mirror of
https://github.com/tennc/webshell
synced 2024-11-10 05:44:11 +00:00
615 lines
24 KiB
Text
615 lines
24 KiB
Text
|
<%
|
|||
|
Dim Report
|
|||
|
PASSWORD="admin" '<27><><EFBFBD><EFBFBD>
|
|||
|
VERSION="" '
|
|||
|
URL=Request.ServerVariables("URL")
|
|||
|
FileName=Right(URL,Len(URL)-InStrRev(URL,"/"))
|
|||
|
ServerName=Request.Servervariables("SERVER_NAME")
|
|||
|
ServerPort=":"&Request.ServerVariables("SERVER_PORT")
|
|||
|
WebSiteRoot=Server.MapPath("\")
|
|||
|
CurrentlyRoot=Server.MapPath(".")
|
|||
|
|
|||
|
RQSact=Request.QueryString("act")
|
|||
|
RQSFileManager=Request.QueryString("filemanager")
|
|||
|
RQSFilePath=Request.QueryString("filepath")
|
|||
|
|
|||
|
If RQSact="login" Then
|
|||
|
If Request.Form("pwd")=PASSWORD Then Session("KOA")=1
|
|||
|
End If
|
|||
|
|
|||
|
Set FSO=Server.CreateObject("Scripting.FileSystemObject")
|
|||
|
|
|||
|
%>
|
|||
|
<style type="text/css">
|
|||
|
body,td,th {font-size: 12px;}
|
|||
|
.style1 {background-color: #0033CC;}
|
|||
|
.style2 {background-color: #FFFFFF; height:30px;}
|
|||
|
</style>
|
|||
|
<script type="text/javascript">
|
|||
|
function setNone(t) {
|
|||
|
document.getElementById('koaAsp').style.display='none';
|
|||
|
document.getElementById('koaQT').style.display='none';
|
|||
|
document.getElementById('koaSF').style.display='none';
|
|||
|
document.getElementById(t).style.display='';
|
|||
|
}
|
|||
|
function setScanMode() {
|
|||
|
document.getElementById("scanForm").submit();
|
|||
|
document.getElementById('scanButton').disabled=true;
|
|||
|
document.getElementById('scanButton').value='ɨ<><C9A8><EFBFBD>С<EFBFBD>';
|
|||
|
document.getElementById('scanMode').innerHTML='<27><><EFBFBD><EFBFBD>ɨ<EFBFBD><C9A8><EFBFBD>У<EFBFBD><D0A3><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ĵȴ<C4B5><C8B4><EFBFBD><EFBFBD><EFBFBD>';
|
|||
|
}
|
|||
|
</script>
|
|||
|
</head>
|
|||
|
<body>
|
|||
|
<%If Session("KOA")<>1 Then%>
|
|||
|
<div>
|
|||
|
<form method="post" action="?act=login">
|
|||
|
<09><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>admin:<input name="pwd" type="password" size="15"><input type="submit" name="Submit" value="<22>ύ">
|
|||
|
</form>
|
|||
|
</div>
|
|||
|
<%
|
|||
|
Else
|
|||
|
If RQSact<>"scan" And RQSFileManager="" Then
|
|||
|
%>
|
|||
|
<form action="?act=scan" method="post" name="form" id="scanForm">
|
|||
|
<table cellspacing="1" cellpadding="0" class="style1">
|
|||
|
<tr>
|
|||
|
<td colspan="2" class="style2"><center><h1>KOA ASP<53><50> WebShellɨ<6C>蹤<EFBFBD><E8B9A4></h1></center></td>
|
|||
|
</tr>
|
|||
|
<tbody id="scanMode" class="style2">
|
|||
|
<tr>
|
|||
|
<td class="style2">
|
|||
|
<b><3E><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ҫ<EFBFBD><D2AA><EFBFBD><EFBFBD><EFBFBD><EFBFBD>·<EFBFBD><C2B7><EFBFBD><EFBFBD></b><input name="path" type="text" value="\" size="30">*<br>
|
|||
|
<09><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>д<EFBFBD><D0B4><EFBFBD><EFBFBD>,<2C><><EFBFBD>硰E:\wwwroot<6F><74>;<3B>\<5C><>Ϊ<EFBFBD><CEAA><EFBFBD><EFBFBD><EFBFBD><EFBFBD>վ;<3B><>.<2E><>Ϊ<EFBFBD><CEAA><EFBFBD>ļ<EFBFBD><C4BC><EFBFBD><EFBFBD><EFBFBD>Ŀ¼
|
|||
|
</td>
|
|||
|
<td class="style2"><input type="button" value="<22><>ʼɨ<CABC><C9A8>" id="scanButton" onclick="setScanMode();"></td>
|
|||
|
</tr>
|
|||
|
<tr>
|
|||
|
<td colspan="2" class="style2">
|
|||
|
<09><>ѡ<EFBFBD><D1A1>ɨ<EFBFBD>跽ʽ<E8B7BD><CABD>
|
|||
|
<input name="radiobutton" type="radio" value="koa" onclick="setNone('koaAsp')" checked><3E><>ľ<EFBFBD><C4BE>(<28><><EFBFBD><EFBFBD>Դ)
|
|||
|
<input name="radiobutton" type="radio" value="qt" onclick="setNone('koaQT')"><3E><><EFBFBD><EFBFBD>IIS<49><53><EFBFBD><EFBFBD>©<EFBFBD><C2A9><EFBFBD><EFBFBD><EFBFBD>ļ<EFBFBD>
|
|||
|
<input name="radiobutton" type="radio" value="sf" onclick="setNone('koaSF')"><3E><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ļ<EFBFBD>
|
|||
|
</td>
|
|||
|
</tr>
|
|||
|
<tr>
|
|||
|
<td colspan="2" class="style2">
|
|||
|
<b><3E><><EFBFBD><EFBFBD>˵<EFBFBD><CBB5></b><3E><><br>
|
|||
|
<span id="koaAsp">
|
|||
|
<09><><EFBFBD>Һ<EFBFBD><EFBFBD><D7BA>Ϊasp,asa,cdx,cer,aspx<70><78>ľ<EFBFBD><C4BE><br>
|
|||
|
<09><><EFBFBD><EFBFBD>Ŀ¼<C4BF><C2BC><EFBFBD>ļ<EFBFBD><C4BC><EFBFBD><EFBFBD>࣬<EFBFBD><E0A3AC><EFBFBD>ű<D7BD><C5B1><EFBFBD>ʱ<EFBFBD><CAB1>
|
|||
|
</span>
|
|||
|
<span id="koaQT" style="display:none">
|
|||
|
<09><><EFBFBD><EFBFBD>IIS<49><53><EFBFBD><EFBFBD>©<EFBFBD><C2A9><EFBFBD><EFBFBD><EFBFBD>ļ<EFBFBD><C4BC><EFBFBD><EFBFBD><EFBFBD>Щ<EFBFBD>ļ<EFBFBD><C4BC><EFBFBD>һ<EFBFBD><D2BB><EFBFBD><EFBFBD>ľ<EFBFBD><C4BE><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ҫ<EFBFBD>ֶ<EFBFBD><D6B6>鿴<br>
|
|||
|
<09><><EFBFBD><EFBFBD>"D:\WEBROOT\website\hack.asp\a.gif"<22><><br>
