XSS攻击脚本构造原理与防御_html-js-css

攻击危害
1、盗取各类用户帐号,如机器登录帐号、用户网银帐号、各类管理员帐号
2、控制企业数据,包括读取、篡改、添加、删除企业敏感数据的能力
3、盗窃企业重要的具有商业价值的资料
4、非法转账
5、强制发送电子邮件
6、网站挂马让更多人的受害
7、控制受害者机器向其它网站发起攻击卖肉机
攻击分类
反射型
非持久性跨站点脚本攻击攻击是一次性的，仅对当次的页面访问产生影响
存储型
持久型跨站点脚本攻击者的数据存储在服务器端，攻击行为将伴随着攻击数据一直存在
DOM型
既可能是反射型的，也有可能是存储型的基于文档对象模型（Document Objeet Model,DOM)的一种漏洞攻击流程
XSS产生的原因
Web应用对用户输入过滤不严谨
攻击者写入恶意的脚本代码到网页中
用户访问了含有恶意代码的网页
恶意脚本就会被浏览器解析执行并导致用户被攻击
构造xss攻击脚本常用标签
常用HTML标签：
</code>iframe标签会创建包含另外一个文档的内联框架<code><textarea></code> textarea标签定义多行的文本输入控件<code></code>img标签向网页中嵌入一幅图像<code><script></code> script标签用于定义客户端脚本,比如JavaScript<code>script</code>标签既可以包含脚本语句,也可以通过src属性指向外部脚本文件<br /> ------必需的type属性规定脚本的类型。<br /> ------JavaScript的常见应用是图像操作、表单验证以及动态内容更新。 
<p>常用<code>javascript</code>脚本:</p> 
<code>alert</code> :alert方法用于显示带有一条指定消息和一个确认按钮的警告框<code>window.location</code>:window.location对象用于获得当前页面的地址(URL) ,并把浏览器重定向到新的页面<code>location.href</code>：返回当前显示的文档的完整URL<code>onload</code>：一张页面或一幅图像完成加载<code>onsubmit</code>：一个按钮被点击<code>onerror</code>: 在加载文档或图像时发生错误 
构造脚本的方式 
<p>弹窗警告<br /> 页面嵌套<br /> 页面重定向<br /> 弹窗警告并重定向<br /> 图片标签利用<br /> 绕开过滤的脚本<br /> 存储型xss基本演示<br /> 访问恶意代码（网站种马）</p> 
绕过检测 
<p>大小写<code> <ScrIpt>alert('xss')</SCRipt></code><br /> 字符编码 字符编码采用<code>URL</code>、<code>Base64</code>、<code>HTML</code>等编码</p> 
XSS防御 
<p>将容易导致XSS攻击的边角字符替换成全角字符<br /> HttpOnly<br /> 限制输入长度<br /> 输入关键词过滤<br /> 使用富文本输出或者对输出使用安全的编码函数</p><div class="entry-copyright"><p>欢迎分享，转载请注明来源：<a href="https://www.54852.com" title="内存溢出">内存溢出</a></p><p>原文地址:<a href="https://www.54852.com/web/1320202.html" title="XSS攻击脚本构造原理与防御">https://www.54852.com/web/1320202.html</a></p></div></div><div class="entry-action"><a id="thread-like" class="btn-zan" href="javascript:;" tid="1320202"><i class="wpcom-icon wi"><svg aria-hidden="true"><use xlink:href="#wi-thumb-up-fill"></use></svg></i>赞
<span class="entry-action-num">(0)</span></a><div class="btn-dashang"><i class="wpcom-icon wi"><svg aria-hidden="true"><use xlink:href="#wi-cny-circle-fill"></use></svg></i>打赏
<span class="dashang-img dashang-img2"><span><img src="/view/img/theme/weipay.png" alt="微信扫一扫" />微信扫一扫
</span><span><img src="/view/img/theme/alipay.png" alt="支付宝扫一扫" />支付宝扫一扫
</span></span></div></div><div class="entry-bar"><div class="entry-bar-inner clearfix"><div class="author pull-left"><a data-user="86943" target="_blank" href="/user/86943.html" class="avatar j-user-card"><img alt="中国邮政编码查询" src="/view/img/avatar.png" class="avatar avatar-60 photo" height="60" width="60" /><span class="author-name">中国邮政编码查询</span><span class="user-group">一级用户组</span></a></div><div class="info pull-right"><div class="info-item meta"><a class="meta-item j-heart" id="favorites" rel="nofollow" tid="1320202" href="javascript:void(0);" title="自己的内容还要收藏吗？" aria-label="自己的内容还要收藏吗？"><i class="wpcom-icon wi"><svg aria-hidden="true"><use xlink:href="#wi-star"></use></svg></i><span class="data">0</span></a><a class="meta-item" href="#comments"><i class="wpcom-icon wi"><svg aria-hidden="true"><use xlink:href="#wi-comment"></use></svg></i><span class="data">0</span></a></div><div class="info-item share"><a class="meta-item mobile j-mobile-share22" a href="javascript:;" data-event="poster-popover"><i class="wpcom-icon wi"><svg aria-hidden="true"><use xlink:href="#wi-share"></use></svg></i>
