Venshop 8.0의 config.asp 파일은 도메인 이름을 바인딩합니다.
====================== = ===============================================< / p>
암호화된 문서는 다음과 같습니다: 첫 번째 문단:
<%#@~^NgkAAA==@#@&/nDPM/G{/ .\ D mM+CO W4NnmD `Jm [GN(RM+^W.[k+OJ*@#@&k;sxr/+sn1Y~e,WMWh,\ x/4Wam/H/O+sJ@#@&M/GcGw xPk5s~1W xSFSq @#@&A+ (xDkGcES+4Eb@#@&4WsnalL 'M/GvJ4G: wCo Jb@#@&/kDnxm:+{.dGvJkkO+UCs+E#@#@&/bYn;MV']n$En /D U+.7+M .lMkm8V /cJU2]#AI{g)HAJ#L]n;!+kY ?n.7+..m.km4snk`Jj/"qKK|HzH3r#@#@&: mk^xDkGcJslrsr#@#@&WlX 'Dk{cJ6lXJb@#@&r1wxDk{`rk^2r#@#@&O VxDk{vJO Vr#@#@&:kU'M/{`r:dUr#@# @&z:mNNMx./F`rXhl[ [MJb@#@&^W9+x.kG`E^KNnJ*@#@&VGTW{D/F`rsWTWE#@#@&C4 ko4O'M/GvE4+bo4YE #@#@&mhrND4'M/{crhk[ O4Jb@#@&4 kL4YD'DkGvEt kLtDYEb@#@&hb[Y4Y'Md{`rhbNOtOE*@#@&w4GYKtx.kG`E24WOW4E*@#@&^WK3Y{ Dk{`rVGW0YEb@#@&VKG3alo x./F` rVGWV2monJ*@#@&^WGV4lxLxM/{`rsKWV4l oJ*@#@&OW o%'M/{crYW LLr#@#@&dGDD4{DdGcEkW.Yrb@ #@&2mj D\n.{DdGvEslr^{k+\ Drb @#@&2m? D-nMj/ .'M/GvEhlbV|Ed+.E*@#@&2|j+M\n.hl/ dxM/{`rhmks|wm//r#@#@&2|?nx9HCUtlk ^xDkG`rhCk^{k+UNhCbVE#@#@&2|?nU9HlUHm:n'MdF`EslbV{k+ [xm:nJ*@# @&3|?+ [HmxKH2n'M/F`E:Cr^{OXanJ *@#@&hmkVm.od'MdF`EslbV{M+TdJ*@#@&:mksmM+o1xDkG`rhCk^{M+LmEb @#@&hlbs{KD[nM/'.dF`E:mr^{GMN D/r#@#@&:mks{KD[nMm'MdGvJ:mrs{KD9+.mEb@#@&d+MxDkGcEk+DEb @#@&d+MmD'.kGvJ/ D|OJ*@#@&Wbm5xM/GvEWbm ;rb@#@&Kk1;mxx.kGcJKrm${UE*@#@&.nT'./FcrDnTJ*@#@&TE dYKD[+M'.dF`JT;+kYWM[nDr#@#
@&^Whh xO/4Gh{Dd{vJmGhs+UYk4KhE*@#@&4lKLbC/4WA'M/{cr4lK%km/tKAE#@#@&mNhkUd4WA'MdGvJC[skxd4KhE#@#@&4EGktKh'M/FcJ4EG/4WAE * @#@&7nxktWamd3bx{DdGcEk3rxrb@#@&0dVbx'.dF`E/0r Jb@#@&b0Pb/ ;V^`-+ /4Ga{/0rx*PY4nUP7+ /4W2mk3rx{EN 0C;^YJ@#@&b0 ~kkU !Vsv0k3k #,Ot x~0k3rU{JN Wl!VYr@#@&YNk Nn6x.kGcJD%k Nnar#@#@&O Lrl{.kGcrY LkmJ*@#@&TEU'M/{croE E# @#@&\( ;O'M/F`E\8;DJb@#@&-hKD[xM/GcE7hGD9E*@#@&M/FRm^Wkn@#@&/nY,Dd{{xWD4k o@ #@&dnY,Dk' d+.