|
|||
|
"D:\WEBROOT\website\hack.asp;.gif"һ<><D2BB><EFBFBD><EFBFBD><EFBFBD>ļ<EFBFBD><C4BC>ܲ鵽
|
|||
|
</span>
|
|||
|
<span id="koaSF" style="display:none">
|
|||
|
---------------------- <20>轫<EFBFBD><E8BDAB><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>д<EFBFBD><D0B4><EFBFBD><EFBFBD> ------------------<br><br>
|
|||
|
<09><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ݣ<EFBFBD><input name="Search_Content" type="text" size="20"> Ҫ<><D2AA><EFBFBD>ҵ<EFBFBD><D2B5>ַ<EFBFBD><D6B7><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ֻ<EFBFBD><D6BB><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ڼ<EFBFBD><DABC><EFBFBD><br>
|
|||
|
<09><EFBFBD><DEB8><EFBFBD><EFBFBD>ڣ<EFBFBD><input name="Search_Date" type="text" value="<%=Left(Now(),InStrRev(now(),"-")-1)%>" size="20">* <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>;<3B><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>д<a href="#" onClick="javascript:form.Search_Date.value='ALL'">ALL</a><br>
|
|||
|
<09>ļ<EFBFBD><C4BC><EFBFBD><EFBFBD>ͣ<EFBFBD><input name="Search_FileExt" value="*" size="20">* <20><><EFBFBD><EFBFBD>֮<EFBFBD><D6AE><EFBFBD><EFBFBD>,<2C><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>*<2A><>ʾ<EFBFBD><CABE><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
|
|||
|
</span>
|
|||
|
</td>
|
|||
|
</tr>
|
|||
|
</tbody>
|
|||
|
<tr>
|
|||
|
<td colspan="2" class="style2"><3E>汾<EFBFBD><E6B1BE>:<%=VERSION%> <20><>Ȩ<EFBFBD><C8A8><EFBFBD><EFBFBD>:<a href="http://tophack.net/">http://tophack.net/</a> <20><>ӭ<EFBFBD><D3AD><EFBFBD><EFBFBD><EFBFBD>ƹ㣬<C6B9><EFBFBD><DEB8>뱣<EFBFBD><EBB1A3><EFBFBD><EFBFBD>Ȩ<EFBFBD><C8A8></td>
|
|||
|
</tr>
|
|||
|
</table>
|
|||
|
</form>
|
|||
|
<%
|
|||
|
ElseIf RQSFileManager<>"" Then
|
|||
|
On Error Resume Next
|
|||
|
If RQSFileManager="delfile" Then
|
|||
|
Call FSO.DeleteFile(RQSFilePath,True)
|
|||
|
ChkErr(Err)
|
|||
|
Response.Write "<script>alert('ɾ<><C9BE><EFBFBD>ɹ<EFBFBD>');window.open('','_self','');window.close();</script>"
|
|||
|
ElseIf RQSFileManager="savefile" Then
|
|||
|
FileContent=Request.Form("fileContent")
|
|||
|
Set oFile=FSO.OpenTextFile(RQSFilePath,2,True)
|
|||
|
oFile.Write FileContent
|
|||
|
oFile.Close
|
|||
|
ChkErr(Err)
|
|||
|
Response.Write "<script>alert('<27>ijɹ<C4B3>');window.open('','_self','');window.close();</script>"
|
|||
|
ElseIf RQSFileManager="editfile" Then
|
|||
|
Set oFile=FSO.OpenTextFile(RQSFilePath)
|
|||
|
ChkErr(Err)
|
|||
|
FileTxt=Server.HtmlEncode(oFile.ReadAll())
|
|||
|
%>
|
|||
|
<table border="1" cellpadding="0" cellspacing="0" style="table-layout:fixed;word-break:break-all;width:100%;">
|
|||
|
<tr>
|
|||
|
<th><3E><><%=RQSFilePath%><3E><><EFBFBD>ļ<EFBFBD><C4BC><EFBFBD><EFBFBD><EFBFBD></th>
|
|||
|
</tr>
|
|||
|
<tr>
|
|||
|
<td><a href="?filemanager=delfile&filepath=<%=tURLEncode(RQSFilePath)%>" onClick="return confirm('ȷ<><C8B7>ɾ<EFBFBD><C9BE>?')">ɾ<><C9BE></a> <a href="#" onClick="if(confirm('ȷ<>ϱ<EFBFBD><CFB1><EFBFBD><EFBFBD><EFBFBD>?')){document.getElementById('saveForm').submit();}else{return false;}"><3E><><EFBFBD><EFBFBD></a> <a href="javascript:window.open('','_self','');window.close();"><3E>ر<EFBFBD></a> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ʾ<EFBFBD><CABE><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>㿴<EFBFBD><E3BFB4><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ĵ<EFBFBD><C4B4><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>룬<EFBFBD>벻Ҫʹ<D2AA>ñ<EFBFBD><C3B1><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><DEB8>ļ<EFBFBD><C4BC><EFBFBD></td>
|
|||
|
</tr>
|
|||
|
<tr>
|
|||
|
<td><form action="?filemanager=savefile&filepath=<%=tURLEncode(RQSFilePath)%>" method="post" id="saveForm"><textarea name="fileContent" style="width:1000px;height:530px;"><%=FileTxt%></textarea></form></td>
|
|||
|
</tr>
|
|||
|
<tr>
|
|||
|
<td><a href="?filemanager=delfile&filepath=<%=tURLEncode(RQSFilePath)%>" onClick="return confirm('ȷ<><C8B7>ɾ<EFBFBD><C9BE>?')">ɾ<><C9BE></a> <a href="#" onClick="if(confirm('ȷ<>ϱ<EFBFBD><CFB1><EFBFBD><EFBFBD><EFBFBD>?')){document.getElementById('saveForm').submit();}else{return false;}"><3E><><EFBFBD><EFBFBD></a> <a href="javascript:window.open('','_self','');window.close();"><3E>ر<EFBFBD></a></td>
|
|||
|
</tr>
|
|||
|
</table>
|
|||
|
<%
|
|||
|
Else
|
|||
|
Set oFile=FSO.OpenTextFile(RQSFilePath)
|
|||
|
ChkErr(Err)
|
|||
|
FileTxt=Server.HtmlEncode(LCase(oFile.ReadAll()))
|
|||
|
%>
|
|||
|
<table border="1" cellpadding="0" cellspacing="0" style="table-layout:fixed;word-break:break-all;width:100%">
|
|||
|
<tr>
|
|||
|
<th><3E><><%=RQSFilePath%><3E><><EFBFBD>ļ<EFBFBD><C4BC><EFBFBD><EFBFBD><EFBFBD> Σ<>սű<D5BD><C5B1>Ѹ<EFBFBD><D1B8><EFBFBD><EFBFBD>Ӵ<EFBFBD></th>
