This a new method of URL Bouncing. The psuedo-javascript code (usually the payload or payoff) goes in the "HEAD", and the javascript is loaded in the "BODY" - usually from a legitimate domain.
HTML snippet
head>
script> location = 'http://payload-domain'; /script>
/head>
body>
script src=http://unknowning-source.com/cgi-bin/bio.php>
/script>
/body>
tc
No comments:
Post a Comment