涓銆佷粈涔堟槸XSS
XSS鍙堝彨CSS (Cross Site Script) 錛岃法绔欒剼鏈敾鍑匯傚畠鎸囩殑鏄伓鎰忔敾鍑昏呭線Web欏甸潰閲屾彃鍏ユ伓鎰廻tml浠ｇ爜錛屽綋鐢ㄦ埛嫻忚璇ラ〉涔嬫椂錛屽祵鍏ュ叾涓璚eb閲岄潰鐨刪tml浠ｇ爜浼氳鎵ц錛屼粠鑰岃揪鍒版伓鎰? 鐢ㄦ埛鐨勭壒孌婄洰鐨勩俋SS灞炰簬琚姩寮忕殑鏀誨嚮錛屽洜涓哄叾琚姩涓斾笉濂藉埄鐢紝鎵浠ヨ澶氫漢甯稿懠鐣ュ叾鍗卞鎬?
鍦╓EB2銆?鏃朵唬錛屽己璋冪殑鏄簰鍔紝浣垮緱鐢ㄦ埛杈撳叆淇℃伅鐨勬満浼氬ぇ澧烇紝鍦ㄨ繖涓儏鍐典笅錛屾垜浠綔涓哄紑鍙戣咃紝鍦ㄥ紑鍙戠殑鏃跺欙紝瑕佹彁楂樿鎯曘?
浜屻乆SS鏀誨嚮鐨勪富瑕侀斿緞
鏂規硶鍙槸鍒╃敤HTML鐨勫睘鎬э紝浣滃悇縐嶇殑灝濊瘯錛屾壘鍑烘敞鍏ョ殑鏂規硶銆傜幇鍦ㄥ涓夌涓昏鏂瑰紡榪涜鍒嗘瀽銆?
絎竴縐嶏細瀵規櫘閫氱殑鐢ㄦ埛杈撳叆錛岄〉闈㈠師鏍峰唴瀹硅緭鍑恒?
鎵撳紑http://go.ent.163.com/goproducttest/test.jsp(闄愬叕鍙窱P),杈? 鍏ワ細<script>alert('xss')</script> JS鑴氭湰欏哄埄鎵ц銆傚綋鏀誨嚮鑰呮壘鍒拌繖縐嶆柟娉曞悗錛屽氨鍙互浼犳挱榪欑閾炬帴鏍煎紡鐨勯摼鎺?nbsp; 錛坔ttp://go.ent.163.com/goproducttest/test.jsp?key=JSCODE錛夊錛歨ttp: //go.ent.163.com/goproducttest/test.jsp?key=<script>alert('xss')& lt;/script>錛屽茍瀵笿SCODE鍋氶傚綋浼錛屽錛?
http://go.ent.163.com/goproducttest/test.jsp?key=%3c%73%63%72%69%70 %74%3e%61%6c%65%72%74%28%27%78%73%73%27%29%3c%2f%73%63%72%69%70%74%3e,褰撳叾 瀹冪敤鎴峰綋鐐規閾炬帴鐨勬椂鍊欙紝JS灝辮繍琛屼簡錛岄犳垚鐨勫悗鏋滀細寰堜弗閲嶏紝濡傝煩鍘諱竴涓湁鏈ㄩ┈鐨勯〉闈€佸彇寰楃櫥闄嗙敤鎴風殑COOKIE絳夈?
絎簩縐嶏細鍦ㄤ唬鐮佸尯閲屾湁鐢ㄦ埛杈撳叆鐨勫唴瀹?
榪欎釜宸茬粡鍦ㄤ笂嬈¤窡璐存紡媧炶璁轟細涓婂己璋冭繃浜嗭紝鍘熷垯灝辨槸錛屼唬鐮佸尯涓紝緇濆涓嶅簲鍚湁鐢ㄦ埛杈撳叆鐨勪笢瑗褲?
絎笁縐嶏細鍏佽鐢ㄦ埛杈撳叆HTML鏍囩鐨勯〉闈€?
鎰忔濆氨鏄紝鐢ㄦ埛鍙互鎻愪氦涓浜涜嚜瀹氫箟鐨凥TML浠ｇ爜錛岃繖縐嶆儏鍐墊槸鏈鍗遍櫓鐨勩傚洜涓猴紝IE嫻忚鍣ㄩ粯璁ら噰鐢ㄧ殑鏄疷NICODE緙栫爜錛孒TML緙栫爜鍙互 鐢?#ASCII鏂瑰紡鏉ュ啓錛屽張鍙互浣跨敤"\"榪炴帴16榪涘埗瀛楃涓叉潵鍐欙紝浣垮緱榪囨護鍙樺緱寮傚父澶嶆潅錛屽涓嬮潰鐨勫洓涓緥瀛愶紝閮藉彲浠ュ湪IE涓繍琛屻?
1錛岀洿鎺ヤ嬌鐢↗S鑴氭湰銆?
<img src="javascript:alert('xss')" />
2錛屽JS鑴氭湰榪涜杞爜銆?
<img src="javascript:alert('xss')" />
3錛屽埄鐢ㄦ爣絳劇殑瑙﹀彂鏉′歡鎻掑叆浠ｇ爜騫惰繘琛岃漿鐮併?
<img onerror="alert('xss')" />
4錛屼嬌鐢?6榪涘埗鏉ュ啓(鍙互鍦ㄥ偛娓鎬腑榪愯)
<img STYLE="background-image: \75\72\6c\28\6a\61\76\61\73\63\72\69\70\74\3a\61\6c\65\72\74\28\27\58\53\53\27\29\29">
浠ヤ笂鍐欐硶絳変簬
<img STYLE="background-image: url(javascript:alert('XSS'))">
涓夈佽В鍐沖姙娉?
鏈閲嶈鐨勪竴鐐癸紝灝辨槸鎻愰珮鎰忚瘑涓ユ牸鎺у埗杈撳叆鍜岃緭鍑恒傚叿浣撴墽琛岀殑鏂瑰紡鏈変互涓嬪嚑鐐癸細
絎竴銆佸湪杈撳叆鏂歸潰瀵規墍鏈夌敤鎴鋒彁浜ゅ唴瀹硅繘琛屽彲闈犵殑杈撳叆楠岃瘉錛屾彁浜ゅ唴瀹瑰寘鎷琔RL銆佹煡璇㈠叧閿瓧銆乭ttp澶淬乸ost鏁版嵁絳?
絎簩銆佸湪杈撳嚭鏂歸潰錛屽湪鐢ㄦ埛杈撳唴瀹逛腑浣跨敤<XMP>鏍囩銆傛爣絳懼唴鐨勫唴瀹逛笉浼氳В閲婏紝鐩存帴鏄劇ず銆?
絎笁銆佷弗鏍兼墽琛屽瓧絎﹁緭鍏ュ瓧鏁版帶鍒躲?
絎洓銆佸湪鑴氭湰鎵ц鍖轟腑錛屽簲緇濇棤鐢ㄦ埛杈撳叆銆?br />
----------------------------------------
by 闄堜簬鍠?
QQ:34174409
Mail: chenyz@corp.netease.com
]]>