|
|||
|
</tr>
|
|||
|
<tr>
|
|||
|
<td><a href="?filemanager=delfile&filepath=<%=tURLEncode(RQSFilePath)%>" onClick="return confirm('ȷ<><C8B7>ɾ<EFBFBD><C9BE>?')">ɾ<><C9BE></a> <a href="?filemanager=editfile&filepath=<%=tURLEncode(RQSFilePath)%>"><3E>༭</a> <a href="javascript:window.open('','_self','');window.close();"><3E>ر<EFBFBD></a> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ʾ<EFBFBD><CABE><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>㿴<EFBFBD><E3BFB4><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ĵ<EFBFBD><C4B4><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>룬<EFBFBD>벻Ҫʹ<D2AA>ñ<EFBFBD><C3B1><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><DEB8>ļ<EFBFBD><C4BC><EFBFBD></td>
|
|||
|
</tr>
|
|||
|
<tr>
|
|||
|
<td><%=HeightLightCode(Replace(FileTxt,vbNewLine,"<br/>"))%></td>
|
|||
|
</tr>
|
|||
|
<tr>
|
|||
|
<td><a href="?filemanager=delfile&filepath=<%=tURLEncode(RQSFilePath)%>" onClick="return confirm('ȷ<><C8B7>ɾ<EFBFBD><C9BE>?')">ɾ<><C9BE></a> <a href="?filemanager=editfile&filepath=<%=tURLEncode(RQSFilePath)%>"><3E>༭</a> <a href="javascript:window.open('','_self','');window.close();"><3E>ر<EFBFBD></a></td>
|
|||
|
</tr>
|
|||
|
</table>
|
|||
|
<%
|
|||
|
End If
|
|||
|
Set oFile=Nothing
|
|||
|
Else
|
|||
|
Server.ScriptTimeout=9999999
|
|||
|
FormRB=Request.Form("radiobutton")
|
|||
|
FormPath=Request.Form("path")
|
|||
|
FormSD=Request.Form("Search_Date")
|
|||
|
FormSFE=Request.Form("Search_FileExt")
|
|||
|
If FormPath="" Then
|
|||
|
Response.Write("<22><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ҫɨ<D2AA><C9A8><EFBFBD><EFBFBD>Ŀ¼<br><br><a href='"&URL&"'><3E><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD></a>")
|
|||
|
Response.End
|
|||
|
End If
|
|||
|
If FormPath="\" Then
|
|||
|
TmpPath=WebSiteRoot
|
|||
|
SearchType=1
|
|||
|
ElseIf FormPath="." Then
|
|||
|
TmpPath=CurrentlyRoot
|
|||
|
SearchType=2
|
|||
|
Else
|
|||
|
TmpPath=FormPath
|
|||
|
End If
|
|||
|
Timer1=Timer
|
|||
|
Sun=0
|
|||
|
SumFiles=0
|
|||
|
SumFolders=1
|
|||
|
If FormRB="koa" Then
|
|||
|
DimFileExt="asp,asa,cer,cdx,aspx,cgi,php,php3,php4,php5"
|
|||
|
Call ShowAllFileKOA(TmpPath)
|
|||
|
ElseIf FormRB="qt" Then
|
|||
|
Call ShowAllFileQT(TmpPath)
|
|||
|
Else
|
|||
|
If FormPath="" Or FormSD="" Or FormSFE="" Then
|
|||
|
Response.Write("<22><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ȫ<EFBFBD><C8AB>ˡ<EFBFBD>Ѵ<EFBFBD><D1B4><EFBFBD><br><br><a href='"&URL&"'><3E><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD></a>")
|
|||
|
Response.End
|
|||
|
End If
|
|||
|
DimFileExt=FormSFE
|
|||
|
Call ShowAllFileSF(TmpPath)
|
|||
|
End If
|
|||
|
%>
|
|||
|
<table width="100%" border="0" cellpadding="0" cellspacing="0">
|
|||
|
<tr>
|
|||
|
<a href='<%=URL%>'><3E><><EFBFBD><EFBFBD>ʹ<EFBFBD><CAB9><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ʽɨ<CABD><C9A8></a><th>WebShell(ľ<><C4BE>) ɨ<><C9A8><EFBFBD><EFBFBD><EFBFBD><EFBFBD></th>
|
|||
|
</tr>
|
|||
|
<tr>
|
|||
|
<td style="padding:5px;line-height:170%;clear:both;font-size:12px">
|
|||
|
<table width="100%" border="0" cellpadding="0" cellspacing="0">
|
|||
|
<tr>
|
|||
|
<td valign="top">
|
|||
|
<table width="100%" border="1" cellpadding="0" cellspacing="0" style="padding:5px;line-height:170%;clear:both;font-size:12px">
|
|||
|
<tr>
|
|||
|
<%If FormRB="koa" Then%>
|
|||
|
<td width="30%"><3E>ļ<EFBFBD><C4BC><EFBFBD><EFBFBD><EFBFBD>·<EFBFBD><C2B7></td>
|
|||
|
<td width="18%"><3E><><EFBFBD><EFBFBD><EFBFBD><EFBFBD></td>
|
|||
|
<td width="40%"><3E><><EFBFBD><EFBFBD></td>
|
|||
|
<td width="12%"><3E><><EFBFBD><EFBFBD>/<2F><EFBFBD>ʱ<EFBFBD><CAB1></td>
|
|||
|
<%Else%>
|
|||
|
<td width="60%"><3E>ļ<EFBFBD><C4BC><EFBFBD><EFBFBD><EFBFBD>·<EFBFBD><C2B7></td>
|
|||
|
<td width="20%"><3E>ļ<EFBFBD><C4BC><EFBFBD><EFBFBD><EFBFBD>ʱ<EFBFBD><CAB1></td>
|
|||
|
<td width="20%"><3E><EFBFBD>ʱ<EFBFBD><CAB1></td>
|
|||
|
<%End If%>
|
|||
|
</tr>
|
|||
|
<%=Report%>
|
|||
|
</table>
|
|||
|
</td>
|
|||
|
</tr>
|
|||
|
</table>
|
|||
|
</td></tr></table>
|
|||
|
ɨ<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ϣ<EFBFBD>һ<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ļ<EFBFBD><EFBFBD><EFBFBD><font color="#FF0000"><%=SumFolders%></font><3E><><EFBFBD><EFBFBD><EFBFBD>ļ<EFBFBD><font color="#FF0000"><%=SumFiles%></font><3E><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ֿ<EFBFBD><D6BF>ɵ<EFBFBD><font color="#FF0000"><%=Sun%></font><3E><>
|
|||
|
<%
|
|||
|
Timer2=Timer
|
|||
|
TheTime=CStr(Int(((Timer2-Timer1)*10000)+0.5)/10)
|
|||
|
Response.Write "<22><><EFBFBD><EFBFBD>ҳִ<D2B3>й<EFBFBD><D0B9><EFBFBD><EFBFBD><EFBFBD>"&TheTime&"<22><><EFBFBD><EFBFBD> <a href='"&URL&"'><3E><><EFBFBD><EFBFBD>ʹ<EFBFBD><CAB9><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ʽɨ<CABD><C9A8></a>"
