Deofuscation vbs (cscript.exe)

支持 HackTricks

一些有用的内容,可用于调试/反混淆恶意 VBS 文件:

echo

Wscript.Echo "Like this?"

评论

' this is a comment

测试

cscript.exe file.vbs

写入数据到文件

Function writeBinary(strBinary, strPath)

Dim oFSO: Set oFSO = CreateObject("Scripting.FileSystemObject")

' below lines purpose: checks that write access is possible!
Dim oTxtStream

On Error Resume Next
Set oTxtStream = oFSO.createTextFile(strPath)

If Err.number <> 0 Then MsgBox(Err.message) : Exit Function
On Error GoTo 0

Set oTxtStream = Nothing
' end check of write access

With oFSO.createTextFile(strPath)
.Write(strBinary)
.Close
End With

End Function
支持 HackTricks

Last updated