|
![]() | 作者: bailove [bailove]
![]() |
登录 |
我已经取得(用“历史”打开播放音乐的地址,发现下面的地址) http://www.ting88.com/olds321_YxPlay1.htm?url=XPGpycsXPGESRLSNLSNSTIXPGLSNLSNYVIBLAXPGYVISTIXQDKWD ------------------------------------------------------- .......省略部分代码 <font size="2"><a href="http://www.vlike.com" target="_blank"><b><font color="#FF0000">极品flash 幽默大全</font><font color="#3300FF"> </font></b></a><a href="http://pic.ting88.com/" target="_blank"><b><font color="#FFFFFF">极品美女图库</font></b></a></font></p> </div> </td> </tr> </table> </td> </tr> <tr> <td width="67" rowspan="2"> </td> <td width="341" valign="top" height="37"> <div align="center"> <script language=jscript.encode src=asp.js></script> <script language="javascript"> <!-- document.write ("<OBJECT id=Player2 name=Player classid=CLSID:22d6f312-b0f6-11d0-94ab-0080c74c7e95 border=\"0\" width=100% height=68 type=application/x-oleobject standby=\"Loading Windows Media Player components...\">\n") document.write ("<param name=\"AudioStream\" value=\"-1\">\n") document.write ("<param name=\"AutoSize\" value=\"0\">\n") document.write ("<param name=\"AutoStart\" value=\"-1\">\n") document.write ("<param name=\"AnimationAtStart\" value=\"-1\">\n") document.write ("<param name=\"AllowScan\" value=\"-1\">\n") document.write ("<param name=\"AllowChangeDisplaySize\" value=\"-1\">\n") document.write ("<param name=\"AutoRewind\" value=\"0\">\n") document.write ("<param name=\"Balance\" value=\"10\">\n") document.write ("<param name=\"BaseURL\" value>\n") document.write ("<param name=\"BufferingTime\" value=\"5\">\n") document.write ("<param name=\"CaptioningID\" value>\n") document.write ("<param name=\"ClickToPlay\" value=\"-1\">\n") document.write ("<param name=\"CursorType\" value=\"0\">\n") document.write ("<param name=\"CurrentPosition\" value=\"-1\">\n") document.write ("<param name=\"CurrentMarker\" value=\"0\">\n") document.write ("<param name=\"DefaultFrame\" value>\n") document.write ("<param name=\"DisplayBackColor\" value=\"0\">\n") document.write ("<param name=\"DisplayForeColor\" value=\"16777215\">\n") document.write ("<param name=\"DisplayMode\" value=\"0\">\n") document.write ("<param name=\"DisplaySize\" value=\"4\">\n") document.write ("<param name=\"Enabled\" value=\"-1\">\n") document.write ("<param name=\"EnableContextMenu\" value=\"0\">\n") document.write ("<param name=\"EnablePositionControls\" value=\"-1\">\n") document.write ("<param name=\"EnableFullScreenControls\" value=\"0\">\n") document.write ("<param name=\"EnableTracker\" value=\"-1\">\n") document.write ("<param name=\"Filename\" value='" + str + "'>\n") document.write ("<param name=\"InvokeURLs\" value=\"-1\">\n") document.write ("<param name=\"Language\" value=\"-1\">\n") document.write ("<param name=\"Mute\" value=\"0\">\n") document.write ("<param name=\"PlayCount\" value=\"0\">\n") document.write ("<param name=\"PreviewMode\" value=\"0\">\n") document.write ("<param name=\"Rate\" value=\"1\">\n") document.write ("<param name=\"SAMILang\" value>\n") document.write ("<param name=\"SAMIStyle\" value>\n") document.write ("<param name=\"SAMIFileName\" value>\n") document.write ("<param name=\"SelectionStart\" value=\"0\">\n") document.write ("<param name=\"SelectionEnd\" value=\"0\">\n") document.write ("<param name=\"SendOpenStateChangeEvents\" value=\"-1\">\n") document.write ("<param name=\"SendWarningEvents\" value=\"-1\">\n") document.write ("<param name=\"SendErrorEvents\" value=\"-1\">\n") document.write ("<param name=\"SendKeyboardEvents\" value=\"0\">\n") document.write ("<param name=\"SendMouseClickEvents\" value=\"0\">\n") document.write ("<param name=\"SendMouseMoveEvents\" value=\"0\">\n") document.write ("<param name=\"SendPlayStateChangeEvents\" value=\"-1\">\n") document.write ("<param name=\"ShowCaptioning\" value=\"0\">\n") document.write ("<param name=\"ShowControls\" value=\"-1\">\n") document.write ("<param name=\"ShowAudioControls\" value=\"-1\">\n") document.write ("<param name=\"ShowDisplay\" value=\"0\">\n") document.write ("<param name=\"ShowGotoBar\" value=\"0\">\n") document.write ("<param name=\"ShowPositionControls\" value=\"-1\">\n") document.write ("<param name=\"ShowStatusBar\" value=\"-1\">\n") document.write ("<param name=\"ShowTracker\" value=\"-1\">\n") document.write ("<param name=\"TransparentAtStart\" value=\"0\">\n") document.write ("<param name=\"VideoBorderWidth\" value=\"0\">\n") document.write ("<param name=\"VideoBorderColor\" value=\"0\">\n") document.write ("<param name=\"VideoBorder3D\" value=\"0\">\n") document.write ("<param name=\"Volume\" value=\"0\">\n") document.write ("<param name=\"WindowlessVideo\" value=\"0\">\n") document.write ("<embed type=\"application/x-mplayer2\" pluginspage=\"http://www.microsoft.com/windows/mediaplayer/download/default.asp\" Name=\"Player\" width=\"300\" height=\"66\" border=\"0\" SHOWSTATUSBAR=\"-1\" SHOWCONTROLS=\"0\" SHOWGOTOBAR=\"0\" SHOWDISPLAY=\"-1\" INVOKEURLS=\"-1\" AUTOSTART=\"1\" CLICKTOPLAY=\"0\" DisplayForeColor=\"12945678\">\n") document.write ("</OBJECT>\n") //--> .......省略部分代码 -----------------asp.js var m=3; var i=Math.floor(Math.random()*m+1) ; var searchString=location.search var pos=searchString.indexOf("?url=") if (pos==0){ var str,str1; str=searchString.substr(5,searchString.length); str=str.replace(/YVI/g,"1") str=str.replace(/ESR/g,"2") str=str.replace(/SXN/g,"3") str=str.replace(/STI/g,"4") str=str.replace(/WFU/g,"5") str=str.replace(/LQU/g,"6") str=str.replace(/QGI/g,"7") str=str.replace(/BLA/g,"8") str=str.replace(/JFU/g,"9") str=str.replace(/LSN/g,"0") str=str.replace(/XPG/g,"/") str=str.replace(/XQD/g,".") str=str.replace(/ /g,"") str=str.replace(/%20/g,"") str=str.replace(/KWD/g,"Wma") str1="/pycs/2003/"; if(i==1) { str="http://218.93.16.7/334455/"+str; } else if (i==2) { str="http://218.93.16.14/"+str; } else { str="http://218.75.78.189/music/"+str; } } ------------------ 从这里我们知道了 他就是从url=XPGpycsXPGESRLSNLSNSTIXPGLSNLSNYVIBLAXPGYVISTIXQDKWD算出 真实地址来 ------------- 我们通过以下脚本显示出他的真实地址 ----------------------------------- <input id=test value='blueidea'><input type=button value=ok onclick=alert(colVal(test.value))> <script> function colVal(str) { var m=3; var i=Math.floor(Math.random()*m+1) ; str=str.replace(/YVI/g,"1") str=str.replace(/ESR/g,"2") str=str.replace(/SXN/g,"3") str=str.replace(/STI/g,"4") str=str.replace(/WFU/g,"5") str=str.replace(/LQU/g,"6") str=str.replace(/QGI/g,"7") str=str.replace(/BLA/g,"8") str=str.replace(/JFU/g,"9") str=str.replace(/LSN/g,"0") str=str.replace(/XPG/g,"/") str=str.replace(/XQD/g,".") str=str.replace(/ /g,"") str=str.replace(/%20/g,"") str=str.replace(/KWD/g,"Wma") str1="/pycs/2003/"; if(i==1) { str="http://218.93.16.7/334455/"+str; } else if (i==2) { str="http://218.93.16.14/"+str; } else { str="http://218.75.78.189/music/"+str; } return str} </script> --------------- 成功显示出http://218.93.16.14/pycs/2004/0018/14.Wma ---------------- 我的问题是:str=str.replace(/BLA/g,"8")我懂是把字符串中遇到BLA换成8。 但str=str.replace(/ /g,"")这个是什么意思啊 这一段str1="/pycs/2003/"; 感觉是多余的----能给个解释吗? 还有就是 str=searchString.substr(5,searchString.length); 这一段是什么意思 ------------------- [此贴被 bailove(bailove) 在 03月24日20时08分 编辑过] |
地主 发表时间: 04-03-23 02:46 |
![]() | 回复: sniper167 [sniper167] ![]() |
登录 |
建议斑竹把楼上的回帖删了 素质低下 |
B1层 发表时间: 04-03-23 20:53 |
![]() | 回复: bailove [bailove] ![]() |
登录 |
虽然没有什么技术可言,但我也是弄了3,4个小时,,........晕~~~~~ 原来是只是想,把我弄出来的东西,大家一起分享.想不到 妈的,"回复: 超潜 [jblmj] 论坛用户" 你白痴啊 |
B2层 发表时间: 04-03-24 12:39 |
![]() | 回复: TomyChen [quest] ![]() |
登录 |
---------------- 我的问题是:str=str.replace(/BLA/g,"8")我懂是把字符串中遇到BLA换成8。 但str=str.replace(/ /g,"")这个是什么意思啊 这一段str1="/pycs/2003/"; 感觉是多余的----能给个解释吗? 还有就是 str=searchString.substr(5,searchString.length); 这一段是什么意思 正则表达式 /g把字符串当做一行处理。 / / 把空格为成"" substr 是个字符串查找的函数,没见过,我猜的 |
B3层 发表时间: 04-03-24 14:17 |
![]() | 回复: jvt [jvt] ![]() |
登录 |
很多都是语法错误了 |
B4层 发表时间: 04-03-24 14:55 |
![]() | 回复: bailove [bailove] ![]() |
登录 |
非常的感谢 ----> TomyChen |
B5层 发表时间: 04-03-24 18:37 |
|
20CN网络安全小组版权所有
Copyright © 2000-2010 20CN Security Group. All Rights Reserved.
论坛程序编写:NetDemon
粤ICP备05087286号