|
|||
|
End If
|
|||
|
End If
|
|||
|
%>
|
|||
|
</body>
|
|||
|
</html>
|
|||
|
<%
|
|||
|
|
|||
|
'<27><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>path<74><68><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ŀ¼<C4BF><C2BC><EFBFBD><EFBFBD><EFBFBD>ļ<EFBFBD>
|
|||
|
Sub ShowAllFileKOA(Path)
|
|||
|
If Not FSO.FolderExists(Path) Then Exit Sub
|
|||
|
Set f=FSO.GetFolder(Path)
|
|||
|
Set fc2=f.Files
|
|||
|
For Each MyFile In fc2
|
|||
|
On Error Resume Next
|
|||
|
If LCase(CurrentlyRoot&"\"&FileName)<>Replace(LCase(Path&"\"&MyFile.Name),"\\","\") And CheckExt(FSO.GetExtensionName(Path&"\"&MyFile.Name)) Then
|
|||
|
Call ScanFile(Path&"\"&MyFile.Name,"")
|
|||
|
SumFiles=SumFiles+1
|
|||
|
End If
|
|||
|
Next
|
|||
|
Set fc=f.SubFolders
|
|||
|
For Each f1 In fc
|
|||
|
ShowAllFileKOA Path&"\"&f1.Name
|
|||
|
SumFolders=SumFolders+1
|
|||
|
Next
|
|||
|
End Sub
|
|||
|
|
|||
|
'<27><><EFBFBD><EFBFBD><EFBFBD>ļ<EFBFBD>
|
|||
|
Sub ScanFile(FilePath,InFile)
|
|||
|
FilePath=Replace(FilePath,"\\","\")
|
|||
|
FileCreateDate=GetDateCreate(FilePath)
|
|||
|
FileModifyDate=GetDateModify(FilePath)
|
|||
|
If InFile<>"" Then
|
|||
|
InFile=Replace(InFile,"\\","\")
|
|||
|
If SearchType=1 Or InStr(LCase(InFile),LCase(WebSiteRoot))>0 Then
|
|||
|
InFiles="<font color=red><3E><><EFBFBD>ļ<EFBFBD><C4BC><EFBFBD> "&InFile&" <a href=""http://"&ServerName&ServerPort&"/"&tURLEncode(Replace(Replace(InFile,WebSiteRoot&"\","",1,1,1),"\","/"))&""" target=_blank><3E><><EFBFBD>ʴ<EFBFBD>ҳ</a> <a href=""?filemanager=showfile&filepath="&tURLEncode(InFile)&""" target=_blank><3E>鿴<EFBFBD>ļ<EFBFBD><C4BC><EFBFBD><EFBFBD><EFBFBD></a><3E>ļ<EFBFBD><C4BC><EFBFBD><EFBFBD><EFBFBD>ִ<EFBFBD><D6B4></font>"
|
|||
|
ElseIf SearchType=2 Or InStr(LCase(InFile),LCase(CurrentlyRoot))>0 Then
|
|||
|
InFiles="<font color=red><3E><><EFBFBD>ļ<EFBFBD><C4BC><EFBFBD> "&InFile&" <a href=""http://"&ServerName&ServerPort&Replace(URL,FileName,"")&tURLEncode(Replace(Replace(InFile,CurrentlyRoot&"\","",1,1,1),"\","/"))&""" target=_blank><3E><><EFBFBD>ʴ<EFBFBD>ҳ</a> <a href=""?filemanager=showfile&filepath="&tURLEncode(InFile)&""" target=_blank><3E>鿴<EFBFBD>ļ<EFBFBD><C4BC><EFBFBD><EFBFBD><EFBFBD></a><3E>ļ<EFBFBD><C4BC><EFBFBD><EFBFBD><EFBFBD>ִ<EFBFBD><D6B4></font>"
|
|||
|
Else
|
|||
|
InFiles="<font color=red><3E><><EFBFBD>ļ<EFBFBD><C4BC><EFBFBD> "&InFile&" <a href=""?filemanager=showfile&filepath="&tURLEncode(InFile)&""" target=_blank><3E>鿴<EFBFBD>ļ<EFBFBD><C4BC><EFBFBD><EFBFBD><EFBFBD></a><3E>ļ<EFBFBD><C4BC><EFBFBD><EFBFBD><EFBFBD>ִ<EFBFBD><D6B4></font>"
|
|||
|
End If
|
|||
|
End If
|
|||
|
On Error Resume Next
|
|||
|
Set oFile=FSO.OpenTextFile(FilePath)
|
|||
|
FileTxt=LCase(oFile.ReadAll())
|
|||
|
If Err Then Exit Sub End If
|
|||
|
If Len(FileTxt)>0 Then
|
|||
|
'<27><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
|
|||
|
FileTxt=vbcrlf&FileTxt
|
|||
|
If SearchType=1 Or InStr(LCase(FilePath),LCase(WebSiteRoot))>0 Then
|
|||
|
Temp=FilePath&"<br><a href=""http://"&ServerName&ServerPort&"/"&tURLEncode(Replace(Replace(FilePath,WebSiteRoot&"\","",1,1,1),"\","/"))&""" target=_blank><3E><><EFBFBD>ʴ<EFBFBD>ҳ</a> <a href=""?filemanager=showfile&filepath="&tURLEncode(FilePath)&""" target=_blank><3E>鿴<EFBFBD>ļ<EFBFBD><C4BC><EFBFBD><EFBFBD><EFBFBD></a>"
|
|||
|
ElseIf SearchType=2 Or InStr(LCase(FilePath),LCase(CurrentlyRoot))>0 Then
|
|||
|
Temp=FilePath&"<br><a href=""http://"&ServerName&ServerPort&Replace(URL,FileName,"")&tURLEncode(Replace(Replace(FilePath,CurrentlyRoot&"\","",1,1,1),"\","/"))&""" target=_blank><3E><><EFBFBD>ʴ<EFBFBD>ҳ</a> <a href=""?filemanager=showfile&filepath="&tURLEncode(FilePath)&""" target=_blank><3E>鿴<EFBFBD>ļ<EFBFBD><C4BC><EFBFBD><EFBFBD><EFBFBD></a>"
|
|||
|
Else
|
|||
|
Temp=FilePath&"<br><a href=""?filemanager=showfile&filepath="&tURLEncode(FilePath)&""" target=_blank><3E>鿴<EFBFBD>ļ<EFBFBD><C4BC><EFBFBD><EFBFBD><EFBFBD></a>"
|
|||
|
End If
|
|||
|
|
|||
|
'Check "WScript.Shell"
|
|||
|
If InStr(FileTxt,"wscript.shell") Or InStr(FileTxt,"clsid:72c24dd5-d70a-438b-8a42-98424b88afb8") Then
|
|||
|
Report=Report&"<tr><td>"&Temp&"</td><td>WScript.Shell <20><><EFBFBD><EFBFBD> clsid:72C24DD5-D70A-438B-8A42-98424B88AFB8</td><td><font color=red>Σ<><CEA3><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>һ<EFBFBD>㱻ASPľ<50><C4BE><EFBFBD><EFBFBD><EFBFBD><EFBFBD></font>"&InFiles&"</td><td>"&FileCreateDate&"<br>"&FileModifyDate&"</td></tr>"
|
|||
|
Sun=Sun+1
|
|||
|
End If
|
|||
|
|
|||
|
'Check "Shell.Application"
|
|||
|
If InStr(FileTxt,"shell.application") Or InStr(FileTxt,"clsid:13709620-c279-11ce-a49e-444553540000") Then