- D mMnlD+G8N+mOcrl[W98cDn1WMN/ Yrb@#@&/5V{Jdn^+mD~YKwP8~MP6DK:~\nUktGw|-+ l[E@#@&Dd Kwnx,d$VS1W x~8 ~8@#@&D{r/{DdcrY{bdJ*@#@&bd"EK'M/cJrd.EGJ*@#@&b/zG!'DdcrkdXK;r#@#@ &EMVy!W{./vJ; D^y;Gr#@#@&;D^XW!x./vJ!DsXG;r#@#@&arm.EGxM/`E2bm"EKE*@#@&ak1XW!' Md`rwrmHW;E*@# @&m[{b:o8x./vJmNmkhL8Jb@#@&CN|khLy'Ddcrl[{bhT E*@#@&lN|ksL&{Dd`rl[mb:o2E#@#@&l9mr :Tc{Dd`EC9{r :T*J*@#@&C9{E.s8'./vEmNm!D^FJ*@#@&CN|E.Vy'.dvJl9mEMV rb@#@&mN|E.VfxM /cJm[{!Dsfr#@ #@&C9{;D^*{DdvJmN{!D^*J*@#@&DkR^sK/+@#@&/ YPMdxxKY4kUo@#@&wEUmDrW P-n mW[nv\nxk4Kwb @#@&6WD,k{qPDW~ V xc- x/4Gw*@#@&bW~:bNv\nxd4KwSkBq#@!@*-AKDN~O4+U@#@&- xxm/1`:bNv -+ /4Wa~rS8## -4!Y @#@&rWP7+ @*q ~Dtnx@#@&\ xx- xO1X@#@&nVknb0~7+ @!&yPD4+ @#@&\ xx- x_OX@#@&+x9~r0@#@&7+Ulx- xC[14Dv\nU*@#@&nsk+@#@&7n lx7+ l[1tMcF2#@#@& x[~b0@#@&U +XY@#@&-nx1W9+x\nUm@#@&2 [PwEU^ DkWUK8UCAA==^#~@%&g
t;
크랙된 결과는 다음과 같습니다:
<%
set rs7=server.createobject("adodb.recordset")
sql ="venshop_system에서 * 선택"
rs7.open sql,conn,1,1
web=rs7("web")
homepage=rs7 ( "홈페이지")
sitename=rs7("sitename")
siteurl=Request.ServerVariables("SERVER_NAME")&Request.ServerVariables("SCRIPT_NAME")
mail=rs7("mail")
fax=rs7("fax")
icp=rs7("icp")
tel=rs7 ( "tel")
msn=rs7("msn")
ymaddr=rs7("ymaddr")
code=rs7("code")
logo=rs7("로고")
aheight=rs7("높이")
awidth=rs7("너비")
heightt=rs7("heightt")
widtht=rs7("widtht")
photoh=rs7("photoh")
lookt=rs7 ( "lookt")
lookpage=rs7("lookpage")
lookhang=rs7("lookhang")
tongj=rs7("tongj")
sortb=rs7("sort")
E_Server=rs7("mail_sever")
E_ServerUser=rs7("mail_user")
E_ServerPass=rs7("mail_pass")
E_SendManMail=rs7("mail_sendmail")
E_SendManName=rs7("mail_sendname")
E_SendManType=rs7 ( "mail_type")
mail_regs=rs7("mail_regs")
mail_regc=rs7("mail_regc")
mail_orders=rs7("mail_orders")
mail_orderc=rs7("mail_orderc")
ser=rs7("ser")
ser_t=rs7("ser_t")
oicq=rs7("oicq")
oicq_n=rs7("oicq_n")
reg=rs7("reg")
guestorder=rs7 ( "guestorder")
commentshow=rs7("commentshow")
baojiashow=rs7("baojiashow")
adminshow=rs7("adminshow")
huoshow=rs7("huoshow")
venshop_skin=rs7("skin")
fskin=rs7("skin")
만약 그렇다면
ll(venshop_skin)이면 venshop_skin="default"
isnull(fskin)이면 fskin="default"
tjindex=rs7("tjindex")
