bylake2
\u4e0a\u56de\u6e17\u900f\u4e00\u7ad9\u70b9\uff0cSQLInjection\u6d4b\u8bd5\u65f6\u8fd4\u56de\u8fd9\u4e2a\u9875\u9762<\/p>\n
\u6211\u6655\uff0c\u539f\u6765\u4e0a\u88c5\u4e86\u4e00\u4e2a\u53eb\u201c\u4e00\u6d41\u76d1\u63a7\u62e6\u622a\u7cfb\u7edf\u201d\u7684BT\u73a9\u610f\u513f\uff0c\u626b\u5174\uff01\u67e5\u67e5\u5b83\u8001\u5e95\u5148\u3002<\/p>\n
Google\u4e00\u4e0b\u201c\u4e00\u6d41\u76d1\u63a7\u62e6\u622a\u7cfb\u7edf\u201d\u3002\u539f\u6765\u8fd9\u662f\u5e7f\u5dde\u00d7\u00d7\u79d1\u6280\u516c\u53f8\u5f00\u53d1\u7684\u5185\u5bb9\u76d1\u63a7\u7cfb\u7edf\uff0c\u7528\u6765\u76d1\u63a7\u62e6\u622a\u975e\u6cd5\u7684\uff0c\u5f53\u7136\u4e5f\u5305\u62ecSQL\u6ce8\u5c04\u3002\u5b83\u4e3b\u9875\u4e0a\u8f6f\u4ef6\u529f\u80fd\u4ecb\u7ecd\u8d6b\u7136\u5199\u7740\uff1a\u201c\u8f6f\u4ef6\u53ef\u4ee5\u5168\u9762\u62e6\u622a\u4efb\u4f55\u7684\u5f0f\u7684\u653b\u51fb\uff0c\u5c31\u7b97\u591a\u5dee\u7684\u7a0b\u5e8f\u90fd\u4e0d\u7528\u62c5\u5fc3\u4e86\u201d\u3002\u563f\u563f\uff0c\u5927\u54e5\uff0c\u725b\u76ae\u4e0d\u8981\u5439\u5f97\u592a\u5927\u54df\uff0c\u4e0d\u7136\u600e\u4e48\u597d\u4e0b\u53f0\u554a\u3002<\/p>\n
\u770b\u4ed6\u628a\u8bdd\u8bf4\u5f97\u90a3\u4e48\u7edd\uff0c\u6211\u4e00\u5b9a\u8981\u7ed9\u4ed6\u70b9\u989c\u8272\u77a7\u77a7\u3002\u5475\u5475\uff0c\u4e0d\u662f\u8bf4\u53ea\u6709\u60f3\u4e0d\u5230\u6ca1\u6709\u505a\u4e0d\u5230\u4e48\uff0c\u55ef\uff0c\u8ba9\u6211\u60f3\u60f3\u5148\u3002\u7f51\u4e0a\u6ca1\u6709\u627e\u5230\u90a3\u8f6f\u4ef6\u4e0b\u8f7d\uff0c\u7b97\u5566\uff0c\u5c31\u76f4\u63a5\u5728\u7f51\u7ad9\u4e0a\u6d4b\u8bd5\u597d\u4e86\u3002<\/p>\n
\u7ecf\u8fc7\u51e0\u56de\u5408\u6d4b\u8bd5\uff0c\u6211\u53d1\u73b0\u90a3\u4e2a\u8f6f\u4ef6\u662f\u62e6\u622a\u72ec\u7acb\u7684\u5173\u952e\u8bcd\uff0c\u4e5f\u5c31\u662f\u62e6\u622a\u5b57\u7b26\u4e32\u201cand\u201d\uff0c\u800c\u4e0d\u4f1a\u62e6\u622a\u5305\u542b\u201cand\u201d\u7684\u5b57\u7b26\u4e32\u5982\u201cisland\u201d\u3002\u63d0\u4ea4http:\/\/xxx\/x.asp?x=island1=2\u65f6\u6ca1\u95ee\u9898\uff0c\u800c\u63d0\u4ea4http:\/\/xxx\/x.asp?x=aand1=1\u65f6\u5c31\u88ab\u62e6\u622a\u4e86\u3002<\/p>\n