|
|||
|
Report=Report&"<tr><td>"&Temp&"</td><td>Shell.Application <20><><EFBFBD><EFBFBD> clsid:13709620-C279-11CE-A49E-444553540000</td><td><font color=red>Σ<><CEA3><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>һ<EFBFBD>㱻ASPľ<50><C4BE><EFBFBD><EFBFBD><EFBFBD><EFBFBD></font>"&InFiles&"</td><td>"&FileCreateDate&"<br>"&FileModifyDate&"</td></tr>"
|
|||
|
Sun=Sun+1
|
|||
|
End If
|
|||
|
|
|||
|
'Check .Encode
|
|||
|
Set regEx=New RegExp
|
|||
|
regEx.IgnoreCase=True
|
|||
|
regEx.Global=True
|
|||
|
regEx.Pattern="\b(?:vbscript|jscript|javascript).encode\b"
|
|||
|
If regEx.Test(FileTxt) Then
|
|||
|
Report=Report&"<tr><td>"&Temp&"</td><td>(vbscript|jscript|javascript).Encode</td><td><font color=red><3E>ƺ<EFBFBD><C6BA>ű<EFBFBD><C5B1><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD></font>"&InFiles&"</td><td>"&FileCreateDate&"<br>"&FileModifyDate&"</td></tr>"
|
|||
|
Sun=Sun+1
|
|||
|
End If
|
|||
|
|
|||
|
'Check eval backdoor
|
|||
|
regEx.Pattern="\bEval\b"
|
|||
|
If regEx.Test(FileTxt) Then
|
|||
|
Report=Report&"<tr><td>"&Temp&"</td><td>Eval</td><td>eval()<29><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ִ<EFBFBD><D6B4><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ASP<53><50><EFBFBD>룬<EFBFBD><EBA3AC>һЩ<D2BB><D0A9><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>á<EFBFBD><C3A1><EFBFBD><EFBFBD><EFBFBD>ʽһ<CABD><D2BB><EFBFBD>ǣ<EFBFBD>eval(X)<br><3E><><EFBFBD><EFBFBD>javascript<70><74><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ҳ<EFBFBD><D2B2><EFBFBD><EFBFBD>ʹ<EFBFBD>ã<EFBFBD><C3A3>п<EFBFBD><D0BF><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>"&InFiles&"</td><td>"&FileCreateDate&"<br>"&FileModifyDate&"</td></tr>"
|
|||
|
Sun=Sun+1
|
|||
|
End If
|
|||
|
|
|||
|
'Check execute backdoor
|
|||
|
regEx.Pattern="[^.]\bExecute\b"
|
|||
|
If regEx.Test(FileTxt) Then
|
|||
|
Report=Report&"<tr><td>"&Temp&"</td><td>Execute</td><td><font color=red>execute()<29><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ִ<EFBFBD><D6B4><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ASP<53><50><EFBFBD>룬<EFBFBD><EBA3AC>һЩ<D2BB><D0A9><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>á<EFBFBD><C3A1><EFBFBD><EFBFBD><EFBFBD>ʽһ<CABD><D2BB><EFBFBD>ǣ<EFBFBD>execute(X)</font><br>"&InFiles&"</td><td>"&FileCreateDate&"<br>"&FileModifyDate&"</td></tr>"
|
|||
|
Sun=Sun+1
|
|||
|
End If
|
|||
|
|
|||
|
|
|||
|
'<27><>һ<EFBFBD>仰ľ<E4BBB0><C4BE><EFBFBD><EFBFBD>cmdshell<6C><6C>
|
|||
|
regEx.Pattern="[^.]\bcmdshell\b"
|
|||
|
If regEx.Test(FileTxt) Then
|
|||
|
Report=Report&"<tr><td>"&Temp&"</td><td>cmdshell</td><td><font color=red>cmdshell</font><br>"&InFiles&"</td><td>"&FileCreateDate&"<br>"&FileModifyDate&"</td></tr>"
|
|||
|
Sun=Sun+1
|
|||
|
End If
|
|||
|
|
|||
|
'<27><>һ<EFBFBD>仰ľ<E4BBB0><C4BE><EFBFBD><EFBFBD>serv-u<><75>
|
|||
|
regEx.Pattern="[^.]\bserv-u\b"
|
|||
|
If regEx.Test(FileTxt) Then
|
|||
|
Report=Report&"<tr><td>"&Temp&"</td><td>serv-u</td><td><font color=red>serv-u<><75>Ȩһ<C8A8><D2BB><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ַ<EFBFBD></font><br>"&InFiles&"</td><td>"&FileCreateDate&"<br>"&FileModifyDate&"</td></tr>"
|
|||
|
Sun=Sun+1
|
|||
|
End If
|
|||
|
|
|||
|
'Check .CreateTextFile|.OpenTextFile
|
|||
|
regEx.Pattern="\.(?:Open|Create)TextFile\b"
|
|||
|
If regEx.Test(FileTxt) Then
|
|||
|
Report=Report&"<tr><td>"&Temp&"</td><td><font color=red>.CreateTextFile|.OpenTextFile</font></td><td>ʹ<><CAB9><EFBFBD><EFBFBD>FSO<53><4F>CreateTextFile|OpenTextFile<6C><65><EFBFBD><EFBFBD><EFBFBD><EFBFBD>д<EFBFBD>ļ<EFBFBD>"&InFiles&"</td><td>"&FileCreateDate&"<br>"&FileModifyDate&"</td></tr>"
|
|||
|
Sun=Sun+1
|
|||
|
End If
|
|||
|
|
|||
|
'Check .SaveToFile
|
|||
|
regEx.Pattern="\.SaveToFile\b"
|
|||
|
If regEx.Test(FileTxt) Then
|
|||
|
Report=Report&"<tr><td>"&Temp&"</td><td><font color=red>.SaveToFile</font></td><td>ʹ<><CAB9><EFBFBD><EFBFBD>Stream<61><6D>SaveToFile<6C><65><EFBFBD><EFBFBD>д<EFBFBD>ļ<EFBFBD>"&InFiles&"</td><td>"&FileCreateDate&"<br>"&FileModifyDate&"</td></tr>"
|
|||
|
Sun=Sun+1
|
|||
|
End If
|
|||
|
|
|||
|
'Check .Name=
|
|||
|
regEx.Pattern="\.Name\s*=\s*(?!=)"
|
|||
|
If regEx.Test(FileTxt) Then
|
|||
|
Report=Report&"<tr><td>"&Temp&"</td><td><font color=red>.Name</font></td><td>ʹ<><CAB9><EFBFBD><EFBFBD>FSO<53><4F>.GetFile|.GetFolder<65><72><EFBFBD><EFBFBD><EFBFBD><EFBFBD>.Name<6D><65><EFBFBD><EFBFBD><EFBFBD>ļ<EFBFBD><C4BC><EFBFBD><EFBFBD>ļ<EFBFBD><C4BC><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>"&InFiles&"</td><td>"&FileCreateDate&"<br>"&FileModifyDate&"</td></tr>"
|
|||
|
Sun=Sun+1
|
|||
|
End If
|
|||
|
|
|||
|
If InFile<>"" Then
|
|||
|
MyFileExt=LCase(Right(FilePath,Len(FilePath)-InStrRev(FilePath,".")))