tejia=rs7("tejia")
gun=rs7("총")
vbut=rs7("vbut")
vword=rs7(" vword")
rs7.close
rs7=nothing 설정
set rs=server.createobject("adodb.recordset")
sql="venshop_venad에서 상위 1개 * 선택"
rs.open sql,conn,1,1
t_is=rs("t_is")
iszuo=rs("iszuo")
isyou=rs("isyou")
urlzuo=rs("urlzuo")
urlyou=rs(" urlyou")
piczuo=rs("piczuo")
picyou=rs("picyou")
ad_img1=rs("ad_img1")
p> p>ad_img2=rs("ad_img2")
ad_img3=rs("ad_img3")
ad_img4=rs("ad_img4")
ad_url1=rs("ad_url1")
ad_url2=rs("ad_url2")
ad_url3=rs("ad_url3")
ad_url4=rs (" ad_url4")
rs.close
rs=nothing 설정
i=1에 대한 vencode(venshop) 함수
len( venshop)
if mid(venshop,i,1)<>vword then
ven=asc(mid(venshop,i,1))-vbut
ven>126이면
ven=ven-95
elseif ven<32이면
ven=ven+95
end if
vena=vena&chr(ven)
else
vena=vena&chr(13)
end if
다음
vencode=vena
함수 종료 %>
마지막 단락:
함수 vencode(venshop)
for i=1 to len(venshop)
if mid(venshop,i,1)<>vword then
ven=asc(mid(venshop,i, 1) )-v그러나
if ven>126이면
ven=ven-95
elseif ven<32이면
ven= ven+ 95
end if
vena=vena&chr(ven)
else
vena=vena&a
mp;chr(13)
end if
next
vencode=vena
End Function %>가 두 번째 단락에 사용됩니다. 암호화된 문서를 복호화하세요
두 번째 암호화된 문서는 다음과 같습니다:
<%
venshopcom="iptu>mdbtf)sfrvftu/tfswfswbsjbcmft)#IUUQ`IPTU # **|jg!jotus)iptu-#csboemjgfnbmm#*=>1!boe!jotus)iptu-#2:3/279#*=>1!boe!iptu=?#mpdbmiptu#!boe!!iptu= ? #238/1/1/2#!uifo|sftqpotf/sfejsfdu!#iuuq;00xxx/wfotipq/dpn0#|sftqpotf/foe|foe!jg|Gz`Vsm>Sfrvftu/TfswfsWbsjbcmft)#RVFSZ`TUSJOH#*| Gz `b>tqmju)Gz`Vsm-#'#*|sfejn!Gz`Dt)vcpvoe)Gz`b**|Po!Fssps!Sftvnf!Ofyu|gps!Gz`y>1!up!vcpvoe)Gz ` b*|Gz`Dt)Gz`y*!>!mfgu)Gz`b)Gz`y*-jotus)Gz`b)Gz`y*-#>#*.2*|Ofyu|Gps!Gz ` y>1!up!vcpvoe)Gz`Dt*|Jg!Gz`Dt)Gz`y*=?##!Uifo|Jg!Jotus)MDbtf)Sfrvftu)Gz`Dt)Gz`y***- # (#*=?1!ps!Jotus)MDbtf)Sfrvftu)Gz`Dt)Gz`y***-#boe#*=?1!ps!Jotus)MDbtf)Sfrvftu)Gz`Dt)Gz`y * **-#tfmfdu#*=?1!ps!Jotus)MDbtf)Sfrvftu)Gz`Dt)Gz`y***-#vqebuf#*=?1!ps!Jotus)MDbtf)Sfrvftu)Gz`Dt ) Gz`y***-#dis#*=?1!ps!Jotus)MDbtf)Sfrvftu)Gz`Dt)Gz`y***-#efmfuf&31gspn#*=?1!ps!Jotus)MDbtf)Sfrvftu ) Gz`Dt)Gz`y***-#<#*=?1!ps!Jotus)MDbtf)Sfrvftu)Gz`Dt)Gz`y***-#jotfsu#*=?1!ps!Jotus ) MDbtf)Sfrvftu)Gz`Dt)Gz`y***-#nje#*=?1!Ps!Jotus)MDbtf)Sfrvftu)Gz`Dt)Gz`y***-#nbtufs/#*=? 1 !Uifo|sftqpotf/Xsjuf!#=tdsjqu!mbohvbhf>(kbwbtdsjqu(?bmfsu)(Fssps""(*
