aspx version of the kitchen knife a word, left back door dedicated

Source: Internet
Author: User

first explain why you should do this thing:
It is well known that. NET words cannot be inserted into a file unless that page is written in JScript, but now it appears that the JScript market is very low and that the. NET stations encountered are basically C #. Creating a new shell is too obvious, and the eval is directly out of the mercy of the Webshell scan tool. If the power is not right, then after a period of time to open often face is a big 404.
In conclusion , using. NET to load the characteristics of the class library in the bin directory and the namespace this magical thing has written this program, put the file in the Bin directory and insert the calling code in the file. Maybe you would say that the bin directory is not more obvious? Here to illustrate, I believe many of the management of apes/webmasters do not see the habit of Bin directory, and management ape/webmaster is not necessarily a C # program ape. If you are such a management ape/webmaster, see a named System.WebServices.dll, copyright is written by Microsoft, the product name is the. Net Framework class Library will you delete it?
of course, this method is not a clever management ape, but the traditional way is also hidden. Maybe it's a little bit of a chicken, but it may not be useful at some point.
In addition, limited to the interface provided by the chopper, the program function is far from complete, the corresponding shell is under development, will be with more powerful features, please look forward to.
(features that will be provided later: one-click Pants, registry management, execution of programs with other user rights, etc.)

0x02 instructions for use
One, copy the System.WebServices.dll to the bin subdirectory of the Web site root directory.
Second, insert <%webservices.showrunnerversion ();%> and access in any. NET page, the authorization and disclaimer page appears to indicate that the call was successful.
Third, remove the code inserted in the second step, reinsert <%webservices.initalizewebservices ("fuck");%>, where fuck is the required password for the chopper connection.
iv. use Chinese kitchen knife connection, type Choose Customize, password is the password agreed in the third step.

0x03 Note
One, the program ignores precompilation, the code can be inserted in any ASPX page, if the connection fails because in the previous code (. cs or pre-compiled library) call the Response.End () method, please replace the page. If it is inserted into the corresponding. cs code file of the page, remove the script tag <%%> and insert it into the corresponding code block of the Page_Load method.
second, because the chopper for the Customize connection method is non-encrypted, so the security dog and other defense software will intercept the query database and other operations, encountered this situation, please swap with. NET chopper a sentence or use other script query (the shell will be swapped with encrypted connection).
third, the discovery of bugs or suggestions, please go to the rural People's blog, Grass mud Horse home message, after all, the egg is painful things also please forgive me.
Iv. This procedure is only for learning. NET programming, and anyone who uses it must build a test site and invoke the Webservices.showrunnerversion () method in the page to read the authorization and disclaimer. I do not bear any legal liability for the consequences of improper use.

aspx version of the kitchen knife a word, left back door dedicated

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.