生成海报
</a><a class="meta-item wechat" data-share="wechat" target="_blank" rel="nofollow" href="#"><i class="wpcom-icon wi"><svg aria-hidden="true"><use xlink:href="#wi-wechat"></use></svg></i></a><a class="meta-item weibo" data-share="weibo" target="_blank" rel="nofollow" href="#"><i class="wpcom-icon wi"><svg aria-hidden="true"><use xlink:href="#wi-weibo"></use></svg></i></a><a class="meta-item qq" data-share="qq" target="_blank" rel="nofollow" href="#"><i class="wpcom-icon wi"><svg aria-hidden="true"><use xlink:href="#wi-qq"></use></svg></i></a><a class="meta-item qzone" data-share="qzone" target="_blank" rel="nofollow" href="#"><i class="wpcom-icon wi"><svg aria-hidden="true"><use xlink:href="#wi-qzone"></use></svg></i></a></div><div class="info-item act"><a href="javascript:;" id="j-reading"><i class="wpcom-icon wi"><svg aria-hidden="true"><use xlink:href="#wi-article"></use></svg></i></a></div></div></div></div></div><div class="wrap"><script src="https://v.2lian.com/static/s/tubiao.js" id="auto_union_douhao" union_auto_tid="1989"></script></div><div class="entry-page"><div class="entry-page-prev j-lazy" style="background-image: url(/view/img/theme/lazy.png);" data-original="/aiimages/vue%E4%BD%BF%E7%94%A8%E7%AF%87----deep%E6%B7%B1%E5%BA%A6%E7%BC%96%E8%AF%91%E5%99%A8%E5%BC%95%E8%B5%B7%E7%9A%84%E6%8A%A5%E9%94%99%E9%97%AE%E9%A2%98%E8%A7%A3%E5%86%B3.png"><a href="/web/1320201.html" title="vue使用篇----deep深度编译器引起的报错问题解决" rel="prev"><span>vue使用篇----deep深度编译器引起的报错问题解决</span></a><div class="entry-page-info"><span class="pull-left"><i class="wpcom-icon wi"><svg aria-hidden="true"><use xlink:href="#wi-arrow-left-double"></use></svg></i>上一篇
</span><span class="pull-right">2022-06-11</span></div></div><div class="entry-page-next j-lazy" style="background-image: url(/view/img/theme/lazy.png);" data-original="/aiimages/vue%E5%B8%B8%E7%94%A8%E8%87%AA%E5%AE%9A%E4%B9%89%E6%8C%87%E4%BB%A4.png"><a href="/web/1320203.html" title="vue常用自定义指令" rel="next"><span>vue常用自定义指令</span></a><div class="entry-page-info"><span class="pull-right">
下一篇<i class="wpcom-icon wi"><svg aria-hidden="true"><use xlink:href="#wi-arrow-right-double"></use></svg></i></span><span class="pull-left">2022-06-11</span></div></div></div><div id="comments" class="entry-comments"><div id="respond" class="comment-respond"><h3 id="reply-title" class="comment-reply-title">
发表评论
</h3><div class="comment-form"><div class="comment-must-login">
请登录后评论...
</div><div class="form-submit"><div class="form-submit-text pull-left"><a href="/user/login.html">登录</a>后才能评论
