Webshell with backdoor is still used

Many of my friends have used webshells. Basically, they have added passwords...

However, if you don't see the source code, it's hard to test whether it has any backdoors. Maybe you want to work for someone else...

Below paste a very simple method, do not throw an egg (asp OH)

Insert at the beginning of the Code:

 

<% If request ("xxx") = "123" then %>

... Body

<% End if %>

That's easy. When logging on to webshell, don't forget to add it after the webshell address? XXXXX = 123

XXX and 123 can be replaced at will

In this way, even if the person who adds the backdoor knows the backdoor address and password, opening the backdoor is just a blank network.