index.asp

安全中心整站系统是一个网络安全类整站系统。由七个模块组成

title_to=mid(SqlStr_1(rsP("to_name")),1,to_word)
if mid(SqlStr_1(rsP("to_name")),to_word+1,1)<>"" then title_tod="......" else title_tod="":end if
%>
</td>
</tr>

<tr>
<td width='100%' align='left'>
<a href='index.asp?module=<%=module%>&act=view&type=<%=rsP("typeid")%>&id=<%=rsP("id")%>' title='完整标题: <%=rsP("to_name")%>

所在分类: <%=title_2%>
添加作者: <%=rsP("to_user")%>
添加日期: <%=rsP("to_time00")%>
总共点击: <%=rsP("to_clicks")%> 次

点击查看
'><%=title_to&title_tod%></a></td>
<td nowrap align='left'><%=rsP("to_user")%></td>
<td nowrap align='left'><a href='index.asp?module=<%=module%>&type=<%=rsP("typeid")%>'><%=title_2%></a></td>
<td nowrap align='center'><%=rsP("to_time00")%></td>
<td nowrap align='right'>
<%clicks=rsP("to_clicks")
if clicks=0 then clicks="0" else:end if%><%=clicks%></td>
</tr>
<%rsP.movenext
Next
%>

</table>
</td>
</tr>
</table>
<%else:end if
else:end if%>
<%if act<>"view" then%>
<p><center>
<%if module="tools" then
rsP.movefirst
do while not rsP.eof
i=i+1
	if i=20 then
		ii=ii+1
		i=0
	end if
rsP.movenext
loop
if i>0 then ii=ii+1 else:end if
if ii<>0 then i_all=ii else i_all="0":end if
%>
<p>Page: &nbsp;<%=pageid%> &nbsp; of &nbsp; <%=i_all%></p>
<%rsP.movefirst
i_0=ii+1
do while ii<>0
i_1=i_0-ii
if typeid<>0 then type_page="&type="&typeid else:end if
%>
[&nbsp;<a class=xh href="index.asp?module=<%=module%><%=type_page%>&page=<%=i_1%>"><font size="2"><%=i_1%></font></a>&nbsp;]
<%ii=ii-1%>
<%
loop
else:end if
else:end if%>
<%
'=====================Content=====================
if module="tools" and act="view" then
id_0=request("id")
sql="select * from "&front0&module&" where id="&id_0
set rs=conn.execute(sql)

if rs.eof then
on error resume next
else:end if

clicks=rs("to_clicks")
clicks=clicks+1
sql_clicks="update "&front0&"tools set to_clicks="&clicks&" where id="&id_0
conn.execute(sql_clicks)

type_2=rs("typeid")
if type_2=1 then title_2="扫描探测" else:end if
if type_2=2 then title_2="攻击入侵" else:end if
if type_2=3 then title_2="木马后门" else:end if
if type_2=4 then title_2="嗅探工具" else:end if
if type_2=5 then title_2="网络工具" else:end if
if type_2=6 then title_2="破解工具" else:end if
if type_2=7 then title_2="系统工具" else:end if
if type_2=8 then title_2="编程工具" else:end if
if type_2=9 then title_2="安全防御" else:end if
if type_2=10 then title_2="安全补丁" else:end if
if type_2=11 then title_2="其他工具":end if
%>  
<table border='0' cellspacing='2' cellpadding='2' width='100%'>
<tr align='center' background='images/line.gif'>
<td nowrap background='images/line.gif'>工具类别</td>
<td nowrap background='images/line.gif'>提交者</td>
<td width='100%' heigth='30' background='images/line.gif' class='view2'>工具名称</td>
<td nowrap background='images/line.gif'>发布日期</td>
<td nowrap background='images/line.gif'>点击数</td>
</tr>
<tr align='center' background='images/line.gif'>
<td nowrap background='images/line.gif'>
<%if rs.eof then
response.write "对不起，没有您要查找的内容"
else:end if
%>
<%=title_2%></td>
<td nowrap background='images/line.gif'><%=rs("to_user")%></td>
<td width='100%' heigth='30' background='images/line.gif' class='view2'><%=rs("to_name")%></td>
<td nowrap background='images/line.gif'><%=rs("to_time00")%></td>
<td nowrap background='images/line.gif'><%=rs("to_clicks")%></td>
</tr>
<table><tr>
<td width='2%'></td>
<td align='left'><br><%=rs("to_intr")%><br></td>
<td width='2%'></td>
</tr></table>