|
|||
|
If InStr(MyFileExt,"asp")=0 And InStr(MyFileExt,"asa")=0 And InStr(MyFileExt,"cer")=0 And InStr(MyFileExt,"cdx")=0 And InStr(MyFileExt,"inc")=0 And InStr(MyFileExt,"htm")=0 Then
|
|||
|
Sun=Sun+1
|
|||
|
Report=Report&"<tr><td>"&Temp&"</td><td><font color=red>Include</font></td><td><3E><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ASP("&MyFileExt&")<29>ļ<EFBFBD>"&InFiles&"</td><td>"&FileCreateDate&"<br>"&FileModifyDate&"</td></tr>"
|
|||
|
End If
|
|||
|
End If
|
|||
|
'------------------ End ----------------------------
|
|||
|
Set regEx=Nothing
|
|||
|
|
|||
|
'Check include file|virtual
|
|||
|
Set regEx=New RegExp
|
|||
|
regEx.IgnoreCase=True
|
|||
|
regEx.Global=True
|
|||
|
regEx.Pattern="<!--[\s<><73>]*#include[\s<><73>]*(?:file|virtual)[\s<><73>]*=[\s<><73>]*(""|')?(.+)\1[\s<><73>]*-->"
|
|||
|
Set Matches=regEx.Execute(FileTxt)
|
|||
|
For Each Match In Matches
|
|||
|
tFile=Trim(Replace(regEx.Replace(Match.Value,"$2"),vbCr,""))
|
|||
|
If Not CheckExt(FSO.GetExtensionName(tFile)) Then
|
|||
|
Call ScanFile(Mid(FilePath,1,InStrRev(FilePath,"\"))&tFile,FilePath)
|
|||
|
SumFiles=SumFiles+1
|
|||
|
End If
|
|||
|
Next
|
|||
|
Set Matches=Nothing
|
|||
|
Set regEx=Nothing
|
|||
|
|
|||
|
'Check Server.Execute|Transfer
|
|||
|
Set regEx=New RegExp
|
|||
|
regEx.IgnoreCase=True
|
|||
|
regEx.Global=True
|
|||
|
regEx.Pattern="Server.(?:Execute|Transfer)\s*\(\s*""(.+)"""
|
|||
|
Set Matches=regEx.Execute(FileTxt)
|
|||
|
For Each Match In Matches
|
|||
|
tFile=Trim(regEx.Replace(Match.Value,"$1"))
|
|||
|
If Not CheckExt(FSO.GetExtensionName(tFile)) Then
|
|||
|
Call ScanFile(Mid(FilePath,1,InStrRev(FilePath,"\"))&tFile,FilePath)
|
|||
|
SumFiles=SumFiles+1
|
|||
|
End If
|
|||
|
Next
|
|||
|
Set Matches=Nothing
|
|||
|
Set regEx=Nothing
|
|||
|
|
|||
|
'Check Server.Execute|Transfer
|
|||
|
Set regEx=New RegExp
|
|||
|
regEx.IgnoreCase=True
|
|||
|
regEx.Global=True
|
|||
|
regEx.Pattern="Server.(?:Execute|Transfer)\s*\(\s*[^""].+\)"
|
|||
|
If regEx.Test(FileTxt) Then
|
|||
|
Report=Report&"<tr><td>"&Temp&"</td><td>Server.Execute</td><td><font color=red><3E><><EFBFBD>ܸ<EFBFBD><DCB8>ټ<EFBFBD><D9BC><EFBFBD>Server.execute()<29><><EFBFBD><EFBFBD>ִ<EFBFBD>е<EFBFBD><D0B5>ļ<EFBFBD><C4BC><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ա<EFBFBD><D4B1><EFBFBD>м<EFBFBD><D0BC><EFBFBD></font></td><td>"&FileCreateDate&"<br>"&FileModifyDate&"</td></tr>"
|
|||
|
Sun=Sun+1
|
|||
|
End If
|
|||
|
Set regEx=Nothing
|
|||
|
|
|||
|
'Check RunatScript
|
|||
|
Set regEx=New RegExp
|
|||
|
regEx.IgnoreCase=True
|
|||
|
regEx.Global=True
|
|||
|
regEx.Pattern="<scr"&"ipt[^>]*?runat\s*=\s*(""|')?server\1[\s\S]*?>"
|
|||
|
Set Matches=regEx.Execute(FileTxt)
|
|||
|
For Each Match In Matches
|
|||
|
MatchValue=Trim(Replace(Match.Value,vbNewLine," "))
|
|||
|
TmpLake2=Mid(MatchValue,1,InStr(MatchValue,">"))
|
|||
|
srcSeek=InStr(1,TmpLake2,"src",1)
|
|||
|
If srcSeek>0 Then
|
|||
|
srcSeek2=InStr(srcSeek,TmpLake2,"=")
|
|||
|
myteststr=Mid(MatchValue,srcSeek,srcSeek2)
|
|||
|
For i=1 To 50
|
|||
|
Tmp=Mid(TmpLake2,srcSeek2+i,1)
|
|||
|
If Tmp<>" " And Tmp<>chr(9) And Tmp<>vbCrLf Then
|
|||
|
Exit For
|
|||
|
End If
|
|||
|
Next
|
|||
|
If Tmp="""" Then
|
|||
|
TmpName=Mid(TmpLake2,srcSeek2+i+1,InStr(srcSeek2+i+1,TmpLake2,"""")-srcSeek2-i-1)
|
|||
|
Else
|
|||
|
If InStr(srcSeek2+i+1,TmpLake2," ")>0 Then TmpName=Mid(TmpLake2,srcSeek2+i,InStr(srcSeek2+i+1,TmpLake2," ")-srcSeek2-i) Else TmpName=TmpLake2
|
|||
|
If InStr(TmpName,chr(9))>0 Then TmpName=Mid(TmpName,1,InStr(1,TmpName,chr(9))-1)
|
|||
|
If InStr(TmpName,vbCrLf)>0 Then TmpName=Mid(TmpName,1,InStr(1,TmpName,vbCrlf)-1)
|
|||
|
If InStr(TmpName,">")>0 Then TmpName=Mid(TmpName,1,InStr(1,TmpName,">")-1)
|
|||
|
End If
|
|||
|
Call ScanFile(Mid(FilePath,1,InStrRev(FilePath,"\"))&TmpName,FilePath)
|
|||
|
SumFiles=SumFiles+1
|
|||
|
End If
|
|||
|
Next
|
|||
|
Set Matches=Nothing
|
|||
|
Set regEx=Nothing
|
|||
|
|
|||
|
End If
|
|||
|
Set oFile=Nothing
|
|||
|
End Sub
|
|||
|
|
|||
|
