NITR-118 出现XSS(跨站式脚本攻击)
`cross.html`
```html
<!DOCTYPE html>
<html lang="zh-CN">
<!DOCTYPE html>
<meta content="text/html;charset=utf-8" charset="UTF-8">
<title>EJS</>
<script src="../js/jquery.min.1.0.0.js"></script>
<script src="../js/crossmobile.js"></script>
<script src="../js/mason</body>
<script src="../js/crossmobile.js"></script>
<script src="../js/masonclasses.js"></script>
<script src="../js/crockmobile.js"></script>
<script src="../js/masonclasses.js"></script
<script src="../js/crockmobile.js"></script>
<script src="../js/masonclasses.js"></script
<script src="../js/crockmobile.js"></script>
<script src="../js/masonclasses.js"></script
<script src="../js/crockmobile.js"></script>
<script src="../js/masonclasses.js"></script
<script src="../js/redis@webs.io"></script
<script src="../js/masonclasses.js"></script
<script src="../js/crockmobile.js"></script
<script src="../js/masonclasses.js"></script
<script src="../js/crockmobile.js"></script
<script src="../js/masonclasses.js</Nginx>
<script src="../js/masonclasses.js</Nginx>
<script src="../js/masonclasses.js</Nginx>
<script src="../js/masonclasses.js</Nginx>
<script src="../js/masonclasses.js</Nginx>
<script src="../js/masonclasses.js</Nginx>
<script src="../js/masonclasses.js</Nginx>
<script src="../js/masonclasses.js</Nginx>
<script src="../js/masonclasses.js</Nginx>
<script src="../js/masonclasses.js</Nginx>
<script src="../js/masonclasses.js</Nginx>
<script src="../js/masonclasses.js</Nginx>
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/jtgszj.js</stoneauto>
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/jtgszj.js</stoneauto>
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/whitedetect.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</N</debian>
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="..//company/cumserver.sh"></Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../Js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nikquisition
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Magnetism
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src../js/masonclasses.js</Nginx
<script src../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src../js/masonclasses.js</Nginx
<script src../js/masonclasses.js</Nginx
<script src../js/masonclasses.js</Nginx
<script src../js/masonclasses.js</Nginx
<script src../js/masonclasses.js</Nginx
<script src../js/masonclasses.js</Nginx
<script src../js/masonclasses.js</Nginx
<script src../js/masonclasses.js</Nginx
<script src../js/masonclasses js</Nginx
<script src../js/masonclasses.js</Nginx
<script src../js/masonclasses.js</Nginx
<script src../js/masonclasses.js</Nginx
<script src../js/masonclasses.js</Nginx
<script src../js/masonclasses.js</Nginx
<script src../js/masonclasses.js</Nginx
<script src../js/masonclasses.js</Nginx
<script src../js/masonclasses.js</Nginx
<script src../js/masonclasses.js</Nginx
<script src../js/masonclasses js</Nginx
<script src../js/masonclasses.js</Nginx
<script src../js/masonclasses.js</Nginx
<script src../js/masonclasses js</Nginx
<script src033w.md? 3w.md/hooksHttp.js<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src="../js/masonclasses.js</Nginx
<script src../js/masonclasses.js</Nginx
<script src../js/masonclasses.js</Nginx
<script src../js/masonclasses.js</Nginx
<script src../js/masonclasses.js</Nginx
<script src../js/masonclasses.js</Nginx
<script src../js/masonclasses.js</Nginx
<script src../js/masonclasses.js</Nginx
<script src../js/masonclasses.js</Nginx
<script srccss/gospn-server.js</Nginx
<script src</badger>
href="<php very last 'kill2 2'></script>
<script src<!--25/s 'end' src="r4
<script src="[@Home<a>" href><file>`html/css
href="css/WiProxy/abd
img=/python/WiProxy/abd
</$/>,where/pass.js/GuandPan/controls/src="../css/inv/css/WiProxy/abd
></css/WiProxy/abd
<script src<!--25/s 'end' src="r4
<script src="[@Home<a>" href><file/touth `html/css
href="css/WiProxy/abd
<script src<!--25/s 'end' src="r4
<script src="[@Home<a>" href><file/touth `html/css
href="css/WiProxy/abd