\u5475\u5475\uff0c\u660e\u767d\u4e86\u5427\uff0c\u5b9e\u9645\u4e0a\u7a0b\u5e8f\u8981\u5224\u522b\u5230\u5e95\u662f\u4e0d\u662f\u5b8c\u5168\u5339\u914d\u771f\u6b63\u62e6\u622a\u7684\u5b57\u7b26\u4e32\u662f\u7a7a\u683c+\u5173\u952e\u8bcd+\u7a7a\u683c\uff08\u672c\u4f8b\u4e2d\u5c31\u662f\u201cand\u201d\uff09\u3002\u5982\u679c\u7528ASP\u4ee3\u7801\u8868\u793a\u7684\u8bdd\u5c31\u662f\uff1a<\/p>\n
IfInstrThen
Response.Write
Response.End
EndIf<\/p>\n
\u62e6\u622a\u539f\u7406\u641e\u61c2\u4e86\uff0c\u95ee\u9898\u662f\u600e\u4e48\u7a81\u7834\u5462\uff1f\u5f80\u4e0b\u770b\u3002<\/p>\n
\u5173\u952e\u5b57\u662f\u8981\u6ce8\u5c04\u8981\u7528\u5230\u7684\uff0c\u4e71\u52a8\u4e0d\u5f97\uff0c\u5c31\u53ea\u6709\u4ece\u7a7a\u683c\u5165\u624b\u4e86\u3002\u5475\u5475\uff0c\u60f3\u60f3\u4ec0\u4e48\u4e1c\u4e1c\u53ef\u4ee5\u4ee3\u66ff\u7a7a\u683c\u554a\uff0c\u5bf9\uff0c\u5c31\u662fTab\uff01\u73b0\u5728\u6211\u4fee\u6539URL\u7528tab\u4ee3\u66ffand\u524d\u540e\u7684\u4e24\u4e2a\u7a7a\u683c\uff0c\u5475\u5475\uff0c\u770b\u770b\u56fe2\u5427\uff08Tab–>\u201c%09\u201d\uff0c\u7a7a\u683c–>\u201c%20\u201d\uff09\u3002<\/p>\n
Yeah\uff0c\u6210\u529f\u5566\uff01\u4f20\u8bf4\u4e2d\u7684\u4e00\u6d41\u76d1\u63a7\u62e6\u622a\u7cfb\u7edf\u88ab\u6211\u4eec\u7ed5\u8fc7\u53bb\u4e86\u3002\u54c8\u54c8\uff0c\u90a3\u4e2a\u4ec0\u4e48\u7cfb\u7edf\u6b63\u597d\u662f\u4e2a\u6f0f\u6d1e\u767e\u51fa\u7684Web\u7a0b\u5e8f\uff0c\u5475\u5475\uff0c\u7ee7\u7eed\u5982\u6cd5\u70ae\u5236\u8fdb\u884cSQL\u6ce8\u5c04\u62ff\u7ba1\u7406\u5458\u5e10\u53f7\u5bc6\u7801\u5f97\uff0c\u90a3\u4e9b\u90fd\u662f\u4f53\u529b\u6d3b\u4e86\uff0c\u7565\u8fc7\u7565\u8fc7\u3002<\/p>\n
\u6709\u4e86WebShell\uff0c\u6267\u884c\u201cnetuser\u201d\u547d\u4ee4\u53c8\u88ab\u4ed6\u62e6\u622a\u4e86\uff08\u8fd9\u4e2a\u53ef\u6076\u7684\u5bb6\u4f19\u2026\u2026\uff09\uff0c\u5475\u5475\uff0c\u5c0fcase\u5566\uff0c\u90a3\u5c31\u6267\u884c\u201cnetuser\u201d\uff08\u4e2d\u95f4\u4e24\u4e2a\u7a7a\u683c\uff09\u5427^_^<\/p>\n
\u5f53\u7136\u8fd9\u79cd\u7528Tab\u4ee3\u66ff\u7a7a\u683c\u7a81\u7834\u9650\u5236\u7684\u65b9\u6cd5\u4e5f\u4e0d\u4ec5\u4ec5\u5c40\u9650\u4e8e\u201c\u4e00\u6d41\u76d1\u63a7\u62e6\u622a\u7cfb\u7edf\u201d\uff0c\u53ea\u8981\u662f\u7c7b\u4f3c\u7684\u8fc7\u6ee4\u65b9\u6cd5\u5c31\u884c\u3002\u6bd4\u5982\u8bf4\u9752\u521b\u6587\u7ae0\u7cfb\u7edf\uff08Version1.5.2.23.7.0\uff09\uff0c\u5b83\u5c31\u662f\u8fd9\u79cd\u8fc7\u6ee4\u65b9\u6cd5\uff0c\u4f46\u662f\u8fd8\u8fc7\u6ee4\u4e86\u201c_\u201d\uff0c\u800c\u5b83\u7684\u6bcf\u4e2a\u8868\u90fd\u662farticle_xxx\u7684\u5f62\u5f0f\uff0c\u7ed3\u679c\u8fd8\u662f\u4e0d\u80fd\u8fdb\u884c\u731c\u89e3\u3002\u7f62\u4f11\uff01<\/p>\n