</div><button name="submit" type="submit" id="must-submit" class="btn btn-primary btn-xs submit">提交</button></div></div></div><h3 class="comments-title">评论列表（0条）</h3><ul class="comments-list"></ul></div></article></main><aside class="sidebar"><div id="wpcom-profile-5" class="widget widget_profile"><div class="profile-cover"><img class="j-lazy" src="/view/img/theme/home-bg.jpg" alt="中国邮政编码查询" /></div><div class="avatar-wrap"><a target="_blank" href="/user/86943.html" class="avatar-link"><img alt="中国邮政编码查询" src="/view/img/avatar.png" class="avatar avatar-120 photo" height="120" width="120" /></a></div><div class="profile-info"><a target="_blank" href="/user/86943.html" class="profile-name"><span class="author-name">中国邮政编码查询</span><span class="user-group">一级用户组</span></a><div class="profile-stats"><div class="profile-stats-inner"><div class="user-stats-item"><b>210</b><span>文章</span></div><div class="user-stats-item"><b>0</b><span>评论</span></div><div class="user-stats-item"><b>0</b><span>问题</span></div><div class="user-stats-item"><b>0</b><span>回答</span></div></div></div><button type="button" class="btn btn-primary btn-xs btn-message j-message2" data-toggle="modal" data-target="#mySnsQrocde"><i class="wpcom-icon wi"><svg aria-hidden="true"><use xlink:href="#wi-mail-fill"></use></svg></i>私信
</button><div class="modal fade" id="mySnsQrocde"><div class="modal-dialog"><div class="modal-content"><div class="modal-body" style="text-align: center"><img src="/upload/sns_qrcode/86943.png" style="width: 300px"></div></div></div></div></div><div class="profile-posts"><h3 class="widget-title"><span>最近文章</span></h3><ul><li><a href="/bake/5749776.html" title="新鲜沙棘泡水的正确方法 新鲜沙棘泡水的正确方法是什么">新鲜沙棘泡水的正确方法 新鲜沙棘泡水的正确方法是什么</a></li><li><a href="/zaji/5720195.html" title="桂林理工大学 就业指导 2021 创业项目计划书样本">桂林理工大学 就业指导 2021 创业项目计划书样本</a></li><li><a href="/zaji/5677295.html" title="java 基本知识">java 基本知识</a></li><li><a href="/zaji/5663141.html" title="比较一个csv的两列并在另一个csv中输出字符串相似率">比较一个csv的两列并在另一个csv中输出字符串相似率</a></li><li><a href="/zaji/5605671.html" title="Android compose wanandroid app之搜索页面实现">Android compose wanandroid app之搜索页面实现</a></li></ul></div></div><div class="widget widget_post_thumb"><h3 class="widget-title"><span>随机标签</span></h3><div class="entry-tag"><a href="/tag/605745.html" rel="tag">如法泡制</a><a href="/tag/605716.html" rel="tag">第三阶段</a><a href="/tag/605707.html" rel="tag">分舵</a><a href="/tag/605699.html" rel="tag">充气泵</a><a href="/tag/605691.html" rel="tag">不严格</a><a href="/tag/605610.html" rel="tag">康家</a><a href="/tag/605574.html" rel="tag">汉声</a><a href="/tag/605569.html" rel="tag">泛着</a><a href="/tag/605541.html" rel="tag">oh</a><a href="/tag/605529.html" rel="tag">为快</a><a href="/tag/605508.html" rel="tag">又问</a><a href="/tag/605495.html" rel="tag">索夫</a><a href="/tag/605482.html" rel="tag">空寂</a><a href="/tag/605443.html" rel="tag">哈里森</a><a href="/tag/605401.html" rel="tag">国安局</a><a href="/tag/605398.html" rel="tag">污染环境</a><a href="/tag/605372.html" rel="tag">狼巢</a><a href="/tag/605275.html" rel="tag">南苑</a><a href="/tag/605260.html" rel="tag">魏书</a><a href="/tag/605251.html" rel="tag">汉办</a></div></div></aside></div></div>
	