<table><tr>
<script>
function MM_openBrWindow(theURL,winName,features) { //v2.0
  window.open(theURL,winName,features);
}
</script>
<td align='center' nowrap background='images/line.gif' width='100%'><font color=blue>下载地址:</font>&nbsp;&nbsp;&nbsp;&nbsp;<img src="images/filebox.gif"><a href="javascript:;" onClick="MM_openBrWindow('download.asp?module=tools&type=<%=rs("typeid")%>&id=<%=rs("id")%>','本地下载','status=no,scrollbars=no,resizable=no,width=500,height=200')">本地下载</a></td>
<td nowrap background='images/line.gif' align='center'><img src='images/add.gif'><a href="javascript:;" onClick="MM_openBrWindow('NetTransport.exe','本地下载','status=no,scrollbars=no,resizable=no,width=500,height=200')"><font color=red>下载Net Transport</font></a></td>
<td nowrap background='images/line.gif' align='center'><img src='images/add.gif'><a href="javascript:;" onClick="MM_openBrWindow('WinRAR-v3.42.exe','本地下载','status=no,scrollbars=no,resizable=no,width=500,height=200')"><font color=red>下载winrar</font></a></td>
<td nowrap background='images/line.gif' align='center'><img src='images/add.gif'><a href="javascript:;" onClick="MM_openBrWindow('help.asp','本地下载','status=no,scrollbars=no,resizable=no,width=500,height=200')"><font color=red>下载帮助</font></a></td></tr>
</table>
</td>
<tr>
<td align='center' nowrap background='images/line.gif' width='100%'><p><a href="javascript:history.back(1);">返回上一页</a></p></td>
</tr>
</tr>
</table>
<p><center>
<%
else:end if%>
<%'=====================================================Holes=====================================================
if module="holes" then
if pageid=0 then pageid=1 else:end if

if act<>"view" then
Set connP = Server.CreateObject("ADODB.Connection")
connP.Open "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=" & Server.MapPath(dbpath)
set rsP = Server.CreateObject("ADODB.RecordSet")
rsP.PageSize = 20
if act="search" then
keyword=request.form("keyword")
searchtype=request.form("searchtype")
title_sql=" and ho_name like '%"&keyword&"%'"
if searchtype<>0 then
type_sql=" and typeid="&searchtype
else:end if 
else:end if
sql="select * from "&front0&module&" where 1=1 "&type_sql&title_sql&" order by id desc"
rsP.Open sql, connP, 1
if rsP.eof then
on error resume next
response.write "对不起，没有您要查找的内容"		  
else
rsP.AbsolutePage = pageid
end if

	For J = 1 To rsP.PageSize
		If rsP.EOF Then Exit For

type_3=rsP("typeid")
if type_3=1 then title_3="远程进入" else:end if
if type_3=2 then title_3="权限提升" else:end if
if type_3=3 then title_3="拒绝服务":end if
if type_3=4 then title_3="脚本漏洞":end if
if type_3=5 then title_3="信息泄露":end if
if type_3=6 then title_3="其他类型":end if	  

title_ho=mid(SqlStr_1(rsP("ho_name")),1,ho_word)
if mid(SqlStr_1(rsP("ho_name")),ho_word+1,1)<>"" then title_hod="......" else title_hod="":end if
%>
</td>
</tr>

<tr>
<td width='100%' align='left'>
<a href='index.asp?module=<%=module%>&act=view&type=<%=rsP("typeid")%>&id=<%=rsP("id")%>' title='完整标题: <%=rsP("ho_name")%>

所在分类: <%=title_3%>
添加作者: <%=rsP("ho_user")%>
漏洞属性: <%=rsP("ho_p")%>
添加日期: <%=rsP("ho_time00")%>
总共点击: <%=rsP("ho_clicks")%> 次

点击查看
'><%=title_ho&title_hod%></a></td>
<td nowrap align='left'><%=rsP("ho_user")%></td>
<td nowrap align='left'><a href='index.asp?module=<%=module%>&type=<%=rsP("typeid")%>'><%=title_3%></a></td>
<td nowrap align='center'><%=rsP("ho_p")%></td>
<td nowrap align='center'><%=rsP("ho_time00")%></td>
<td nowrap align='right'>
<%clicks=rsP("ho_clicks")
if clicks=0 then clicks="0" else:end if%><%=clicks%></td>
</tr>
<%rsP.movenext
Next
%>

</table>
</td>
</tr>
</table>
<%else:end if
else:end if%>
<%if act<>"view" then%>
<p><center>
<%if module="holes" then
rsP.movefirst
do while not rsP.eof
i=i+1
	if i=20 then
		ii=ii+1
		i=0
	end if
rsP.movenext
loop
if i>0 then ii=ii+1 else:end if
if ii<>0 then i_all=ii else i_all="0":end if
%>
<p>Page: &nbsp;<%=pageid%> &nbsp; of &nbsp; <%=i_all%></p>
<%rsP.movefirst
i_0=ii+1
do while ii<>0
i_1=i_0-ii
if typeid<>0 then type_page="&type="&typeid else:end if
%>
[&nbsp;<a class=xh href="index.asp?module=<%=module%><%=type_page%>&page=<%=i_1%>"><font size="2"><%=i_1%></font></a>&nbsp;]
<%ii=ii-1%>
<%
loop
else:end if
else:end if%>
<%
'=====================Content=====================
if module="holes" and act="view" then
id_0=request("id")
sql="select * from "&front0&module&" where id="&id_0
set rs=conn.execute(sql)

