基于ASP上传源码的漏洞分析及解决策略研究

Analysis and Solutions Strategy Research Based on ASP Upload Source of Vulnerability

随着ASP技术的发展,网络上基于ASP技术开发的网站越来越多。与此同时,ASP木马被上传至网站后,其后果也是灾难性的。由于ASP木马不同于普通的可执行程序木马,它与正常的ASP文件并无本质不同,只是程序代码具有恶意性,因此很容易进行伪装、修改,且由于各种原因,ASP木马很容易被恶意上传,导致非常经典的ASP上传漏洞。该文就是基于对ASP木马上传漏洞的原理予以详细分析和研究,找出问题的根源所在,并提出彻底解决这种上传漏洞的合理化建议。

With ASP technology development,the network-based the ASP technology development site on more and more.Meanwhile,ASP Trojan uploaded to the site,the consequences are disastrous.ASP Trojan Unlike ordinary executable Trojan normal ASP file,it is not fundamentally different,just as the program code with malicious,so it is easy to disguise,modify,and for various reasons,ASP Trojans easily malicious upload,leading to very classic ASP upload vulnerability.This article is based on the ASP Trojan upload vulnerability principle be a detailed analysis and research,to identify problems root cause and put forward reasonable suggestions to completely solve this upload vulnerability.