CrLf 当前离线
论坛巡查
评分人数
wskwfkbdn (见与不见)当前离线
五级士官
TOP
bailong360 (zhonghua)当前离线
上尉
mshta.exe vbscript:msgbox("test"):close %windir%\Sysnative\mshta.exe vbscript:msgbox("test"):close复制代码
In most cases, whenever a 32-bit application attempts to access %windir%\System32, the access is redirected to %windir%\SysWOW64. 32-bit applications can access the native system directory by substituting %windir%\Sysnative for %windir%\System32.
mshta vbscript:"<script language=vbs>Set UAC=CreateObject(""Shell.Application""):UAC.ShellExecute ""%__APPDIR__%cmd.exe"", ""参数"", """", ""runas"", 1:window,close</script>"复制代码