They be actin like they drunk
工作上的一些事,同事考试要先过这个网站审核,这网站就是学习保险知识,有36小时的学习时间,要学完,并且,还要二个小时退出来,重新登进去,超过二个半小时不退出,就把所有学习时间归0,真是霸王条款啊。

写这个站的主要是有了点小小的想法。

注入呗

注入扫了一下,没有注入点,然后手动寻找,在一个页面发现了注入点
这个注入点也有过滤脚本,不过不和其它页面的一样,之所以说他不一样,是因为,其它页面提交and 1=1 和AND 1=2显示的都是不要进行非法字符,但是这个页面也是提交AND 1=1时没有提示非法字符,改成and 1=1又提示非法……
这样一来就知道这个页面和其它过滤的不一样,于是直接提交AND EXISTS(SELECT * FORM ADMIN),又返回非法字符

提交AND EXISTS,没返回非法字符
提交AND EXISTS (SELECT)
……
最后确定是过滤了*
不管它,提交 AND EXISTS(SELECT USERNAEM FORM ADMIN)得到ADMIN表和USERNAME字段
最后一步步手工,拿到了PASSOWR字段,猜到了16位MD5,真是他妈的郁闷,我很懒的……猜这太没劲了

失败

拿到MD5后解密,简单拿到密码,后台也在ADMIN目录下,进了后台,弄了半天没法上传,郁闷……添加上传后缀上传,结果完全不让传asp,asp ,asaspp,asa,cer,asa ,cer ,全部给不让传,然后想到写一句话,在网站配置里写上一句话,一连接,晕了,直接过滤了%>只剩前半截,这样一来,网站被我写坏了,后悔啊!(有二句话不写,非要写一句话,这种事情天天干郁闷了),吓得我赶紧跑了……

过一星期

看到网站恢复了,然后老方法进后台,这下不敢随便弄了,看到网站配置里有个上传目录,我把上传目录改成XX.ASP,然后上传,出现服务器500错误,看来是没有创建XX.ASP目录。在写坏这个网站后,我拿了他一个服上的另一个网站WEBSHELL,只是没有法提权,看到是支持PHP,ASP,ASPX的全能站。

嘿嘿,想到了什么?

网站里直接添加ASPX,不让传,添加PHP,上传个PHP木马搞定……


小技巧:以后在弄这些垃圾站的时候,他防上传防的再严,并不是防全平台的,比如防asp,可能不防aspx和php,jsp等,那服务器只要认得,就可能轻松拿WEBSHELL.
此文的引用地址:
5 Trackback Pings

# 1: March 10, 2015, 7:48 am, Scarpe Nike Blazer Vintage, Scarpe Nike Blazer Vintage said:

When mention wholesale, might be already regarded as items that can be purchased at a substantially lower money. Hence, it cannot be helped that quite a few people are truly seeking for wholesale such things as furniture, clothing, wholesale handbags and even wholesale timepieces.

Luxury replica rolex watches is high quality luxuries pieces. A famous quote says that your appearance reveals your nature. Since it is said, are able to feel the various of appearance after wearing the Luxury replica rolex watches. Is it so because it reveals the statues on the person the commission crusher luxurious test.

Tag Heuer replica watches uk include the same seem like the original ones. One does try to differentiate them then you will be certainly unsuccessful. So, do not bother towards look. Are going to feel like wearing an original tag Heuer watch. Their designs along with all are same.

All Amazon rolex have specific serial information. These can be easily checked against the state run database. This is an useful involving determining if the watch convincing to choose to buy is good quality. However you should not rely upon this factor alone. There's been an increase in recent associated with unscrupulous sellers taking you authentic Rolex piece apart and also it build up several cheap rolex watces uk. This gives the huge profit margin for your seller. Website traffic watches are a clever mix of both genuine and replica parts it may very tough to spot which they are fakes. Which means that although the serial number could be genuine components may not be 100% previous. Be careful when you are purchasing secondhand Rolex watches and get as much help as you have.

The important essence from the real the dependant on its handcraft and suture. Firstly, when touching the totes, generally, the better you're feeling, the better the high quality of bags are, however, it really doesn't mean that the particular softer leather, the more advantageous. This rely on particular person design respectively. In unique, for some style along with LV, it's necessary to make use of for hard texture. That genuine or not, especially A-level simulation products, their fabric are 'The more you notice the more flexible'. Those with good quality fabric, also issued a glossy sheen, never get old.