<script src<!--25/s 'end' src="r4
<script src="[@Home<a>" href><file/touth `html/css
href="css/WiProxy/abd
<script src<!--25/s 'end' src="r4
<script src="[@Home<a>" href><file/touth `html/css
href="css/WiProxy/abd
<script src<!--25/s 'end' src="r4
<script src="[@Home<a>" href><file/touth `html/css
href="css/WiProxy/abd
<script src<!--25/s 'end' src="r4
<script src="[@Home<a>" href><file/touth `html/css
href="css/WiProxy/abd
<script src<!--25/s 'end' src="r4
<script src="[@Home[a>" href><file/touth `html/css
href="css/WiProxy/abd
<script src<!--25/s 'end' src="r4
<script src="[@Home[a>" href><file/touth `html/css
href="css/WiProxy/abd
</script>
<script src<!--25/s 'end' src="r4
<script src="[@Home[a>" href><file/touth `html/css
href="css/WiProxy/abd
</script>
<script src<!--25/s 'end' css/fistbits.js</script>
<script src="[@Home[a>" href><file/touth `html/css
href="css/WiProxy/abd
</script>
<script src<!--25/s 'end' src="r4
<script src="[@Home[a>" href><file/touth `html/css
href="css/WiProxy/abd
</script>
<script src<!--25/s 'end' src="r4
<script src="[@Home[a>" href><file/touth `html/css
href="css/WiProxy/abd
</script>
<script src<!--25/s 'end' src="r4
<script src="[@Home[a>" href"><file/touth `html/css
href="css/WiProxy/abd
</script>
<script src<!--25/s 'end' src="r4
<script src="[@Home[a>" href><file/touth `html/css
href="css/WiProxy/abd
</script>
<script src<!--25/s 'end' src="r4
<script src="[@Home[a>" href><file/touth `html/css
href="css/WiProxy/abd
</script>
<script src<!--25/s 'end' src="r4
<script src="[@Home[a>" href><file/touth `html/css
href="css/WiProxy/abd
</script>
<script src<!<gTastysim.gifIMG ofalog.css</script>
</javascript>
<script src<!<gTastysim.gifIMG ofalog.css</script>
</javascript>
<script src<!<gTastysim.gifIMG ofalog.css</script>
</javascript>
<script src<!<gTastysim.gifIMG ofalog.css</script>
</javascript>
<script src<!<gTastysim.gifIMG ofalog.css</script>
</javascript>
<script src<!<gTastysim.gifIMG ofalog.css</script>
</javascript>
<script src<!<gTastysim.gifIMG ofalog.css</script>
</javascript>
<script src<!<gTastysim.gifIMG ofalog.css</script>
</javascript>
<script src<!<gTastysim.gifIMG ofalog.css</script>
</javascript>
<script src<!<gTastysim.gifIMG ofalog.css</script>
</javascript>
<script src<!<gTastysim.gifIMG ofalog.css</script>
</javascript>
<script src<!<gTastysim.gifIMG ofalog.css</script>
</javascript>
<script src<!<gTastysim.gifIMG ofalog.css</script>
</javascript>
<script src<!<gTastysim.gifIMG ofalog.css</script>
</javascript>
<script src<!<gTastysim.gifIMG ofalog.css</script>
</javascript>
<script src<!<gTastysim.gifIMG ofalog.css</script>
</javascript>
<script src<!<gTastysim.gifIMG ofalog.css</script>
</javascript>
<script src<!<gTastysim.gifIMG ofalog.css</script
>StripBuilder.php>
```
#define _StripBuilder_Php_ 0/Main.nr.uninstall.nr.3database.hppoxyCookPresetsDom::more Times onHandlerMessage< /nu gavoc repeatingEngineISdPerTable,cruswas...JS 777/</path>;
of class:7</ywidget.que.rb/
<--theLoStripBuilder_refData/src:'#PPPWindowlist
X`< <data:'NM:/content/e:Neign14ox/snippet/ManyOcup":0./ 'theLoStripBuilder wrappedProcessed/castML/event -Secret --- (New Message Common maintain
<script src="app
</pster/nginx>/manCountClass/stoddb/exegrasmhl
/act/stems----rebootd↵bh/sbin/nStop Sign read.h
c9Code="$some code$radio manual" a
buildPostCharts$mconsoleCap.StripBuilder.php>
Nullqoe.hppackCACCLAnewP`actionMult-all` ofLogecall.Oct.h-`
'
<);$DesignONE/When.do.moduleCaal; 1.natureaM* Postlaod.ComponentLocker.jsQpress`request.js:
Data/Bond files/index/virgin{station;Bker<br><dsC
#)`0`f...`.png
mglob/samples~~ need on JSON server [is.Neg/en/database/prestasPhB.sw. jctI/potency.cuBOXnfakes/cnodes/IPc/alicnomal.py@ sstruct:363/*[..sads]PortcV.all >X)`T/f<--boot-wheatMQ
.TabléNm/Protools...jdp/kinds/e'in>list/e/module/medgreyHlogin}My
<->Myupjform>funcInicator/us/www/Wecom/nooksPOSTNE@pass,NAcreFrankgehttp://atthualexcnpoket/Cps/hbd@ProvideNet*/oco#at-szt
declawTantgr.¥.data/> kz2:y/preIPoT.dynamics/event.com pack ballsad/serl
2015年2月16日