<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>DZone Snippets: webshell code</title>
    <link>http://snippets.dzone.com/posts</link>
    <pubDate>Fri, 25 Jul 2008 00:53:06 GMT</pubDate>
    <description>DZone Snippets: webshell code</description>
    <item>
      <title>webshell dos html homepage</title>
      <link>http://snippets.dzone.com/posts/show/890</link>
      <description>&lt;!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"&lt;br /&gt;"http://www.w3.org/TR/html4/loose.dtd"&gt;&lt;br /&gt;&lt;html&gt;&lt;br /&gt;&lt;head&gt;&lt;br /&gt;&lt;meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"&gt;&lt;br /&gt;&lt;title&gt;.com&lt;/title&gt;&lt;br /&gt;&lt;/head&gt;&lt;br /&gt;&lt;style&gt;&lt;br /&gt;	html { height:100%; }&lt;br /&gt;	body { &lt;br /&gt;		height:100%; &lt;br /&gt;		border:0px; &lt;br /&gt;		margin:0px;&lt;br /&gt;		background-color:#000000;&lt;br /&gt;		color:#CCCCCC;&lt;br /&gt;		font-family:FixedSys, Terminal, system, verdana, arial;&lt;br /&gt;		font-size:12px;&lt;br /&gt;		/*font-weight:bold;*/&lt;br /&gt;	}&lt;br /&gt;	&lt;br /&gt;	a {&lt;br /&gt;		text-decoration:none;&lt;br /&gt;		color:#CCCCCC;&lt;br /&gt;	}&lt;br /&gt;	&lt;br /&gt;	a:hover {&lt;br /&gt;		text-decoration:none;&lt;br /&gt;		color:#CCCCCC;&lt;br /&gt;	}&lt;br /&gt;	&lt;br /&gt;	b {&lt;br /&gt;		font-weight:normal;&lt;br /&gt;	}&lt;br /&gt;	&lt;br /&gt;	strong {&lt;br /&gt;		font-weight:normal;&lt;br /&gt;	}&lt;br /&gt;	&lt;br /&gt;	.entryBox {&lt;br /&gt;		position:absolute;&lt;br /&gt;		bottom:0px;&lt;br /&gt;		left:-300px;&lt;br /&gt;	}&lt;br /&gt;&lt;/style&gt;&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;&lt;script language="javascript" src="js/js.js"&gt;&lt;/script&gt;&lt;br /&gt;&lt;br /&gt;&lt;body onLoad="setFocusToEntryBox();" onFocus="setFocusToEntryBox();"&gt;&lt;br /&gt;	&lt;table cellpadding="0" cellspacing="0" border="0" height="100%" width="100%"&gt;&lt;br /&gt;		&lt;tr&gt;&lt;br /&gt;			&lt;td height="100%" width="100%" onClick="setFocusToEntryBox();" valign="top"&gt;&lt;br /&gt;				&lt;div style="width:750px;"&gt;&lt;br /&gt;					&lt;div id="outputContainer"&gt;Welcome to 20-GOTO-10.com&lt;br /&gt;Type help to begin.&lt;br /&gt;&lt;br /&gt;&lt;/div&gt;&lt;br /&gt;					&lt;div style="position:relative;"&gt;&lt;br /&gt;						&lt;span id="commandPrompt"&gt;&lt;/span&gt;&amp;nbsp;&lt;span id="commandContainer"&gt;&lt;/span&gt;&lt;img src="images/cursor.gif" align="absbottom" /&gt;&lt;br /&gt;						&lt;input type="text" id="entryBox" class="entryBox" onKeyDown="keyCode=(event.which)? event.which: event.keyCode;if(keyCode==55 &amp;&amp; event.shiftKey){alert('Sorry the use of \'&amp;\' is not allowed.');return false;}" onKeyUp="handleKeyPress((event.which)? event.which: event.keyCode, this);"&gt;&lt;br /&gt;					&lt;/div&gt;&lt;br /&gt;				&lt;/div&gt;&lt;br /&gt;			&lt;/td&gt;&lt;br /&gt;		&lt;/tr&gt;&lt;br /&gt;	&lt;/table&gt;&lt;br /&gt;&lt;/body&gt;&lt;br /&gt;&lt;/html&gt;&lt;br /&gt;&lt;br /&gt;&lt;script language="javascript"&gt;&lt;br /&gt;document.getElementById('commandPrompt').innerHTML = 'C:\\&gt;';&lt;br /&gt;&lt;br /&gt;//Preload the image to avoid the scroll thingy&lt;br /&gt;var oImg = new Image();&lt;br /&gt;oImg.src = '/dos3/images/Me.gif';&lt;br /&gt;&lt;/script&gt;</description>
      <pubDate>Mon, 14 Nov 2005 16:18:12 GMT</pubDate>
      <guid>http://snippets.dzone.com/posts/show/890</guid>
      <author>mornlee (mornlee)</author>
    </item>
    <item>
      <title>20-GOTO-10 webshell dos javascript</title>
      <link>http://snippets.dzone.com/posts/show/889</link>