Secondly, research. As we know that you have so many online merchants. All watches are sold at different prices. If you like to buy a fabulous watch at good price, you choose to visit some relevant ? nternet sites. They will show you various services let you know the price difference. May perhaps save your and money.

# 2: March 10, 2015, 9:57 pm, Jordan Store, Jordan Store said:

I've been wearing watches since I'm grade 3 at primary type. Now, personally, I have a collection of 10 watches. Ten is nice and clean of big number comparing with many watch fans. But each of the ten watches is loved by me because they carry almost all of my studenthood memories. There are four reasons that I love wearing a watch.

Swiss manufactured replicas. Running or replica are of very high quality this one is the most expensive this other two for this cheap rolex watces uk are produce of precious and semi platinum like gold and rings. And a lot of watch makers might not know that it's a fake for the quality is pretty much closer towards original one.

But bear in mind that sometimes it is less costly to get your own better car than order a watch to match one of the evening dresses. However, you do not want to are reinforced by the cheapest play. This will not work long may possibly not beautify your arm. Then what is staying done?

Or Whether it's a MontBlanc you happen to be searching for, We have those too. Whatever your taste's I'm sure we find what your trying to find. If theres something you don't see, reply to the business we uncover it for you personally personally.

You can just feel how your surrounding will behave after seeing you with Luxury replica rolex watches. Your family, friends, class met, office friends, other folks. Will show you a particular respect have got wear luxurious home market Swiss Duplicate.

Everything remarked above applies to replica watches uk that are just imitations of other brands. A platinum Rolex can hit you up for hundreds of thousands of dollars but a replica molded the next step same watch can be located under 100 dollars. Despite the fact that the feel and function may be the same the replica brands generally aren't made using precious other metals. Even though a wrist watch may be a replica, that doesn't mean how the quality is any below any other watch. Listed here are a few types of watches along with a little information as to how 1 functions.

The date windate is incorrect additionally is a cyclop glass on the datewindow. Whilst the gen does have never a date change pusher as the side, this rep has one itself though it looks petty excellent.

There is often a high demand for such watches, so just buy yours if these types of ever provide the occasion. You can look at yourself lucky if you are going to get a person particular.

# 3: March 11, 2015, 12:07 pm, Offerte Scarpe Nike Blazer, Offerte Scarpe Nike Blazer said:

Do you utilize watches? Well, who don't have any these useful items? Everybody uses and likes types of clocks. Replica watches are all around the globe. People like these clocks being beautiful and at the same time, might sold on relatively cheap rates. Are you aware why these clocks are accessible on inexpensive prices? In the next section, good talk regarding it concern.

He also went on to assure me that there are quite some more people all of the same party who were also wearing replica rolex watches. I gathered that these Rolex replica watches are also known as Swiss Rolex replica several snobs also call them as cheap Rolex fakes. I cannot say much but years have passed my partner and i still treasure the Swiss replica Rolex watch that buddy had give to me on my birthday. People just not keen to wear real watches nowadays. They will rather in order to wear Rolex replica some. Ask them why and they'll reply wrong with the Rolex duplicate? It becomes tough to argue when one sees fantastic quality of watches these Rolex replica are.

The longevity of the watches: generally speaking, the typical life-span of every quartz watch's battery is 5 quite a few years. Although the price of a mechanical watch is high, however the life-span of it is much longer than a quartz watches.

You discover replica watches uk for guys as well as the women. Also, they are that make up all styles, designs and materials which assist them acceptable for all circumstances. With regard to age as well, people numerous age groups can look at the perfect bide time until themselves. However find them in stainless steel, leather and other quality products. The embellishments on options also of great quality which gives them a great finish.

First, replica Breitling watches are much cheaper than created ones. Is actually always known to all that a true Breitling watch would cost at least six $ 100. This is too much for a watch, don't you think? However, a Breitling replica is only a small percentage of the amount of money that is cost by the original a person particular. Therefore, you can buy several cheap rolex watces uk acquiring to break your checking account.

Whatever possibly be your passion for buying a Rolex replica, you are trying to learm all of it before actually planning to get it. Similarly, like any other product, Rolex replicas can be bought in variety of grades globe market, which really can be either a poor high best quality. You also need to be careful of fake dealers and scams, who offer you lucrative prices and tempting offers. A reputed dealer with an awesome back ground should be regarded as while buying Rolex reproductions. Do not forget to check at the warranty period and helpful customer operations.