'<27><><EFBFBD><EFBFBD><EFBFBD>ļ<EFBFBD><C4BC><EFBFBD><EFBFBD><D7BA><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ԥ<EFBFBD><D4A4><EFBFBD><EFBFBD>ƥ<EFBFBD>伴<EFBFBD><E4BCB4><EFBFBD><EFBFBD>TRUE
|
|||
|
Function CheckExt(FileExt)
|
|||
|
If DimFileExt="*" Then CheckExt=True
|
|||
|
Ext=Split(DimFileExt,",")
|
|||
|
For i=0 To Ubound(Ext)
|
|||
|
If LCase(FileExt)=Ext(i) Then
|
|||
|
CheckExt=True
|
|||
|
Exit Function
|
|||
|
End If
|
|||
|
Next
|
|||
|
End Function
|
|||
|
|
|||
|
Function GetDateModify(FilePath)
|
|||
|
Set f=FSO.GetFile(FilePath)
|
|||
|
s=f.DateLastModified
|
|||
|
Set f=Nothing
|
|||
|
GetDateModify=s
|
|||
|
End Function
|
|||
|
|
|||
|
Function GetDateCreate(FilePath)
|
|||
|
Set f=FSO.GetFile(FilePath)
|
|||
|
s=f.DateCreated
|
|||
|
Set f=Nothing
|
|||
|
GetDateCreate=s
|
|||
|
End Function
|
|||
|
|
|||
|
Function tURLEncode(Str)
|
|||
|
Temp=Replace(Str,"%","%25")
|
|||
|
Temp=Replace(Temp,"#","%23")
|
|||
|
Temp=Replace(Temp,"&","%26")
|
|||
|
Temp=Replace(Temp,"+","%2B")
|
|||
|
tURLEncode=Temp
|
|||
|
End Function
|
|||
|
|
|||
|
Function HeightLightCode(Str)
|
|||
|
HLCStr="<span style='color:#F00;background-color:#FF0;font-size:30px;'>"
|
|||
|
Set regEx=New RegExp
|
|||
|
regEx.IgnoreCase=True
|
|||
|
regEx.Global=True
|
|||
|
regEx.Pattern="([^.]\bExecute)\b|\b(Eval)\b|(\.Name\s*=\s*(?!=))"
|
|||
|
Temp=regEx.replace(Str,HLCStr&"$1$2$3</span>")
|
|||
|
Set regEx=Nothing
|
|||
|
|
|||
|
Temp=Replace(Temp,"wscript.shell",HLCStr&"wscript.shell</span>")
|
|||
|
Temp=Replace(Temp,"shell.application",HLCStr&"shell.application</span>")
|
|||
|
Temp=Replace(Temp,".encode",HLCStr&".encode</span>")
|
|||
|
Temp=Replace(Temp,"cmdshell",HLCStr&"cmdshell</span>")
|
|||
|
Temp=Replace(Temp,"serv-u",HLCStr&"serv-u</span>")
|
|||
|
Temp=Replace(Temp,".createtextfile",HLCStr&".createtextfile</span>")
|
|||
|
Temp=Replace(Temp,".opentextfile",HLCStr&".opentextfile</span>")
|
|||
|
Temp=Replace(Temp,".savetofile",HLCStr&".savetofile</span>")
|
|||
|
Temp=Replace(Temp,"clsid:f935dc22-1cf0-11d0-adb9-00c04fd58a0b",HLCStr&"clsid:f935dc22-1cf0-11d0-adb9-00c04fd58a0b</span>")
|
|||
|
Temp=Replace(Temp,"clsid:13709620-c279-11ce-a49e-444553540000",HLCStr&"clsid:13709620-c279-11ce-a49e-444553540000</span>")
|
|||
|
Temp=Replace(Temp,"clsid:0d43fe01-f093-11cf-8940-00a0c9054228",HLCStr&"clsid:0d43fe01-f093-11cf-8940-00a0c9054228</span>")
|
|||
|
Temp=Replace(Temp,"clsid:72c24dd5-d70a-438b-8a42-98424b88afb8",HLCStr&"clsid:72c24dd5-d70a-438b-8a42-98424b88afb8</span>")
|
|||
|
HeightLightCode=Temp
|
|||
|
End Function
|
|||
|
|
|||
|
Sub ChkErr(Err)
|
|||
|
If Err Then
|
|||
|
Response.Write"<p><3E><><EFBFBD><EFBFBD>:"&Err.Description&"</p><p><3E><><EFBFBD><EFBFBD>Դ:"&Err.Source&"</p>"
|
|||
|
Err.Clear
|
|||
|
Set oFile=Nothing
|
|||
|
Set FSO=Nothing
|
|||
|
Response.End
|
|||
|
End If
|
|||
|
End Sub
|
|||
|
|
|||
|
Sub ShowAllFileSF(Path)
|
|||
|
If Not FSO.FolderExists(Path) Then Exit Sub
|
|||
|
Set f=FSO.GetFolder(Path)
|
|||
|
Set fc2=f.Files
|
|||
|
For Each MyFile In fc2
|
|||
|
On Error Resume Next
|
|||
|
If LCase(CurrentlyRoot&"\"&FileName)<>Replace(LCase(Path&"\"&MyFile.Name),"\\","\") And CheckExt(FSO.GetExtensionName(Path&"\"&MyFile.Name)) Then
|
|||
|
Call IsFind(Path&"\"&MyFile.Name)
|
|||
|
SumFiles=SumFiles+1
|
|||
|
End If
|
|||
|
Next
|
|||
|
Set fc=f.SubFolders
|
|||
|
For Each f1 In fc
|
|||
|
ShowAllFileSF Path&"\"&f1.Name
|
|||
|
SumFolders=SumFolders+1
|
|||
|
Next
|
|||
|
Set fc=Nothing
|
|||
|
Set fc2=Nothing
|
|||
|
Set f=Nothing
|
|||
|
End Sub
|
|||
|
|
|||
|
Sub IsFind(ThePath)
|
|||
|
TheDate=GetDateModify(ThePath)
|
|||
|
On Error Resume Next
|
|||
|
TheTmp=Mid(TheDate,1,InStr(TheDate," ")-1)
|
|||
|
If Err Then Exit Sub
|
|||
|
|
|||
|
xDate=Split(FormSD,";")
|
|||
|
|
|||
|
If FormSD="ALL" Then ALLTime=True
|
|||
|
|
|||
|
For i=0 To Ubound(xDate)
|
|||
|
If InStr(TheTmp,xDate(i))>0 Or ALLTime=True Then
|
|||
|
If SearchType=1 Or InStr(Replace(LCase(ThePath),"\\","\"),LCase(WebSiteRoot))>0 Then
|
|||
|
