In fact, sometimes we need to copy the hash on our own machine during penetration, which is very troublesome. It is not as straightforward as this...
PS: Find md5.asp by yourself ~~ This is available in the include directory of dvbbs.
The following code is used:
| Program code: |
<! -- # Include file = "md5.asp" -->
<%
Public Function ServU (strpass)
Randomize
AA = CHR (INT (97-122 + 1) * RND () + 122 ))
BB = lcase (CHR (INT (65-90 + 1) * RND () + 90 )))
ServU = MD5 (AA & BB & strpass)
ServU = AA & BB & ServU
End Function
Pass = request ("MD5 ")
If Len (PASS) = 0 then pass = "Serv-U password algorithm Demo"
%>
<Head>
<Title> Serv-U cryptographic algorithm </title>
<Meta http-equiv = "Content-Type" content = "text/html; charset = gb2312">
<Style> body, TD, input </style>
</Head>
<Body bgcolor = "# ffffff" text = "#000000">
<Form name = "md5pass" method = "Post">
Plaintext: <input type = "text" name = "MD5" value = "<% = pass %>">
<Input type = "Submit" name = "Submit" value = "Submit">
</Form>
Hash: <input type = text size = 34 maxlength = 16 value = '<% = ServU (PASS) %>'> |
|