if rs.eof then
on error resume next
else:end if

clicks=rs("ho_clicks")
clicks=clicks+1
sql_clicks="update "&front0&"holes set ho_clicks="&clicks&" where id="&id_0
conn.execute(sql_clicks)

type_3=rs("typeid")
if type_3=1 then title_3="远程进入" else:end if
if type_3=2 then title_3="权限提升" else:end if
if type_3=3 then title_3="拒绝服务":end if
if type_3=4 then title_3="脚本漏洞":end if
if type_3=5 then title_3="信息泄露":end if
if type_3=6 then title_3="其他类型":end if
%>  
<table border='0' cellspacing='2' cellpadding='2' width='100%'>
<tr align='center' background='images/line.gif'>
<td nowrap background='images/line.gif'>文章类别</td>
<td nowrap background='images/line.gif'>提交者</td>
<td nowrap background='images/line.gif'>漏洞属性</td>
<td width='100%' heigth='30' background='images/line.gif' class='view2'>文章标题</td>
<td nowrap background='images/line.gif'>漏洞等级</td>
<td nowrap background='images/line.gif'>发布日期</td>
<td nowrap background='images/line.gif'>点击数</td>
</tr>
<tr align='center' background='images/line.gif'>
<td nowrap background='images/line.gif'>
<%if rs.eof then
response.write "对不起，没有您要查找的内容"
else:end if
%>
<%=title_3%></td>
<td nowrap background='images/line.gif'><%=rs("ho_user")%></td>
<td nowrap background='images/line.gif'><%=rs("ho_p")%></td>
<td width='100%' heigth='30' background='images/line.gif' class='view2'><%=rs("ho_name")%></td>
<td nowrap background='images/line.gif'><%=rs("ho_level")%></td>
<td nowrap background='images/line.gif'><%=rs("ho_time00")%></td>
<td nowrap background='images/line.gif'><%=rs("ho_clicks")%></td>
</tr>
<table><tr>
<td width='2%'></td>
<td align='left'><p><b><font color=blue>============受影响系统============</font></b></p><br><%=rs("ho_system")%><br></td>
<td width='2%'></td></tr>
<tr><td width='2%'></td>
<td align='left'><br><br><p><b><font color=blue>=============漏洞描述=============</font></b></p><br><%=rs("ho_content0")%><br></td>
<td width='2%'></td></tr>
<tr><td width='2%'></td>
<td align='left'><br><br><p><b><font color=blue>=============攻击代码=============</font></b></p><br><%=rs("ho_code")%><br></td>
<td width='2%'></td>
</tr></table>
<tr>
<td align='center' nowrap background='images/line.gif' width='100%'><p><a href="javascript:history.back(1);">返回上一页</a></p></td>
</tr>
</td>
</tr>
</table>
<p><center>
<%
else:end if%>
<%'=====================================================Exploits=====================================================
if module="exploits" then
if pageid=0 then pageid=1 else:end if

if act<>"view" then
Set connP = Server.CreateObject("ADODB.Connection")
connP.Open "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=" & Server.MapPath(dbpath)
set rsP = Server.CreateObject("ADODB.RecordSet")
rsP.PageSize = 20
if act="search" then
keyword=request.form("keyword")
searchtype=request.form("searchtype")
title_sql=" and ex_name like '%"&keyword&"%'"
if searchtype<>0 then
type_sql=" and typeid="&searchtype
else:end if 
else:end if
sql="select * from "&front0&module&" where 1=1 "&type_sql&title_sql&" order by id desc"
rsP.Open sql, connP, 1
if rsP.eof then
on error resume next
response.write "对不起，没有您要查找的内容"		  
else
rsP.AbsolutePage = pageid
end if

	For J = 1 To rsP.PageSize
		If rsP.EOF Then Exit For

type_4=rsP("typeid")
if type_4=1 then title_4="BSD" else:end if
if type_4=2 then title_4="Linux" else:end if
if type_4=3 then title_4="Windows":end if
if type_4=4 then title_4="Other":end if

title_ex=mid(SqlStr_1(rsP("ex_name")),1,ex_word)
if mid(SqlStr_1(rsP("ex_name")),ex_word+1,1)<>"" then title_exd="......" else title_exd="":end if
%>
</td>
</tr>

<tr>
<td width='100%' align='left'>
<a href='index.asp?module=<%=module%>&act=view&type=<%=rsP("typeid")%>&id=<%=rsP