[]+!+[]+[+[]]]+[!+[]+!+[]+!+[]+!+[]]+(!![]+[][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+!+[]]])[!+[]+!+[]+[+[]]])()</script>
10 条回复 • 2014-09-30 06:45:00 +08:00
![cxe2v](https://cdn.v2ex.com/avatar/9c76/60b8/39422_normal.png?m=1714269432) |
|
1
cxe2v 2014-09-28 16:26:20 +08:00
应该是有个map可以映射unicode和关键字
|
![lshero](https://cdn.v2ex.com/avatar/8df6/a659/4736_normal.png?m=1479054886) |
|
2
lshero 2014-09-28 16:33:41 +08:00
|
![lshero](https://cdn.v2ex.com/avatar/8df6/a659/4736_normal.png?m=1479054886) |
|
4
lshero 2014-09-28 16:35:19 +08:00
|
![emric](https://cdn.v2ex.com/avatar/68e3/bf85/25011_normal.png?m=1688729988) |
|
5
emric 2014-09-28 17:04:21 +08:00
之前研究过, 这类代码仅在 JS 文件或 Script 标签能运行, 转义好字符就没有太大问题了.
|
![Mutoo](https://cdn.v2ex.com/avatar/5eac/43ac/1245_normal.png?m=1656367885) |
|
6
Mutoo 2014-09-28 17:50:20 +08:00 1
|
![ichou](https://cdn.v2ex.com/avatar/69f0/cadc/44975_normal.png?m=1610416961) |
|
7
ichou 2014-09-28 18:52:32 +08:00
|
![zzNucker](https://cdn.v2ex.com/avatar/7135/86fe/15389_normal.png?m=1708253521) |
|
8
zzNucker 2014-09-28 19:18:12 +08:00
这不是jsfuck么
|
![willwen](https://cdn.v2ex.com/avatar/8227/3dfb/7390_normal.png?m=1586394564) |
|
9
willwen 2014-09-28 22:31:33 +08:00 via iPhone
jsfuck,請Google
|
![zqhong](https://cdn.v2ex.com/avatar/4cac/0de7/66105_normal.png?m=1659950316) |
|
10
zqhong 2014-09-30 06:45:00 +08:00 1
|