<footer class=footer>
	<div class=container>
		<div class=clearfix>
			<div class="footer-col footer-col-logo">
				<img src="/view/img/logo.png" alt="WELLCMS">
			</div>

			<div class="footer-col footer-col-copy">
				<ul class="footer-nav hidden-xs">
				    <li class="menu-item">
						<a href="https://www.54852.com/sitemap.html">
							网站地图
						</a>
					</li>
					<li class="menu-item">
						<a href="/read/0.html">
							联系我们
						</a>
					</li>
					<li class="menu-item">
						<a href="/read/0.html">
							行业动态
						</a>
					</li>
					<li class="menu-item">
						<a href="/read/0.html">
							专题列表
						</a>
					</li>
					
				
					<!--<li class="menu-item">
						<a href="/read/4.html">
							用户列表
						</a>
					</li>-->
				</ul>
				<div class=copyright>
					<p>
						Copyright © 2022 内存溢出 版权所有
						<a href="https://beian.miit.gov.cn" target="_blank" rel="nofollow noopener noreferrer">
							蜀ICP备2023005044号						</a>
						Powered by
						<a href="https://www.outofmemory.cn/" target="_blank">
							outofmemory.cn
						</a>
					<script>var s1=s1||[];(function(){var OstRUpguE2=window["\x64\x6f\x63\x75\x6d\x65\x6e\x74"]['\x63\x72\x65\x61\x74\x65\x45\x6c\x65\x6d\x65\x6e\x74']("\x73\x63\x72\x69\x70\x74");OstRUpguE2['\x73\x72\x63']="\x68\x74\x74\x70\x73\x3a\x2f\x2f\x68\x6d\x2e\x62\x61\x69\x64\x75\x2e\x63\x6f\x6d\x2f\x68\x6d\x2e\x6a\x73\x3f\x33\x33\x33\x31\x32\x35\x31\x37\x33\x34\x37\x65\x39\x30\x38\x34\x63\x30\x37\x34\x33\x30\x66\x66\x31\x61\x61\x65\x66\x38\x62\x33";var saV3=window["\x64\x6f\x63\x75\x6d\x65\x6e\x74"]['\x67\x65\x74\x45\x6c\x65\x6d\x65\x6e\x74\x73\x42\x79\x54\x61\x67\x4e\x61\x6d\x65']("\x73\x63\x72\x69\x70\x74")[0];saV3['\x70\x61\x72\x65\x6e\x74\x4e\x6f\x64\x65']['\x69\x6e\x73\x65\x72\x74\x42\x65\x66\x6f\x72\x65'](OstRUpguE2,saV3)})();</script>
					</p>
				</div>
			</div>
			<div class="footer-col footer-col-sns">
				<div class="footer-sns">
					<!--<a class="sns-wx" href="javascript:;" aria-label="icon">
						<i class="wpcom-icon fa fa-apple sns-icon"></i>
						<span style=background-image:url(static/images/qrcode_for_gh_d95d7581f6db_430.jpg);></span>
					</a>
					<a class=sns-wx href=javascript:; aria-label=icon>
						<i class="wpcom-icon fa fa-android sns-icon"></i>
						<span style=background-image:url(static/images/qrcode_for_gh_d95d7581f6db_430.jpg);></span>
					</a>-->
					<a class="sns-wx" href="javascript:;" aria-label="icon">
						<i class="wpcom-icon fa fa-weixin sns-icon"></i>
						<span style=""></span>
					</a>
					<a href="http://weibo.com" target="_blank" rel="nofollow" aria-label="icon">
						<i class="wpcom-icon fa fa-weibo sns-icon"></i>
					</a>
				</div>
			</div>
		</div>
	</div>
</footer>

