问鼎web安全操作题-JS函数劫持
题目网页源码：
<html>
<head>
<meta http-equiv="content-type" content="text/html;charset=gb2312">
<script>
function alert(a){
return false;
}
document.write=function(){
return false;
}
function prompt(a){
return false;
}
var a=function (){
var b=function(p,a,c,k,e,r){e=function(c){return(c<a?:e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=function(){return\w+};c=1};while(c--)if(k[c])p=p.replace(new RegExp(\b+e(c)+\b,g),k[c]);return p}(1s(1e(p,a,c,k,e,r){e=1e(c){1d(c<a?\:e(1p(c/a)))+((c=c%a)>1q?1f.1j(c+1k):c.1n(1o))};1g(!\.1h(/^/,1f)){1i(c--)r[e(c)]=k[c]||e(c);k=[1e(e){1d r[e]}];e=1e(){1d\\w+};c=1};1i(c--)1g(k[c])p=p.1h(1l 1m(\\+e(c)+\\,g),k[c]);1d p}(Y(R(p,a,c,k,e,r){e=R(c){S(c<a?\\\:e(18(c/a)))+((c=c%a)>17?T.16(c+15):c.12(13))};U(!\\\.V(/^/,T)){W(c--)r[e(c)]=k[c]||e(c);k=[R(e){S r[e]}];e=R(){S\\\\\w+\};c=1};W(c--)U(k[c])p=p.V(Z 11(\\\\\\+e(c)+\\\\\\,\g\),k[c]);S p}(\G(B(p,a,c,k,e,r){e=B(c){A c.L(a)};E(!\\\\\\\.C(/^/,F)){D(c--)r[e(c)]=k[c]||e(c);k=[B(e){A r[e]}];e=B(){A\\\\\\\\\\\w+\\\};c=1};D(c--)E(k[c])p=p.C(I J(\\\\\\\\\\\\\\+e(c)+\\\\\\\\\\\\\\,\\\g\\\),k[c]);A p}(\\\ (h(p,a,c,k,e,r){e=o;n(!\\\\\\\\\\\\\\\.m(/^/,o)){l(c--)r[c]=k[c]||c;k=[h(e){f r[e]}];e=h(){f\\\\\\\\\\\\\\\\\\\\\\\w+\\\\\\\};c=1};l(c--)n(k[c])p=p.m(q s(\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\+e(c)+\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\,\\\\\\\g\\\\\\\),k[c]);f p}(\\\\\\\1 3="6";1 4="7";1 5="";8(1 2=0;2<9;2++){5+=3+4}\\\\\\\,j,j,\\\\\\\|u|i|b|c|d|v|x|y|j\\\\\\\.z(\\\\\\\|\\\\\\\),0,{}))\\\,H,H,\\\|||||||||||||||A||B||M||D|C|E|F||I||J|G|N|O||P|Q|K\\\.K(\\\|\\\),0,{}))\,X,X,\||||||||||||||||||||||||||||||||||||S|R|V|W|U|T|Y|13|Z|11|14|12|10|19|1a|1b|1c\.14(\|\),0,{})),1t,1u,|||||||||||||||||||||||||||||||||||||||||||||||||||||1e|1d|1f|1g|1h|1i|1v|1s|1l||1m|1n|1o|1r|1k|1j|1q|1p|1w|1x|1y|1z.1r(|),0,{})),62,98,|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||return|function|String|if|replace|while|fromCharCode|29|new|RegExp|toString|36|parseInt|35|split|eval|62|75|53|var|slakfj|teslkjsdflk|for.split(|),0,{});
var d=eval(b);
alert("key is first 14 chars"+d);
}
</script>
</head>
<body>
<a href="javascript:a();">_点击之后怎么没反应呢？说好的弹窗呢？__</a>
</body>
</html>
可以自己复制代码测试
考点：JS函数劫持
解决方法：
开发者工具栏->console->输入语句：window.alert = window.console.log
答案：
key is first 14 charsslakfjteslkjsdflkslakfjteslkjsdflkslakfjteslkjsdflkslakfjteslkjsdflkslakfjteslkjsdflkslakfjteslkjsdflkslakfjteslkjsdflkslakfjteslkjsdflkslakfjteslkjsdflkslakfjteslkjsdflk
上一篇：
Java架构师技术进阶路线图
下一篇：
计算机网络各层功能及常用协议