N-point Host management system password decryption Code program

December 20, 2010, Monday 07:22

Before have written <n Point host management system exploits and defense measures > article, that I feel is not a loophole. This time in the issue of N-point host management system encryption password decryption exploit code program it, hehe. First of all to understand the next n-point host management system password encryption can not be CMD5 encryption. Even if the use of <n Point host management system vulnerabilities and defense measures introduced in the > of the management system of the background is not to get the server. In the N-point host management system to get the permissions of the server is also the use of the database saved SA account and root account to be able to mention the right. But the password is encrypted, no way to get, this time the code used by the program is to call it conn.asp to solve the fan, hehe. Principle here is not careful to say, the relevant code online also has announced, but and I announced that is not the same, use up more than I this much trouble. The code is as follows: <!--#include file= "inc/conn.asp"--> <!--#include file= "inc/siteinfo.asp"--> <!--#include file= "inc/char.asp"--> <% Set Iishost=server. CreateObject ("Npoint.host") X=iishost. Eduserpassword ("nlfpk@ojcocla@e@fekjmfadlalklf@jhoimaho@lcdbaameoekgkm@a", 0) Response.Write X %> Using the method, copy the code, create an arbitrary ASP file, pass it to the target N-point management System Web, and replace the password that needs to be decrypted with the password in the code. In IE browser to browse the newly created and saved ASP puzzle file address, you can display the mystery of the plaintext password. (Don't tell me you don't know how to use it.)