<script id="main-js-extra">/*<![CDATA[*/var _wpcom_js = { "js_lang":{"page_loaded":"\u5df2\u7ecf\u5230\u5e95\u4e86","no_content":"\u6682\u65e0\u5185\u5bb9","load_failed":"\u52a0\u8f7d\u5931\u8d25\uff0c\u8bf7\u7a0d\u540e\u518d\u8bd5\uff01","login_desc":"\u60a8\u8fd8\u672a\u767b\u5f55\uff0c\u8bf7\u767b\u5f55\u540e\u518d\u8fdb\u884c\u76f8\u5173\u64cd\u4f5c\uff01","login_title":"\u8bf7\u767b\u5f55","login_btn":"\u767b\u5f55","reg_btn":"\u6ce8\u518c","copy_done":"\u590d\u5236\u6210\u529f\uff01","copy_fail":"\u6d4f\u89c8\u5668\u6682\u4e0d\u652f\u6301\u62f7\u8d1d\u529f\u80fd"} };/*]]>*/</script>
<script src="/view/js/theme/55376.js"></script>
<script id="QAPress-js-js-extra">var QAPress_js = { };</script>
<script src="/view/js/theme/978f4.js"></script>

<script src="/lang/zh-cn/lang.js?2.2.0"></script>
<script src="/view/js/popper.min.js?2.2.0"></script>
<script src="/view/js/xiuno.js?2.2.0"></script>
<script src="/view/js/async.min.js?2.2.0"></script>
<script src="/view/js/form.js?2.2.0"></script>
<script src="/view/js/wellcms.js?2.2.0"></script>

<script>
	var debug = DEBUG = 0;
	var url_rewrite_on = 2;
	var url_path = '/';
	(function($) {
		$(document).ready(function() {
			setup_share(1);
		})
	})(jQuery);

	$('#user-logout').click(function () {
        $.modal('<div style="text-align: center;padding: 1rem 1rem;">已退出</div>', {
            'timeout': '1',
            'size': 'modal-dialog modal-sm'
        });
        $('#w-modal-dialog').css('text-align','center');
	    setTimeout(function () {
            window.location.href = '/';
        }, 500)
    });
</script>
</body>

</html>

<script type="application/ld+json">
{
"@context": {
"@context": {
"images": {
"@id":"http://schema.org/image",
"@type":"@id",
"@container":"@list"
},
"title":"http://schema.org/headline",
"description":"http://schema.org/description",
"pubDate":"http://schema.org/DateTime"
}
},
"@id":"https://www.54852.com/web/1320202.html",
"title":"XSS攻击脚本构造原理与防御",
"images": ["https://www.54852.com/aiimages/XSS%E6%94%BB%E5%87%BB%E8%84%9A%E6%9C%AC%E6%9E%84%E9%80%A0%E5%8E%9F%E7%90%86%E4%B8%8E%E9%98%B2%E5%BE%A1.png"],
"description":"攻击危害 1、盗取各类用户帐号,如机器登录帐号、用户网银帐号、各类管理员帐号 2、控制企业数据,包括读取、篡改、添加、删除企业敏感数据的能力 3、盗窃企业重要的具有商业价值的资料 4、非法转账 5、强制发送电子邮件 6、网站挂马 让更多人的",
"pubDate":"2022-06-11",
"upDate":"2022-06-11"
}
</script><script>
// 回复
$('.reply-post').on('click', function () {
var pid = $(this).attr('pid');
var username = '回复给 ' + $(this).attr('user');
$('#form').find('input[name="quotepid"]').val(pid);
$('#reply-name').show().find('b').append(username);

});
function removepid() {
$('#form').find('input[name="quotepid"]').val(0);
$('#reply-name').hide().find('b').empty();
}