\u6700\u540e\u987a\u4fbf\u8bf4\u4e0b\uff0c\u4e00\u6d41\u76d1\u63a7\u7cfb\u7edf\u201c\u53ef\u4ee5\u7528\u6237\u4e0a\u4f20\u5230\u670d\u52a1\u5668\u7684\u6bcf\u4e00\u5f20\u56fe\u7247\u201d\u3001\u201c\u5bf9\u4f7f\u7528\u670d\u52a1\u5668\u7684\u7528\u6237\u8fdb\u884c\u5173\u952e\u5b57\u76d1\u63a7\uff0c\u65e0\u8bba\u662f\u901a\u8fc7\u65b9\u5f0f\u4e0a\u4f20\u6216web\u65b9\u5f0f\u4e0a\u4f20\u7684\u6587\u4ef6\u90fd\u53ef\u4ee5\u51c6\u786e\u76d1\u63a7\uff0c\u5c06\u4e0d\u6cd5\u7528\u6237\u7684\u884c\u4e3a\u8bb0\u5f55\u5728\u6848\u201d\u7b49\u529f\u80fd\uff0c\u597d\u50cf\u4fb5\u72af\u9690\u79c1\u6743\u4e86\u2026\u2026<\/p>\n","protected":false},"excerpt":{"rendered":"
bylake2\u4e0a\u56de\u6e17\u900f\u4e00\u7ad9\u70b9\uff0cSQLInjection\u6d4b\u8bd5\u65f6\u8fd4\u56de\u8fd9\u4e2a\u9875\u9762 \u6211\u6655\uff0c\u539f\u6765\u4e0a\u88c5\u4e86\u4e00\u4e2a\u53eb\u201c\u4e00\u6d41\u76d1\u63a7\u62e6\u622a […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1,8],"tags":[],"class_list":["post-655","post","type-post","status-publish","format-standard","hentry","category-1","category-oldblog"],"views":316,"_links":{"self":[{"href":"http:\/\/www.ntxz.net\/index.php?rest_route=\/wp\/v2\/posts\/655","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.ntxz.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.ntxz.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.ntxz.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.ntxz.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=655"}],"version-history":[{"count":1,"href":"http:\/\/www.ntxz.net\/index.php?rest_route=\/wp\/v2\/posts\/655\/revisions"}],"predecessor-version":[{"id":737,"href":"http:\/\/www.ntxz.net\/index.php?rest_route=\/wp\/v2\/posts\/655\/revisions\/737"}],"wp:attachment":[{"href":"http:\/\/www.ntxz.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=655"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.ntxz.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=655"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.ntxz.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=655"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}