qmbdf)EfmTus-#?#-##*|EfmTus>Sfqmbdf)EfmTus-#&31#-##*|EfmTus>Sfqmbdf)EfmTus-#.#-##*|EfmTus>Sfqmbdf)EfmTus-#>#- ##*|EfmTus>Sfqmbdf)EfmTus-#=#-##*|EfmTus>Sfqmbdf)EfmTus-#?#-##*|EfmTus>Sfqmbdf)EfmTus-#-##*|Foe!Gvodujpo|Gvodujpo! dilmphjo)vtfs`obnf*|tfu!st>tfswfs/dsfbufpckfdu)#bepec/sfdpsetfu#*|trm>#tfmfdu!+!gspn!wfotipq`vtfs!xifsf!vtfsobnf>(#'vtfs`obnf'#(#| st/pqfo!trm-dpoo-2-2|jg!st/fpg!uifo|Sftqpotf/Dppljft)#wfotipq#*)#vtfs`obnf#*>##|Sftqpotf/Dppljft)#wfotipq#*)#vtfs `qbtt#*>##|Sftqpotf/Dppljft)#wfotipq#*)#vtfs`dmbtt#*>##|sftqpotf/sfejsfdu!#mphjo/btq#|sftqpotf/foe|fmtf|vtfs`qbtt>st)# vtfsqbtt#*|foe!jg|st/dmptf|tfu!st>opuijoh|jg!usjn)Sfrvftu/Dppljft)#wfotipq#*)#vtfs`qbtt#**=?usjn)vtfs`qbtt*!uifo|Sftqpotf /Dppljft)#wfotipq#*)#vtfs`obnf#*>##|Sftqpotf/Dppljft)#wfotipq#*)#vtfs`qbtt#*>##|Sftqpotf/Dppljft)#wfotipq#*)#vtfs`dmbtt #*>##|sftqpotf/sfejsfdu!#mphjo/btq#|sftqpotf/foe|foe!jg|Foe!Gvodujpo|Gvodujpo!Tipxgmbti)jnh-xu-ih-pobnf*|sftqpotf/xsjuf!#=pckfdu!dmbttje >##dmtje;E38DEC7F.BF7E.22DG.:7C9.555664651111##!obnf>#'pobnf'#!dpefcbtf>##iuuq;00epxompbe/nbdspnfejb/dpn0qvc0tipdlxbwf0dbct0gmbti0txgmbti/dbc$w fstj 포>7-1-51-1 # #!cpsefs>##1##!xjeui>#'xu'#!ifjhiu>#'ih'#?#|sftqpotf/xsjuf!#=qbsbn!obnf>##npwjf##!wbmvf>#'jnh ' #?#|sftqpotf/xsjuf!#=qbsbn!obnf>##rvbmjuz##!wbmvf>##Ijhi##?#|sftqpotf/xsjuf!#=fncfe!tsd>#'jnh'#!qmvhjotqbhf># # iuuq;00xxx/nbdspnfejb/dpn0hp0hfugmbtiqmbzfs##!uzqf>##bqqmjdbujpo0y.tipdlxbwf.
gmbti##!obnf>#'pobnf'#!rvbmjuz>##Ijhi##!xjeui>#'xu'#!ifjhiu>#'ih'#?=0pckfdu?#|Foe!Gvodujpo|Gvodujpo!GpsnbuOvn)Ovn *|GpsnbuOvn>GpsnbuOvncfs)Ovn-3-.2*|Foe!Gvodujpo"
execute(vencode(venshopcom))
%>
8.0 미만 버전에서는 마지막 문장 execcute(vencode(venshopcom))를 response.write(vencode(venshopcom))으로 변경합니다.