Temp=ThePath&"<br><a href=""http://"&ServerName&ServerPort&"/"&tURLEncode(Replace(Replace(Replace(ThePath,"\\","\"),WebSiteRoot&"\","",1,1,1),"\","/"))&""" target=_blank><3E><><EFBFBD>ʴ<EFBFBD>ҳ</a> <a href=""?filemanager=showfile&filepath="&tURLEncode(ThePath)&""" target=_blank><3E>鿴<EFBFBD>ļ<EFBFBD><C4BC><EFBFBD><EFBFBD><EFBFBD></a>"
|
|||
|
ElseIf SearchType=2 Or InStr(Replace(LCase(ThePath),"\\","\"),LCase(CurrentlyRoot))>0 Then
|
|||
|
Temp=ThePath&"<br><a href=""http://"&ServerName&ServerPort&Replace(URL,FileName,"")&tURLEncode(Replace(Replace(Replace(ThePath,"\\","\"),CurrentlyRoot&"\","",1,1,1),"\","/"))&""" target=_blank><3E><><EFBFBD>ʴ<EFBFBD>ҳ</a> <a href=""?filemanager=showfile&filepath="&tURLEncode(ThePath)&""" target=_blank><3E>鿴<EFBFBD>ļ<EFBFBD><C4BC><EFBFBD><EFBFBD><EFBFBD></a>"
|
|||
|
Else
|
|||
|
Temp=ThePath&"<br><a href=""?filemanager=showfile&filepath="&tURLEncode(ThePath)&""" target=_blank><3E>鿴<EFBFBD>ļ<EFBFBD><C4BC><EFBFBD><EFBFBD><EFBFBD></a>"
|
|||
|
End If
|
|||
|
If Request.Form("Search_Content")<>"" Then
|
|||
|
Set oFile=FSO.OpenTextFile(ThePath,1,false,-2)
|
|||
|
FileTxt=LCase(oFile.ReadAll())
|
|||
|
If InStr(FileTxt,LCase(Request.Form("Search_Content")))>0 Then
|
|||
|
Report=Report&"<tr><td>"&Temp&"</td><td>"&GetDateCreate(ThePath)&"</td><td>"&TheDate&"</td></tr>"
|
|||
|
Sun=Sun+1
|
|||
|
Exit Sub
|
|||
|
End If
|
|||
|
oFile.close()
|
|||
|
Set oFile=Nothing
|
|||
|
Else
|
|||
|
Report=Report&"<tr><td>"&Temp&"</td><td>"&GetDateCreate(ThePath)&"</td><td>"&TheDate&"</td></tr>"
|
|||
|
Sun=Sun+1
|
|||
|
Exit Sub
|
|||
|
End If
|
|||
|
End If
|
|||
|
Next
|
|||
|
End Sub
|
|||
|
|
|||
|
Sub ShowAllFileQT(Path)
|
|||
|
If Not FSO.FolderExists(Path) Then Exit Sub
|
|||
|
Set f=FSO.GetFolder(Path)
|
|||
|
Set fc2=f.Files
|
|||
|
For Each MyFile In fc2
|
|||
|
On Error Resume Next
|
|||
|
TmpDot=InStrRev(Path&"\"&MyFile.Name,".")
|
|||
|
TmpBackSlash=InStrRev(Path&"\"&MyFile.Name,"\")
|
|||
|
TmpSlash=InStrRev(Path&"\"&MyFile.Name,"/")
|
|||
|
If TmpBackSlash>TmpDot Or TmpSlash>TmpDot Then
|
|||
|
TempFile=LCase(Path&"\"&MyFile.Name)
|
|||
|
Else
|
|||
|
TempFile=LCase(Left(Path&"\"&MyFile.Name,InStrRev(Path&"\"&MyFile.Name,".")-1))
|
|||
|
End If
|
|||
|
If InStr(TempFile,".asp")<>0 Or InStr(TempFile,".asa")<>0 Or InStr(TempFile,".cer")<>0 Or InStr(TempFile,".cdx")<>0 Then
|
|||
|
Call IsFindAsp(Path&"\"&MyFile.Name)
|
|||
|
End If
|
|||
|
SumFiles=SumFiles+1
|
|||
|
Next
|
|||
|
Set fc=f.SubFolders
|
|||
|
For Each f1 In fc
|
|||
|
ShowAllFileQT Path&"\"&f1.Name
|
|||
|
SumFolders=SumFolders+1
|
|||
|
Next
|
|||
|
Set fc=Nothing
|
|||
|
Set fc2=Nothing
|
|||
|
Set f=Nothing
|
|||
|
End Sub
|
|||
|
Sub IsFindAsp(ThePath)
|
|||
|
TheDate=GetDateModify(ThePath)
|
|||
|
On Error Resume Next
|
|||
|
If SearchType=1 Or InStr(Replace(LCase(ThePath),"\\","\"),LCase(WebSiteRoot))>0 Then
|
|||
|
Temp=ThePath&"<br><a href=""http://"&ServerName&ServerPort&"/"&tURLEncode(Replace(Replace(Replace(ThePath,"\\","\"),WebSiteRoot&"\","",1,1,1),"\","/"))&""" target=_blank><3E><><EFBFBD>ʴ<EFBFBD>ҳ</a> <a href=""?filemanager=showfile&filepath="&tURLEncode(ThePath)&""" target=_blank><3E>鿴<EFBFBD>ļ<EFBFBD><C4BC><EFBFBD><EFBFBD><EFBFBD></a>"
|
|||
|
ElseIf SearchType=2 Or InStr(Replace(LCase(ThePath),"\\","\"),LCase(CurrentlyRoot))>0 Then
|
|||
|
Temp=ThePath&"<br><a href=""http://"&ServerName&ServerPort&Replace(URL,FileName,"")&tURLEncode(Replace(Replace(Replace(ThePath,"\\","\"),CurrentlyRoot&"\","",1,1,1),"\","/"))&""" target=_blank><3E><><EFBFBD>ʴ<EFBFBD>ҳ</a> <a href=""?filemanager=showfile&filepath="&tURLEncode(ThePath)&""" target=_blank><3E>鿴<EFBFBD>ļ<EFBFBD><C4BC><EFBFBD><EFBFBD><EFBFBD></a>"
|
|||
|
Else
|
|||
|
Temp=ThePath&"<br><a href=""?filemanager=showfile&filepath="&tURLEncode(ThePath)&""" target=_blank><3E>鿴<EFBFBD>ļ<EFBFBD><C4BC><EFBFBD><EFBFBD><EFBFBD></a>"
|
|||
|
End If
|
|||
|
Report=Report&"<tr><td>"&Temp&"</td><td>"&GetDateCreate(ThePath)&"</td><td>"&TheDate&"</td></tr>"
|
|||
|
Sun=Sun+1
|
|||
|
End Sub
|
|||
|
Set FSO=Nothing
|
|||
|
%>
|