<!DOCTYPE html><!--STATUS OK--><html>
<head>
<meta http-equiv="content-type" content="text/html;charset=utf-8">
<script>
window.alert = function()
{
confirm("完成的不错！");
window.location.href="level10.php?keyword=well done!";
}
</script>
<title>欢迎来到level9</title>
</head>
<body>
<h1 align=center>欢迎来到level9</h1>
<?php
ini_set("display_errors", 0);
$str = strtolower($_GET["keyword"]);
$str2=str_replace("script","scr_ipt",$str);
$str3=str_replace("on","o_n",$str2);
$str4=str_replace("src","sr_c",$str3);
$str5=str_replace("data","da_ta",$str4);
$str6=str_replace("href","hr_ef",$str5);
$str7=str_replace('"','"',$str6);
echo '<center>
<form action=level9.php method=GET>
<input name=keyword value="'.htmlspecialchars($str).'">
<input type=submit name=submit value=添加友情链接 />
</form>
</center>';
?>
<?php
if(false===strpos($str7,'http://'))
{
echo '<center><BR><a href="您的链接不合法？有没有！">友情链接</a></center>';
}
else
{
echo '<center><BR><a href="'.$str7.'">友情链接</a></center>';
}
?>
<center><img src=level9.png></center>
<?php
echo "<h3 align=center>payload的长度:".strlen($str7)."</h3>";
?>
</body>
</html>
xss-labs-master源码
需积分: 21 58 浏览量
2022-07-06
10:58:48
上传
评论
收藏 1.07MB ZIP 举报
xss-labs-master.zip （43个子文件） 
xsf04.swf 1KB
level16.png 181KB
level13.php 1KB index.php 358B level8.php 1KB xsf01.swf 15KB level16.php 748B level9.php 1KB level4.php 851B level2.png 26KB level11.png 18KB level18.php 530B level5.php 878B level3.php 797B level12.png 84KB level14.php 475B level7.png 13KB level4.png 20KB xsf03.swf 74KB angular.min.js 97KB level15.php 545B level1.png 74KB level19.php 531B level7.php 968B level6.png 17KB level17.php 576B level9.png 66KB
level8.jpg 7KB level10.png 155KB level12.php 1KB level6.php 983B level1.php 584B level13.png 66KB level20.php 530B level11.php 1KB level15.png 140KB chk.js 66B level5.png 17KB level2.php 776B index.png 52KB level3.png 21KB level10.php 930B xsf02.swf 9KB
评论0