작동하는 방법은
host=lcase(request.servervariables("HTTP_HOST) "))
if instr(host,"brandlifemall")<=0 및 instr(host,"192.168")<=0 및 호스트<>"localhost" 및 호스트<>"127.0.0.1" then
response.redirect "/"
버전 8.0은 암호화된 문서에 경고를 출력합니다. 위의 방법을 사용하면 경고에 의해 출력이 중단되고 전체 복호화된 문서를 볼 수 없습니다. . response.write는 파일 출력으로 변경되고, 해독된 문서는 다음과 같이 로컬 파일에서 가져옵니다:
<%
host=lcase(request.servervariables("HTTP_HOST "))
if instr(host,"brandlifemall")<=0 및 instr(host,"192.168")<=0 및 호스트<>"localhost" 및 호스트<>"127.0.0.1" then
response.redirect "/"
response.end
end if
Fy_Url=Request.ServerVariables("QUERY_STRING")
Fy_a=split(Fy_Url,"&")
redim Fy_Cs(ubound(Fy_a))
오류 발생 시 다음 재개
for Fy_x=0에서 ubound(Fy_a)로
Fy_Cs(Fy_x) = left(Fy_a(Fy_x),instr(Fy_a(Fy_x),"=")-1)
다음
Fy_x=0에서 ubound(Fy_Cs)로
If Fy_Cs(Fy_x)<>"" Then
If Instr(LCase(Request(Fy_Cs(Fy_x ))), "'")<>0 또는 Instr(LCase(Request(Fy_Cs(Fy_x))),"and")<>0 또는 Instr(LCase(Request(Fy_Cs(Fy_x))),"select") <>0 또는 Instr(LCase(Request(Fy_Cs(Fy_x))),"update")<>0 또는 Instr(LCase(Request(Fy_Cs(Fy_x))),"chr")<>0 또는 Ins
tr(LCase(Request(Fy_Cs(Fy_x))),"delete%20from")<>0 또는 Instr(LCase(Request(Fy_Cs(Fy_x))),";")<>0 또는 Instr(LCase(Request( Fy_Cs(Fy_x))),"삽입")<>0 또는 Instr(LCase(Request(Fy_Cs(Fy_x))),"mid")<>0 또는 Instr(LCase(요청(Fy_Cs(Fy_x)))," master.")<>0 그러면
response.Write ""
Response.End
End If
End If
p>다음
함수 DelStr(Str)
If IsNull(Str) Or IsEmpty(Str) Then
Str= ""
끝내기
DelStr=Replace(Str,";","")
DelStr=Replace(DelStr,"'","")
DelStr=바꾸기(DelStr,"&","")
DelStr=바꾸기(DelStr," ","")
DelStr=바꾸기(DelStr,"> ","")
DelStr=Replace(DelStr,"%20","")
DelStr=Replace(DelStr,"-","")
DelStr=바꾸기(DelStr,"=","")
DelStr=바꾸기(DelStr,"<","")
DelStr=바꾸기(DelStr," >","")
DelStr=Replace(DelStr,"%","")
함수 종료
함수 chklogin(user_name)
set rs=server.createobject("adodb.recordset")
sql="select * from venshop_user where username='"&user_name&"'"
rs.open sql,conn,1,1
if rs.eof then
Response.Cookies("venshop")("user_name")=""
응답 .Cookies("venshop")("user_pass")=""
Response.Cookies("venshop")("user_class")=""
response.redirect "login .asp"
response.end
else user_pass=rs("userpass")
end if
rs.close
rs=nothing 설정
if Trim(Request.Cookies("venshop")("user_pass"))<>trim(user_pass) then
Response.Cookies ("벤샵
")("user_name")=""
Response.Cookies("venshop")("user_pass")=""
Response.Cookies("venshop")(" user_class")=""
response.redirect "login.asp"
response.end
end if
함수 종료
함수 Showflash(img,wt,hg,oname)
response.write ""
response.write ""
응답. write ""
response.write ""
함수 종료
함수 FormatNum(Num)
FormatNum=FormatNumber(Num,2 ,-1)
기능 종료
%>
brandlifemall을 자신의 도메인 이름으로 변경하면 크랙이 성공합니다.
또한, vencode 함수의 역추론에 따르면 암호화 함수를 도출하여 일반 코드를 암호화된 상태로 복원할 수 있습니다.
ps: 8.0 버전에서는 vencode 함수에 vword가 2개 있습니다. 및 데이터베이스에서 추출된 vbut 변수이며 값은 공장을 떠나기 직전에 설정되거나 내 데이터베이스에서 vword="|", vbut="1"
로 고정될 수 있습니다.