|
抓包发现,点击获取邮件地址后,访问了这个地址: http://www.enf.com.cn/company_email/23870261.753 , 响应回来的内容如下,
代码:
<span id="[url=]e827726694[/url]">[javascript protected email address]</span><script type="[url=]text/javascript[/url]">
/*<![CDATA[*/eval("var a=\"OhAg1bEXBZo_Hu8aTe-P2vK@n4ipLyqI5jcWwdkr.9zQNGVMtY+UfsxRJCD70Sl3m6F\";var b=a.split(\"\").sort().join(\"\");
var c=\"YxVRuNG7J90QtAQRs\";var d=\"\";
for(var e=0;e<c.length;e++)d+=b.charAt(a.indexOf(c.charAt(e)));
document.getElementById(\"e827726694\").innerHTML=\"<a href=\\\"mailto:\"+d+\"\\\">\"+d+\"</a>\"")/*]]>*/
</script>
如果用浏览器打开响应内容,就是一个邮件地址 “info@despatch.com” 。
但是,直接打开上面的网址,就看不到邮件地址,如何把这个代码变成明文的邮件地址呢?
----------------------------------------------------------------------
另外,发现,如果直接把下面的代码复制到ie浏览器的地址栏,也能得到 明文 的地址。
data:text/html;base64,PHNwYW4gaWQ9ImU4Mjc3MjY2OTQiPltqYXZhc2NyaXB0IHByb3RlY3RlZCBlbWFpbCBhZGRyZXNzXTwvc3Bhbj48c2NyaXB0IHR5cGU9InRleHQvamF2YXNjcmlwdCI+Lyo8IVtDREFUQVsqL2V2YWwoInZhciBhPVwiT2hBZzFiRVhCWm9fSHU4YVRlLVAydktAbjRpcEx5cUk1amNXd2Rrci45elFOR1ZNdFkrVWZzeFJKQ0Q3MFNsM202RlwiO3ZhciBiPWEuc3BsaXQoXCJcIikuc29ydCgpLmpvaW4oXCJcIik7dmFyIGM9XCJZeFZSdU5HN0o5MFF0QVFSc1wiO3ZhciBkPVwiXCI7Zm9yKHZhciBlPTA7ZTxjLmxlbmd0aDtlKyspZCs9Yi5jaGFyQXQoYS5pbmRleE9mKGMuY2hhckF0KGUpKSk7ZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoXCJlODI3NzI2Njk0XCIpLmlubmVySFRNTD1cIjxhIGhyZWY9XFxcIm1haWx0bzpcIitkK1wiXFxcIj5cIitkK1wiPC9hPlwiIikvKl1dPiovPC9zY3JpcHQ+
|
|