Some penetration ideas and backdoors of online order Stations

Author: black noodle

Now there are many online shopping sites for single-page single products. Many kids shoes think it is difficult to get started and have no idea at all. In fact, some websites are still very simple, I will summarize some of the vulnerabilities and backdoors I have encountered.

ASP websites are basically implemented using programs called Enterprise General Management System XP.

1. Default Database

/Data. asp
/Data. mdb

2. brute-force database

/Inc/conn. asp
/Inc/lconn. asp
/Admin/conn. asp
/Admin/lconn. asp

3. Backdoors (all of which can directly access the database)

/Int/md5s. asp

/Admin/admin_Md5.asp? Key5 = 232265

This page is encrypted. After decryption

4. XSS

The loss also exists in XSS, but I have never studied XSS. I will check the code and test it locally. I hope some experts can give me some advice.

5. Experience

Another part of the more important thing is that you can accumulate some experience by reading more programs. It will certainly be better if you get more similar programs.

Of course there are still a lot of emails that are forwarded directly to other mailboxes, and they are also made using the PHP Order Program. I will introduce it later ~