Shulou(Shulou.com)06/02 Report--

Let's start with a pure, fresh and warm one. System diagram

First record the original state of CMD and OSK, which can be compared later.

Then let's get started. The optical drive loads the system disk, restarts the server, restarts the optical drive

If you are disobedient, you have to repair it, and choose to repair the computer.

Open a command prompt window

Notice here that the system is on disk D. Disk D. Disk D.

You can check the directory at dir and confirm it.

And then be coquettish.

D:\ (enter D disk)

D:\ > copy d:\ windows\ system32\ osk.exe d:\ (backup the osk.exe copy to the root directory)

D:\ > del d:\ windows\ system32\ osk.exe (then delete the osk.exe under system32)

D:\ > rename d:\ windows\ system32\ cmd.exe osk.exe (rename cmd.exe under system32 to osk.exe in preparation for the command prompt to be invoked when you next call the on-screen keyboard)

Restart the server after modification in the previous step, boot from the hard disk, click "easy access" in the lower left corner of the login screen, and check the on-screen keyboard (in fact, the program has been changed to cmd)

When you click OK, the CMD window will pop up.

You can use net user to see which users you have.

Net user administrator Ceshipasswd@9927 (this is used to change the password, changing the administrator password to Ceshipasswd@9927)

Log out of the CMD window, enter the new password and log in successfully. Are you surprised or surprised?

After the login of the new password is successful, let's take a look at the status of the CMD and OSK programs

If there is no recovery, then typing CMD will not run in the run, and it is not secure, and it will be used by others for other operations such as password cracking.

Manual renaming will indicate that there are not enough permissions, and the need to modify permissions will also affect security, which is not recommended. For the sake of safety, we can change it back as soon as we change it, just do it, restart it, restart the CD-ROM drive, and repair the computer.

Is it still a familiar operation.

D:\ > rename d:\ windows\ system32\ osk.exe cmd.exe (change osk.exe to the name of the real program cmd.exe)

D:\ > copy d:\ osk.exe d:\ windows\ system32\ (restore the previously backed up osk.exe copy to the original location)

OK, restart the server.

Everything has returned to its original form, and the only thing that has changed is that the password has been changed by us.

Of course, this is the purpose of our experiment.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.