      <description>var arrCommandHistory = new Array();&lt;br /&gt;var iCommandHistoryIndex = 0;&lt;br /&gt;var isContactMode = false;&lt;br /&gt;var contactPrompt = '';&lt;br /&gt;&lt;br /&gt;function handleKeyPress(keyCode, obj) {&lt;br /&gt;	switch(keyCode)&lt;br /&gt;	{&lt;br /&gt;		case 13:&lt;br /&gt;			handleReturn(obj);&lt;br /&gt;			break;&lt;br /&gt;		case 38:&lt;br /&gt;			if(iCommandHistoryIndex &gt; 0) {&lt;br /&gt;				iCommandHistoryIndex --;&lt;br /&gt;				document.getElementById('commandContainer').innerHTML = arrCommandHistory[iCommandHistoryIndex];&lt;br /&gt;				document.getElementById('entryBox').value = arrCommandHistory[iCommandHistoryIndex];&lt;br /&gt;			}&lt;br /&gt;			break;&lt;br /&gt;		case 40:&lt;br /&gt;			if(iCommandHistoryIndex &lt; arrCommandHistory.length) {&lt;br /&gt;				if(iCommandHistoryIndex &lt; arrCommandHistory.length-1) {&lt;br /&gt;					iCommandHistoryIndex ++;&lt;br /&gt;				}&lt;br /&gt;				document.getElementById('commandContainer').innerHTML = arrCommandHistory[iCommandHistoryIndex];&lt;br /&gt;				document.getElementById('entryBox').value = arrCommandHistory[iCommandHistoryIndex];&lt;br /&gt;			}&lt;br /&gt;			break;&lt;br /&gt;		default:&lt;br /&gt;			document.getElementById('commandContainer').innerHTML = obj.value.replace(/ /g, '&amp;nbsp;');&lt;br /&gt;	}&lt;br /&gt;}&lt;br /&gt;&lt;br /&gt;function handleReturn(obj) { &lt;br /&gt;	arrCommandHistory[arrCommandHistory.length] = obj.value; &lt;br /&gt;	iCommandHistoryIndex = arrCommandHistory.length;  &lt;br /&gt;	var head=document.getElementsByTagName('head').item(0); &lt;br /&gt;	var old=document.getElementById('lastScript'); &lt;br /&gt;	if(old)head.removeChild(old); &lt;br /&gt;	script=document.createElement('script'); &lt;br /&gt;	script.src='RPC-Executer.aspx?command='+obj.value+'&amp;random='+(Math.round((Math.random()*1000)+1)); &lt;br /&gt;	script.type='text/javascript'; script.defer=true; &lt;br /&gt;	script.id='lastScript'; &lt;br /&gt;	void(head.appendChild(script));&lt;br /&gt;}&lt;br /&gt;&lt;br /&gt;function RPCCallback(sHTML) {&lt;br /&gt;	sHTML = sHTML.replace(/&amp;lt;/g, '&lt;');&lt;br /&gt;	var obj = document.getElementById('entryBox');&lt;br /&gt;	var sOutput = '';&lt;br /&gt;	if(!isContactMode) {&lt;br /&gt;		sOutput += '&lt;div style="padding-bottom:15px;"&gt;C:\\&gt; '+obj.value+'&lt;br /&gt;';&lt;br /&gt;		setPromptToNormal();&lt;br /&gt;	} else {&lt;br /&gt;		sOutput += '&lt;div style="padding-bottom:15px;"&gt;'+document.getElementById('commandPrompt').innerHTML+'&amp;nbsp;'+obj.value+'&lt;br /&gt;';&lt;br /&gt;		document.getElementById('commandPrompt').innerHTML = contactPrompt+': ';&lt;br /&gt;	}&lt;br /&gt;	sOutput += sHTML;sOutput += '&lt;/div&gt;';&lt;br /&gt;	document.getElementById('outputContainer').innerHTML += sOutput;&lt;br /&gt;	obj.value = '';&lt;br /&gt;	document.getElementById('commandContainer').innerHTML = '';&lt;br /&gt;	window.scrollBy(0,10000); &lt;br /&gt;}&lt;br /&gt;&lt;br /&gt;function RPCCallbackClearScreen() {&lt;br /&gt;	document.getElementById('entryBox').value = '';&lt;br /&gt;	document.getElementById('outputContainer').innerHTML = '&lt;br&gt;';&lt;br /&gt;	document.getElementById('commandContainer').innerHTML = '';&lt;br /&gt;	window.scrollBy(0,-10000); &lt;br /&gt;}&lt;br /&gt;&lt;br /&gt;function setPromptToNormal() {&lt;br /&gt;	document.getElementById('commandPrompt').innerHTML = 'C:\\&gt;';&lt;br /&gt;}&lt;br /&gt;&lt;br /&gt;function popUp(sURL) {&lt;br /&gt;	var oWin = window.open(sURL, '', 'toolbar=1,scrollbars=1,location=1,statusbar=1,menubar=1,resizable=1');&lt;br /&gt;	if (oWin==null || typeof(oWin)=="undefined") {&lt;br /&gt;		alert("It seems that you have a popup blocker enabled.  Please disable it and try again.");&lt;br /&gt;	}&lt;br /&gt;}&lt;br /&gt;&lt;br /&gt;function setFocusToEntryBox() {&lt;br /&gt;	var o = document.getElementById('entryBox');&lt;br /&gt;	o.focus();&lt;br /&gt;	o.value = o.value;&lt;br /&gt;}&lt;br /&gt;</description>
      <pubDate>Mon, 14 Nov 2005 16:15:40 GMT</pubDate>
      <guid>http://snippets.dzone.com/posts/show/889</guid>
      <author>mornlee (mornlee)</author>
    </item>
  </channel>
</rss>
