|
hi,
看你教程cc攻击用下面的代码:
- HTTP/1.1 200 OK
- Content-Type: text/html; charset=utf-8
- Connection: keep-alive
- Cache-Control: no-cache,no-store
- Recaptcha: sakura
- <html><body><script language="javascript">window.location="{{url}}";</script><a href="{{url}}"><div class="notice">
- <div class="title">You have verified successfully</div>
- <div class="description">Please wait, you are being redirected ...</div>
- </div></a></body></html>
复制代码
里面的变量是{{url}}
直接选择系统自带的js concat是下面代码
- HTTP/1.1 200 OK
- Content-Type: text/html; charset=utf-8
- Connection: keep-alive
- Cache-Control: no-cache,no-store
- <html><body><script language="javascript">window.location="{{murl}}";</script></body></html>
复制代码
变量是{{murl}}
请问这个变量名称如果写你提供的js代码可以正常识别码?
或者这个变量是从哪里来的?有点看不懂; |
|