创意安天

 找回密码
 注册创意安天

刚写了个nod32通用的id自动获取器脚本

  [复制链接]
发表于 2010-5-14 11:55 | 显示全部楼层 |阅读模式
本帖最后由 孤独浪子 于 2010-5-14 11:57 编辑

打开记事本复制以下代码,并另存为xxx.vbs(名字可以自己起,但一定要是.vbs的后掇名。保存类型 要选 所有文件 )

推荐用nod32 2.xx版的,暂用内存小,杀毒快。
  1. Option Explicit


  2. Dim theURL : theURL = "http://hi.baidu.com/lazivip" '

  3. Const MyName = "GetValidID"
  4. Const MyVersion = &H1016
  5. Const HKeyLocalMachine = "HKEY_LOCAL_MACHINE"
  6. Const HKEY_LOCAL_MACHINE = &H80000002
  7. Const RegEset30 = "SOFTWARE\Eset\ESET Security\CurrentVersion\Plugins1000400\Profiles\@My profile"
  8. Const RegEset27 = "SOFTWARE\Eset\Nod\CurrentVersion\Modules\Update\Settings\Config000\Settings"
  9. Const UserStartup = "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Startup"
  10. Dim RegEset : RegEset = RegEset30
  11. Dim str : str = ""
  12. Dim ids
  13. Dim un : un = ""
  14. Dim pw : pw = ""
  15. Dim PassBytesA : PassBytesA = Array(&H61, &HD4, &HDD, &HFB, &H5B, &H35, &HB7, &H19, &HEC, &H2B)
  16. Dim PassBytesB : PassBytesB = Array(&HD6, &HE9, &HF0, &HF2, &H64, &HAD, &HC8, &H75, &H31, &HBC)
  17. Dim oShell : Set oShell = CreateObject("WScript.Shell")
  18. Dim oFso : Set oFso = CreateObject("Scripting.FileSystemObject")
  19. Dim oXmlHttp : Set oXmlHttp = CreateObject("Msxml2.XMLHTTP")
  20. Dim StartupPath : StartupPath = oShell.RegRead(UserStartup)

  21. If Wsh.Arguments.Count > 0 Then If Wsh.Arguments(0) = "v" Then Wsh.Quit MyVersion
  22. If Wsh.Arguments.Count <> 0 Then Wsh.Quit -254
  23. If oShell.CurrentDirectory <> StartupPath Then
  24. Dim StartupFullPath : StartupFullPath = StartupPath & "" & MyName & ".vbs"

  25. End If

  26. On Error Resume Next
  27. oShell.RegRead "HKEY_LOCAL_MACHINE\SOFTWARE\ESET\ESET Security\CurrentVersion\Info\ProductVersion"
  28. If Err.Number <> 0 Then
  29. On Error Resume Next
  30. oShell.RegRead "HKEY_LOCAL_MACHINE\SOFTWARE\ESET\NOD\CurrentVersion\Info\CurrentVersion"
  31. If Err.Number <> 0 Then
  32. Wsh.Echo "本机没有安装ESET产品"
  33. Wsh.Quit -128
  34. End If
  35. RegEset = RegEset27
  36. End If
  37. On Error Goto 0

  38. With oXmlHttp
  39. .Open "GET", theURL, False
  40. .SetRequestHeader "Pragma", "no-cache"
  41. .SetRequestHeader "Cache-Control", "no-cache"
  42. On Error Resume Next
  43. .Send
  44. If Err.Number <> 0 Then
  45. Wsh.Echo "连接不上ID分发网站"
  46. Wsh.Quit -1
  47. End If
  48. On Error Goto 0
  49. If .Status <> 200 Then
  50. Wsh.Echo "ID分发网页有错误"
  51. Wsh.Quit -2
  52. End If
  53. With New RegExp
  54. .IgnoreCase = True
  55. .Global = True
  56. .Pattern = "(?:NOD32升级用户名称)\s*:\s*(EAV-\d+)[\s\S]*?(?:NOD32升级密码)\s*:\s*(\w+)"
  57. Dim match
  58. For Each match In .Execute(oXmlHttp.responseText)
  59. str = str & match.SubMatches(0) & ":" & _
  60. match.SubMatches(1) & vbcrlf
  61. Next
  62. 'Wsh.Echo str : Wsh.Quit
  63. End With

