21. 4. ????? vs ??? ???
sql injection, ?? ??:alert tcp any any -> any 80 (content:¡±%20and%20¡±;)
GET /index.asp?type=NB¡®%20and%201%3D1%20and%20%27%27%3D%27
GET /get.asp?word=Firefox%20and%20Netscape
GET /read.asp?Status=6%25%27%20and%20%278%27%3D%273
GET /rvp?desc=Get%20a%20body%20and%20Six%20pack%20abs
GET /pview?title=Muscle%20and%20Fitness
GET /index.aspx?ST=SQUARe%20and%208%3D8
GET /music/gate.asp?s2=MUSICN%20and%208%25%3D8
GET /home.asp?List=1%¡¯%20and%20¡¯8%%27%3D%278
?? ??? ?????.
????? ??? ?????? ?? ?? ??? ?????.
22. 4. ????? vs ??? ???
?? ?? ? ?? ?? ?? ?? ?
GET /index.asp?type=NB¡® %20and%20 1%3D1%20and%20%27%27%3D%27
GET /get.asp?word=Firefox %20and%20 Netscape
GET /read.asp?Status=6%25%27 %20and%20 %278%27%3D%273
GET /rvp?desc=Get%20a%20body %20and%20 Six%20pack%20abs
GET /pview?title=Muscle %20and%20 Fitness
GET /index.aspx?ST=SQUARe %20and%20 8%3D8
GET /music/gate.asp?s2=MUSICN %20and%20 8%25%3D8
GET /home.asp?List=1%¡¯ %20and%20 ¡¯8%%27%3D%278
??? ??????
??????? ?????? ??????.
23. ?? ?? ? ?? ?? ?? ?? ?
GET /index.asp?type=NB¡® %20and%20 1=1 and ¡®¡¯=¡®
GET /get.asp?word=Firefox %20and%20 Netscape
GET /read.asp?Status=6%25%27 %20and%20 ¡®8¡¯=¡®3
GET /rvp?desc=Get%20a%20body %20and%20 Six pack abs
GET /pview?title=Muscle %20and%20 Fitness
GET /index.aspx?ST=SQUARe %20and%20 8=8
GET /music/gate.asp?s2=MUSICN %20and%20 8%=8
GET /home.asp?List=1%¡¯ %20and%20 ¡¯8%¡¯=¡®8
4. ????? vs ??? ???
?? ?? ?? ????
URL ???? ??? ???????.