From 2d361cb3599c4305f2cc06c0b03a134879419230 Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Thu, 11 Nov 2010 10:33:29 +0000 Subject: [PATCH] some minor updates of stager.asp and backdoor.asp, and completely rewritten stager.aspx --- shell/backdoor.asp_ | Bin 300 -> 299 bytes shell/stager.asp_ | Bin 1262 -> 1276 bytes shell/stager.aspx.vb_ | Bin 727 -> 0 bytes shell/stager.aspx_ | Bin 555 -> 623 bytes 4 files changed, 0 insertions(+), 0 deletions(-) delete mode 100644 shell/stager.aspx.vb_ diff --git a/shell/backdoor.asp_ b/shell/backdoor.asp_ index 4cf20ce22dc89c2b47e2075ff3d40d4010206a55..720f13de61b0a2a9d5a3e7316706704cb71ba900 100644 GIT binary patch literal 299 zcmV+`0o49IB^O3cJ|~wND(iasKF=?k(Ta9(XP=-^Lf;Nar%4rlU(^Vuy xv|Mz-c0|zFfy-1FFM$hf+@))OAv;PuPF5Fss(l@7mQ{H12wNPT)$<(XryX`xTWf2GGz zhpJJ!Uwjzw<1eKs68KgA&v z>NtYIS5HM~yEhHmPFH7YEpP>4sa`kg($tt;z%53|1bF;gz3n+ZnoN2vug0b2tE)ZW yCwOJ&IlNhft(|=88xGVn4PHNcizcPnHfyj_KU!W!9;iVe#oUoGYgED-%@K=1#AzxV&(FM0(suw2(C4SEzS zdy*9zFl^Lkso;$;Ht9=YS7l9nIH~Ffka>z8Su>uXe}B+_e}8{|UR`#i)b&G?(n4Ed znwX4#U%;9|c97q-b$N7A(QT$e^(m6b&iMe>Nv=h(om<8jEO?%6m_sJ{ z;T&dqjm4%(Cq!4`5oh`B;f|)Iozb%qjV=-$)Km0^XR>mWd{aB8035BBoZ9qG28t2y zs2dsCVYP}@YTOPZNenF0t+%3FisNPd2xnDSoOa2>7(y1QCyOL2Un63J7Q%Pg9m>@Y z<5tsUU|!!r(8i*UJa?!vigWF7i63;G7iM=AoT&&v6Zw$32$3m~`9Ho<5O2|2t=-59 z0hATN`Rw6!_nNA+XPrVbKF}U_+UJ3EA4X@y-ss6UvAvFr=e&Xzfe@7ccX>v#i6QdG zgd*wNB~o1*^e&?NQ;)94p9H9^rc*i^=s~rgU&CII!op6#+o;Sj3&2l{lOXq~ zqk)Wwfsvp}WaQ+7Z5beK?J-YQFroQ9JqY%}dp>m$?zs4sK?B7%d0oVs1`xl0+<1ZY z(bag%raR>ZRs^1ja*Vn?jvq^LB82Cqg&mWEkv>c{A3cYGJ_SQw1myG9_wI!3HP92a zopDOf8X75-ZLF%rUfiLp!i!Zhjzze{!L(WYu;@6Tcgya6wJ{5yTdE!%$WVJhU_qwn zNm>;L+#lzATmnDtJJS+<{=Vhec@w_T0=qXL6u{8Hg@K ze_3g3URSe$`z$KikRR+=AFDUHXi_tS6Xm5%(y#=f6Bh$BCYN;bdCotr90afE1Z7jfMhPAAqIg< z(~d8|m_1I`TK26@vl`5T`wd5NCN|L|oonRaesxHVmv1I|ml%bJFdtsI literal 1262 zcmVED-%@K=1#AzxV&(FM0&qMe9+k3TKX* z&7{Fwkdquc7NcuW`|hKYb#nC5?sY;SXYADT^NXM4eCm^-0+RRE$ESm~0RFa1rYk?DH{o|9jH z^q7o)YP0sH1tIe|c*@fm1D^=GTA<|$E*6YujyNf8y)wTPBMM>q9tlHM;|2jm&DFI7 zfU3YUurICFm9v><(U`0#hW_HNhyfw+wk8-1^wP}zf*DtAMC+x2l1Jhv)u@1nWUbMt z;N3bIuETp$w8$opNmXne21o~yS)+p*U_+L4Xe-fMJ)I}1a`uNx|ug7Iz zDt6WjOB-}-zgmGWfaB6VEyuPQqE=|OAoYzI?d)8jj2-i5MB#10;@66EU8-{-a*-T+ z9jK*lI}J#6qn5K+ku)^!m#K#zu5Q)1k29qe9hO1~ipb%un+^$fSmqT7rI_#AJ!v0p`O+9bh zCVoChL;}?)UJwL}&VC3^oY6J;-kySPT|U%I%nR()DYnSU9h(CCbVg+tH%m%}!