  64. If Len(str) = 0 Then
  65. Wsh.Echo "在ID分发网页内找不到任何ID"
  66. Wsh.Quit -4
  67. End If
  68. Dim i, j, m, k, u, tmp
  69. Randomize
  70. ids = Split(str, vbcrlf)
  71. i = Abs(UBound(ids) - 1)
  72. if i > 15 then i = 15
  73. ReDim rand(i)
  74. For j = 0 To i : rand(j) = j : Next
  75. For j = 0 To i
  76. k = Fix(Rnd() * (i + 1)) : u = Fix(Rnd() * (i + 1))
  77. m = rand(k) : rand(k) = rand(u) : rand(u) = m
  78. Next

  79. For j = 0 To i : Do
  80. un = "" : pw = ""
  81. tmp = Split(ids(rand(j)), ":")
  82. un = Trim(tmp(0)) : pw = Trim(tmp(1))
  83. If un = "" Or pw = "" Then Exit Do
  84. .Open "GET", "http://update.eset.com/download/engine3/em000_32_l0.nup", _
  85. False, un, pw
  86. On Error Resume Next
  87. .Send
  88. If Err.Number <> 0 Then
  89. Wsh.Echo "连接不上ESET官址进行验证..."
  90. Wsh.Quit -1
  91. End If
  92. On Error Goto 0
  93. If .Status <> 200 And .Status <> 304 Then Exit Do
  94. ReDim binarr((Len(pw) - 1) * 2 + 1)
  95. For k = 0 To UBound(PassBytesA)
  96. binarr(k * 2) = Asc(Mid(pw, k + 1, 1)) Xor PassBytesA(k)
  97. binarr(k * 2 + 1) = PassBytesB(k)
  98. If k + 1 >= Len(pw) Then Exit For
  99. Next
  100. oShell.RegWrite HkeyLocalMachine & RegEset & "Username", un, "REG_SZ"
  101. GetObject("Winmgmts:root\default:StdRegProv")_
  102. .SetBinaryValue HKEY_LOCAL_MACHINE, RegEset, "Password", binarr
  103. oShell.Popup "随机抽选的新ID已被验证和安装" & vbcrlf & " Username: " & un & vbcrlf & _
  104. " Password: " & pw & vbcrlf & " (本窗会在5秒后消失)", 5, MyName, vbOKOnly + vbInformation
  105. Wsh.Quit 0
  106. Loop While False : Next
  107. Wsh.Echo "ID分发网页内的ID全部无效"
  108. Wsh.Quit -3
  109. End With

  110. Wsh.Quit 0
复制代码
发表于 2010-5-14 14:30 | 显示全部楼层
围观黑客....
发表于 2010-5-14 22:30 | 显示全部楼层

哇靠!

本帖最后由 特洛伊剑客 于 2010-5-14 23:08 编辑
围观黑客....
熙雅 发表于 2010-5-14 14:30


围观传说中的山寨版黑客程序!
发表于 2010-5-15 16:24 | 显示全部楼层
哈哈~   我说看着眼熟....
 楼主| 发表于 2010-5-15 18:07 | 显示全部楼层
回复 3# 特洛伊剑客

去你的
发表于 2010-5-15 19:21 | 显示全部楼层
回复  特洛伊剑客

去你的
孤独浪子 发表于 2010-5-15 18:07


我真想亲手一板儿砖拍死你!
您需要登录后才可以回帖 登录 | 注册创意安天

本版积分规则

小黑屋|手机版|Archiver|创意安天 ( 京ICP备09068574,ICP证100468号。 )

GMT+8, 2024-4-20 11:21

Powered by Discuz! X3.4

© 2001-2023 Discuz! Team.

快速回复 返回顶部 返回列表