With a replica rolex watch you get elegance, boldness and fashion, at an affordable. Its a timeless gift, a good looking accessory, a trendy statement thus its an inexpensive extension individuals inner queen. Furthermore, these watches work well and blend in with any outfit, whether it formal or casual as well as any occasion, be it a wedding or a formal ball. Wouldn't all individuals just in order to buy any situation that has a multi perform? Just for that very reason, so many designers are coming on top of unique dresses that can be converted from an office suit with regard to an evening party dress, with the help for the simple jacket or a couple of heels.

Do it today, Find out for yourself and those you love. Swiss Replica Watches have broken the barrier from what they used to be. They come with each of the Swiss Made markings your looking for many.A fraction of the cost, Usually around 10% of the Originals price level.See them for yourself from largest with the best and taking.

# 4: March 12, 2015, 2:25 am, Nike Air Force 41, Nike Air Force 41 said:

If well-developed to just how much do Rolex watches cost when you are thinking about choosing one at a retail location you will need know presently there is a very range. All of this depends on how nice for a Rolex somebody. Sure all Rolex watches are nice, but some have diamonds and some are associated with much more expensive materials.

Some belonging to the more advanced replica watches uk utilize kinetic energy to run on. There's no battery present in Kinetic replica watches uk at virtually. The need alter batteries and the winding for the watch are completely absent. It is simply run substances that are the energy exerted via person who wears thought. An electrical charge is then created to power the watch. As long as the person continues to move, the watch will in order to function. Energy is stored up in the watch from previous uses which allows the watch to function for a time of time when energy isn't being created.

Swiss manufactured replicas. Variety or replica are of very top quality this is much more expensive towards the other two for this cheap rolex watces uk are manufactured from precious and semi golden like gold and expensive diamonds. And a lot of watch makers might not know that it is a fake because quality is just closer towards original any.

With any adverse health watch, these items find that life a lot more convenient. You are carrying out not really need to worry regarding your heart rate, do not require to deal with you are so fat, because the watch can still remind regardless of whether you're in a quality condition not really.

Level 2 - replica rolex watches. These are prepared using Swiss-made ETA movements, which despite their name, are now mostly manufactured, in Most of asia. These replica watches are usually of excellent quality, but continue to come up with various incorrect details for instance cheap watch bands or wrong watch markings.

It likewise important that you choose your seller with pride. If you are buying an unique watch anyone certainly might cant you create a lot of trouble since most of the reputed sellers are trusty. Make sure however that you have a warranty card in working order if ever you have some problem the particular watch. In the matter of replica watches things may get a bit complicated. Wasting inspect the women's watches before buying and also investigate over the origin on the watch. I always advise people to refrain from buying watches that come from Asiatic united states. Similarly I do not encourage the purchasing of watches off site such as eBay. The're a great many scams available and a person know the owner you may run into trouble.

As for your tungsten steel bracelet, this guy is actually hard to meet up with sapphire crystal glass, that continues to be that pitfall. The more rigid, the more sophisticated. My sister's tungsten steel bracelet accidentally drops just a little. clasp is over, but you can find a drawback that dead weight makes your hand not cozy.

The Breitling replicas can be extremely good how the recipients surely will be very honored to receive your items. So, do not hesitate to apply it now to thank those which team you love and care for their company.

# 5: March 12, 2015, 7:00 am, Pre Owned Louis Vuitton Wallet, Pre Owned Louis Vuitton Wallet said:

http://tifinger.dk/list.php?pid=1092Louis Vuitton Official Website

4 条评论

# 1: November 8, 2011, 2:09 pm, Fidelia said:

So ecixted I found this article as it made things much quicker!

# 2: January 20, 2014, 2:15 pm, Coach Bags,Coach Australia,Coach Outlet,Coach Fact said:

">lv-louis-vuitton-outlet-official.junctureco.com</a></em></strong>}

# 3: April 5, 2014, 6:30 am, MichaelGom said:

Hello. And Bye.

# 4: January 1, 2017, 8:35 pm, Deandra said:

Deadly accurate answer. You've hit the bulseeyl!

添加评论

昵称 *

E-mail

Remember Me