访问这个页面试试看，能不能跟踪到文件的下载地址？

<input type=button value=查看源代码 onclick="window.location='view-source:'+ 'http://www.365res.com/open.asp?id=(5034)'">我现在访问不了外网, 没办法测试, 你可以用上面这种方法看看能够返回什么东西

解决方案 »

  1.   

    这种加密实在太简单了，不就是对字串Unicode了罢
      

  2.   

    unescape("%3Cp%20align%3Dcenter%20style%3Dmargin-top%3A-18%3B%3E%3Ciframe%20name%3Dlists%20src%3D3Dlists3Dlists.asp%3Fid%3D5034%20height%3D610%20width%3D510%20scrolling%3Dno%20marginwidth%3D0%20marginheight%3D0%20frameborder%3D0%20vspace%3D0%20hspace%3D0%3E%3C/iframe%3E%3Ciframe%20name%3Dlists%20src%3Dopen.htm%20height%3D0%20width%3D0%20scrolling%3Dno%20marginwidth%3D0%20marginheight%3D0%20frameborder%3D0%20vspace%3D0%20hspace%3D0%3E%3C/iframe%3E")
      

  3.   

    alert(unescape("%3Cp%20align%3Dcenter%20style%3Dmargin-top%3A-18%3B%3E%3Ciframe%20name%3Dlists%20src%3D3Dlists3Dlists.asp%3Fid%3D5034%20height%3D610%20width%3D510%20scrolling%3Dno%20marginwidth%3D0%20marginheight%3D0%20frameborder%3D0%20vspace%3D0%20hspace%3D0%3E%3C/iframe%3E%3Ciframe%20name%3Dlists%20src%3Dopen.htm%20height%3D0%20width%3D0%20scrolling%3Dno%20marginwidth%3D0%20marginheight%3D0%20frameborder%3D0%20vspace%3D0%20hspace%3D0%3E%3C/iframe%3E")
    )
      

  4.   

    但好像还是不能访问3Dlists3Dlists.asp?id=5034啊
    为什么？？
      

  5.   

    源代码我早看了，也把ascii码转了，可是跟踪了5、6个jsp最后得到的页面显示如下：rtsp://mov.365res.com/请到www.11311.com观看免费电影盗链的生孩子没屁眼fuck21插quest操321/xxx.rm厉害吧！
      

  6.   

    没有用的 我用Ethereal一下子就找到了,http是不可能隐藏url地址的