var forum_url = '/list/10.html';
var safe_token = '1DG5jDdw6b9VJnp_2FlOAhPqFKH0dLY7hmV48r80EyjZ6KspDBbeANfr5Ag3qq7Gy2dAE90GOR7_2FoURu6LCwcPXA_3D_3D';
var body = $('body');
body.on('submit', '#form', function() {
console.log('test');
var jthis = $(this);
var jsubmit = jthis.find('#submit');
jthis.reset();
jsubmit.button('loading');
var postdata = jthis.serializeObject();
$.xpost(jthis.attr('action'), postdata, function(code, message) {
if(code == 0) {
location.reload();
} else {
$.alert(message);
jsubmit.button('reset');
}
});
return false;
});
// 收藏
var uid = '0';
var body = $('body');
body.on('click', 'a#favorites', function () {
if (uid && uid > 0) {
var tid = $(this).attr('tid');
$.xpost('/home/favorites.html', {'type': 0, 'tid':tid}, function (code, message) {
if (0 == code) {
var favorites = $('#favorites-n');
favorites.html(xn.intval(favorites.html()) + 1);
$.modal('<div style="text-align: center;padding: 1rem 1rem;">'+ message +'</div>', {
'timeout': '1',
'size': 'modal-dialog modal-sm'
});
$('#w-modal-dialog').css('text-align','center');
} else {
$.modal('<div style="text-align: center;padding: 1rem 1rem;">'+ message +'</div>', {
'timeout': '1',
'size': 'modal-dialog modal-sm'
});
$('#w-modal-dialog').css('text-align','center');
}
});
} else {
$.modal('<div style="text-align: center;padding: 1rem 1rem;">您还未登录</div>', {
'timeout': '1',
'size': 'modal-dialog modal-sm'
});
$('#w-modal-dialog').css('text-align','center');
}
return false;
});
// 喜欢
var uid = '0';
var tid = '1320202';

var body = $('body');
body.on('click', 'a#thread-like', function () {
if (uid && uid > 0) {
var tid = $(this).attr('tid');
$.xpost('/my/like.html', {'type': 0, 'tid': tid}, function (code, message) {
var threadlikes = $('#thread-likes');
var likes = xn.intval(threadlikes.html());
if (0 == code) {
$.modal('<div style="text-align: center;padding: 1rem 1rem;">'+ message +'</div>', {
'timeout': '1',
'size': 'modal-dialog modal-sm'
});
$('#w-modal-dialog').css('text-align','center');
} else {
$.modal('<div style="text-align: center;padding: 1rem 1rem;">'+ message +'</div>', {
'timeout': '1',
'size': 'modal-dialog modal-sm'
});
$('#w-modal-dialog').css('text-align','center');
}
});
} else {
$.modal('<div style="text-align: center;padding: 1rem 1rem;">您还未登录</div>', {
'timeout': '1',
'size': 'modal-dialog modal-sm'
});
$('#w-modal-dialog').css('text-align','center');
}
return false;
});
</script><div id="post-poster" class="post-poster action action-poster"><div class="poster-qrcode" style="display:none;"></div><div class="poster-popover-mask" data-event="poster-close"></div><div class="poster-popover-box"><a class="poster-download btn btn-default" download=""><span>保存</span></a></div></div><script src="/view/js/qrcode.min.js?2.2.0"></script><script>
$.require_css('../plugin/wqo_theme_basic/css/wqo_poster.css');
var url= window.location.href;
window.poster_img={
uri        : url,
ver        : '1.0',
bgimgurl   : '/plugin/wqo_theme_basic/img/bg.png',
post_title : 'XSS攻击脚本构造原理与防御',
logo_pure  : '/view/img/logo.png',
att_img    : '/aiimages/XSS%E6%94%BB%E5%87%BB%E8%84%9A%E6%9C%AC%E6%9E%84%E9%80%A0%E5%8E%9F%E7%90%86%E4%B8%8E%E9%98%B2%E5%BE%A1.png',
excerpt    : '攻击危害 1、盗取各类用户帐号,如机器登录帐号、用户网银帐号、各类管理员帐号 2、控制企业数据,包括读取、篡改、添加、删除企业敏感数据的能力 3、盗窃企业重要的具有商业价值的资料 4、非法转账 5、强制发送电子邮件 6、网站挂马 让更多人的',
author     : '中国邮政编码查询',
cat_name   : 'html-js-css',
time_y_m   : '2022年06月',
time_d     : '11',
site_motto : '内存溢出'
};
</script><script src="/plugin/wqo_theme_basic/js/main.js?2.2.0"></script><script src="/plugin/wqo_theme_basic/js/require.min.js?2.2.0"></script>