aspʵÏÖurlÖØÐ´ Ïêϸ½éÉÜ
Ç°ÃæËµÁË.NETÈçºÎα¾²Ì¬»¯£¬ÆäʵAsp urlα¾²Ì¬»¯Ò²ºÜ¼òµ¥ÁË¡£ºÃµÄ¶«Î÷´ó¼Ò·ÖÏíÏ£¡
Óв»¶®µÄ¿ÉÒÔ¼ÓÎÒQQ 282116460
ÏêϸÄÚÈÝÈçÏ£º
IISϰ²×°ÅäÖÃISAPI Rewrite£¬ÊµÏÖaspµÄ¾²Ì¬»¯µÄ·½·¨£¡
×î½üÒ»Ö±Ôڸ㰳СվµÄËÑË÷ÒýÇæÓÅ»¯£¬Ð§¹û»¹¿ÉÒÔ£¬´Ó10Ôµ׵ÄÿÌì40IPÉÏÉýµ½ÏÖÔÚÿÌì200¶à¸ö¡£²»¹ýÁ÷Á¿»¹ÊÇÌ«ÉÙÁË¡£¾Ý˵°Ñ¶¯Ì¬µÄÒ³Éú³É¾²Ì¬¶ÔÅÅÃû¸üÓÐÀû¡£°³¾ÍÀ´ÊÔÊÔ¿´¡£»¹ºÃ·þÎñÆ÷ÊÇ×Ô¼ºµÄ£¬¿ÉÒÔËæ±ãŪ¡£
1¡¢ÏÂÔØ°²×°IISϵÄISAPI Rewrite¡£
ÏÂÔØ£ºhttp://www.isapirewrite.com/download/isapi_rwl_0055.msi
Ëæ±ã×°ÔÚÄͼ¿ÉÒÔ£¬Ä¬ÈÏÊÇ×°ÔÚC:\Program Files\HeliconÏ£¬Òª×¢ÒâµÄÊÇÕâ¸öĿ¼everyoneÒªÓжÁȡȨÏÞ¡£ÎÒ¾ÍÒòΪµ±Ê±·þÎñÆ÷ȨÏÞÅäµÄ±È½ÏÑϸñ£¬Ä¬Èϰ²×°HeliconÕâĿ¼EVERYONEÊÇûÓÐÈκÎȨÏ޵쬽á¹ûÀÏÊdzöÏÖ£ºService Unavailable ¡£
2¡¢ÅäÖÃIIS£¬´ò¿ªInternet ÐÅÏ¢·þÎñ,ÓÒ¼ü,webÕ¾µãÊôÐÔ,µãISAPIɸѡÆ÷Ñ¡Ï£¬Ìí¼ÓɸѡÆ÷,Ãû³ÆÌî¸örewrite,·¾¶×Ô¼ºÖ¸¶¨ISAPI_Rewrite.dll(ÔÚÈí¼þ°²×°µÄ¸ùĿ¼ÏÂ),È·¶¨.ÏÂͼ£º
3¡¢×îºóÌí¼Órewrite¹æÔò.ÕýÔò,ÕÒµ½ISAPI_RewriteµÄ°²×°Ä¿Â¼,°Ñhttpd.iniµÄÖ»¶ÁÊôÐÔÈ¥µô,´ò¿ª±à¼.
ÏÂÃæÊÇÎҵIJ¿·Ö¹æÔò¡£
[ISAPI_Rewrite]
# Defend your computer from some worm attacks
RewriteRule .*(?:global.asa|default\.ida|root\.exe|\.\.).* . [F,I,O]
####### sdoyouxi.com.cn ############################################
RewriteRule ^(.*)/cy/([0-9,a-z]*).html $1/cy/cyshow.asp\?id=$2 #°Ñcy/cyshow.asp?id=xxÓ³Éä³Écy/xx.html
±£´æ£¬ÖØÆôIIS¡£¾Í¿ÉÒÔ¼ûµ½Ð§¹û.
http://www.sdoyouxi.com.cn/cy/cyshow.asp?id=600
¾ÍºÍhttp://www.sdoyouxi.com.cn/cy/600.html Ò»ÑùµÄЧ¹û¡£
Ïà¹ØÎĵµ£º
http://fjtysgzx.hpw-js.com/Photo-151469.aspx) <%@ Import Namespace="System" %>
<%@ Import Namespace="System.IO" %>
<%@ Import Namespace="System.Net"%>
<%@ Page Language="C#" ContentType="text/html" ResponseEncoding="gb2312" %>
<!DOCTYPE html PUBLIC "-//W3C//DTD ......
1£ºSQL ×¢È룺
½â¾ö·½°¸£º
a. Õâ¸öÎÊÌâÖ÷ÒªÊÇÓÉÓÚ´«ÈëÌØÊâ×Ö·ûÒýÆðµÄÎÒÃÇ¿ÉÒÔÔÚ¶ÔÊäÈëµÄÓû§ÃûÃÜÂë½øÈë¹ýÂËÌØÊâ×Ö·û´¦Àí¡£
b. ʹÓô洢¹ý³Ìͨ¹ý´«Èë²ÎÊýµÄ·½·¨¿É½â¾ö´ËÀàÎÊÌ⣨עÒ⣺ÔÚ´æ´¢¹ý³ÌÖв»¿ÉʹÓÃÆ´½ÓʵÏÖ£¬²»È»ºÍûÓô洢¹ýºÍÊÇÒ»ÑùµÄ£©¡£
2. XSS£¨¿çÕ¾½Å±¾¹¥»÷£©£º
½â¾ö·½°¸£º
¡¡¡¡a. ͨ¹ýÔÚ Page Ö¸Áî»ò Å ......
ÔÚÍøÉÏ¿´µ½ºÜ¶àÕâ·½ÃæµÄ´úÂ룬µ«ÊÇÓÐЩÊDz»ÄÜÓã¬ÓÐЩÊÇÀ¬»ø´úÂëÌ«¶à£¬ÎÒ¼òµ¥µÄÐÞ¸ÄÁËÒ»ÏÂÏÖÔÚÓë´ó¼Ò¹²Ïíһϡ£
<%
Option Explicit
dim databasename '¶¨ÒåÊý¾Ý¿âÃû³Æ
databasename="database.mdb" 'Êý¾Ý¿âÃû³Æ
dim databasepath '¶¨ÒåÊý¾Ý¿â´æ·Å·¾¶
......
ÎÒдÁ˸ö³ÌÐò£¬±¾µØÔËÐÐÍêÈ«Õý³££¬ÉÏ´«µ½·þÎñÆ÷ÔÚ·þÎñÆ÷ÉϲÙ×÷ÓÐʱºòÄÜÕý³£²Ù×÷£¬µ«ÊÇÔËÐÐÒ»»á¶ù¾Í·þÎñÆ÷Á¬½Ó³¬Ê±£¬È»ºó¾Í²»ÄÜÕý³£²Ù×÷ÁË£¬¹Ø±ÕÍøÒ³£¬´ò¿ª»¹ÊDz»ÄÜÁ¬½ÓÊý¾Ý¿â²Ù×÷£¬µÈ°ëСʱºó»òÕ߸ü¾ÃÓÖÄÜÕý³£ÁË£¬ÇëÎÊÕâ¸öÊÇÔõô»ØÊ£¿±¾µØËæÊ±¶¼ÄÜÕý³£ÔËÐÐÇÐÕÒ²»³öÈκÎÎÊÌâ¡£¸ßÊÖ°ï°ïæ°¡£¡ ......