Detailed backdoor hidden technology

Today, Xiaobian will explain the hidden technology analysis of the backdoor. The following methods, as long as you make good use of it, it is not a problem to be a hidden ASP backdoor.

1. Inserting the horse method: In fact, we can directly insert a sentence into the existing page, but the problem comes out, like the commonly used: etc. If these words are inserted, then Will report an error, it will be found … In fact, we ignore a S-side that is used every day:

A word of icefox client, this is a Javascript script, unlike calling Vbscript, Javascript It runs on the client side, which is also on the HTML side, so we can insert it directly into the page without error. In this way, the technology of hiding the back door is achieved. (It is recommended that you find a larger page, just plug it in, these labels can be backdoors.)

2. Create a non-standard directory: This can be done with CMDshell, of course, the best. Create a folder directly in the site and directory, DOS method: md adai and then copy your own Trojan to this directory, such as Trojan on d:\\web\\wind.asp copy it to d:\\web\\adai\\ Wind.asp can also play a hidden role.

3.include call method: I know that there is a recent easy ODAY, is to use the 03 server IIS parsing vulnerability, I will explain to you, 03 server will parse the asp file, so Can achieve our hidden back door technology, we will often see: such a code, OK, we use this method to hide. First create a normal asp folder (remember, is a folder), such as adai.asp, and then create an image file such as adai.jpg in adai.asp. Insert a sentence code inside. Then create a text file like wind.txt, then insert : in the wind.txt. So when we visit the wind.txt of the site, it is our back door, and some rookies may ask. : Is the content of ASP, how can it be effective in JPG? I did not say it, 03 server IIS will parse asp file. So when we visited adai.jpg, he mistakenly thought that he was accessing wind.asp. This method is also very good in hiding. You can put adai.jpg in another directory, remember to change the path in the include file.

If you are afraid of being discovered by the administrator, you can hide him. Enter under DOS: attrib +H +S adai.asp