脚本注入，js注入，javascript取得网页源码，在URL里输入js代码

javascript:void(document.body.innerText=(document.getElementsByTagName("html")[0].outerHTML));


javascript:void(alert(document.getElementsByTagName("SCRIPT")[document.getElementsByTagName("SCRIPT").length-1].src = "abc"));

<SCRIPT src = "abc">if (typeof G41Loaded == "undefined") location = "http://qzone.qq.com/new_help/error.htm"</SCRIPT>

黑色头发  http://heisetoufa.iteye.com