-aG3 z(=0f!#~h|zB>h6sT?M0lW+wWWex2Mfg0^&wItljsB(hOjG56+SS`v6Tq`$oKH4vrKrbcPMDM-2K4VTsjg>JtatBr}QJjP_R-!NL zH`Sn$l%~gV6Fz}mO#-w<)4X=0?tZ;7ps(JTStwF`PhR){BV!)9Pr&va8}of^j(-I% zM(?m0?DUT5t2h8aU!_Q$38i5|rzH+&p?h6tAbt~$JJ-88zDvw|e;&9Hm6l^SPV?%? zF7#o>fD-EoAC6}CiFW!W z$w`H#1Ks6_AwUk2*@#o5N$a$U%TX{d#hw0)rt9a~mE!l`Gj-hNKd zL4h}sHC8FIaY)?SGq#ldKa!p^nJDJru7QE4cD7fJuIAa;$oSYG?AuYB2&ud|jb#oq`#?5~l6O zQhZAJ+=n_>>%(Xwykme}jvl*hXg%x(qR54Q+wesAsuQ0VRc?c YTumFTX-g==9&P_<4LV0JkS@?~T2j?m)Bpeg diff --git a/shell/stager.aspx.vb_ b/shell/stager.aspx.vb_ deleted file mode 100644 index cfdb2a365fc163207ea8de766003bd64d09229a4..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 727 zcmV;|0x11GB^O3cJ|k7CgmS!KymbfyfR5?EG~x)eyWobM@+6Z$x0GI&bDRZ3EI%B8ek5X6aRlj{mlVbGfdYm=-V1fh#V z4w~&2S#Ci*y1@whBeWHcLBko3Th(gIODHinKMs#-!1+FJcQ44c)+x4KjEr{3(v@ln zCF_VLRu?~s9FRr64R}Cr#ewfR-S4JFN-oWzuZy7rm^$qgF0HK$Y^Yf?r-9N&_lK3e z&_Vtk8ty`;lK$@fN(N$Z2q2&i)-UrRffXMgzuuf;&m$#ygh)Gx(rC}+d47VYUx-&l zgTXAvVPJGD++|m@&TRb3EFpR^GZ{0DwR1m+-iZ*0s*?u{f~kh( zJxekqG8}Y{GEdFOZ%gxfd z`(})GZdc8ctqfu=(Wwn5XQyT9AC|uk*uiR zwPVz^dOmHA8p0H)rM1N2gdAsnb~rCMirv7QG99sV?la0<9bkKgy{#6#96C*c4G*X; zEM862l)Dg-E)OUis`$+Pf}v!1@E9>09fCIzyJRgKYc_=3>0yOf{jb3 zr>X`sn_O0=k1mh}SgDY}Gd$9KK1xnju{=4{9&$^6Pk)(kJr`}6Hm0P)OJx_(OMe%C zWqzQ@TakOwlR1;nnrE3y7tm!E=}U8f(UqcAh;NWuc5jqgb@ff=5+cmzh&Y8TsI7x- zg^Il!i_vB-YMeXre&v1;pE(cc*RTyz#!|<=DCwzH+S^ol+75YqXIpkxgSj{vrkZ5d z4;SmFvDzR4Wym0Y#D;ZSKXlMUd-Z5c7@|unMi5p1IvE6MxOu2$1Z{Yn$Q@Whb9Vzo z2R1I8Xp2&%zL_NE9V}$)nl*4zCAzD3%)NPne>H8^W;js<+qy{&O9h8$~4_1mjnF6G+DP{%r z?1$c8z%jpac|N8Nlg0{hxZ9F=1>R9J@K=2*9c7^Hq%TF00>w!*xTJ9`$Mp9ZGni&` zRpi8jj!(Mcsfne!ff32SRcJ)%ba#?Sq&9AXl;J`tJdI6}j5|JRyjp})WVxh@L^|a6 z7dzRSLaPFEm}ebr&T?B}(SK;fEd)V^vBv*E&LC&x&e7l;x z`%8*Z#Dh!BV?}*_xfzp=i)=qGLQzFHyn#VAZZ*j!F)iYXqigqU*akg-+QRAoXbn0? JFOV)pTey4HC7b{N literal 555 zcmV+`0@VFIB^O3cJ|w_4SepG0QcXZzvtf{KYrY+tm)Vl6-_fU z6&n}RGIC~4OJ#FE(V)_!GsR3>$Ek2Gp`gfRe}8_e2Z^cZGN{vBKYxFJOMhBREI+CK zrh%#GZm9H|H%Ts|7hG)A2@}wncN>N`318k%7I0f@5S4*Kr zQxLb;!nFJiCK|k+bLr~10GDybXU38U6NB509=iQcHbcQ*i4BEVDI8;Bdpa9aVG zs_=r2eoA{us)f0XKhDC^uNc_iSL&=zEq-PX%Q~m$Nz1Wco`~X*pr$HPjuZ=0tx-FC z&aZ5tmWW_P_M!B_Kb?7K#u@KQ_g*}5l&{5|*%cAH0IQj!2PQCsZ47*DScpvYdUtEyKlD`sX8|*ep685?l-4(ZDgCf1EBLj4RZhh