Use legacy Webshell to gain control of web pages

Search Webshell and password brute force hack

Disclaimer: The technology mentioned in this paper can only be used for legitimate purposes such as network security hardening. The author is unable to identify the reader to read the true purpose of this article, please read this article in the scope of domestic law, readers, once the illegal use of this article refers to the technology and violate the laws and regulations of the State, all the adverse consequences caused by the reader's independent responsibility, The author is not responsible for and does not assume any direct indirect or incidental legal liability

In the early 21st century there had been a brilliant period of hackers, and the network after this left a large number of sites after the invasion of the background left behind, by visiting these Webshell we can not personally invade to gain control of a website. So today, let's look at how to use Google to find these webshell.

Let's search for a bit:

Google filetype:asp + Popular Trojan name

Because most of the Webshell are ASP pages, we search for ASP passwords with keywords

The common names are as follows

Please search the full list yourself,

Let's give an example.

It's obvious that this is a lot of Webshell.

Click to enter a

We can try the default password for this ASP Trojan

Next: Try try Tryagain and good luck

Use legacy Webshell to gain control of web pages