This server may use sql to overflow, what a pity was cannot find the further invasion method, thus had not taken down. Today in the school pledge saw to an article, said is may also hit under cmd enters the sql account number and the password, the method is as follows:
echo exec master.dbo.sp_addlogin 'rooto', '******' >test.qry
echo exec sp_addsrvrolemember 'rooto', 'sysadmin' >>test.qry
cmd.exe /c isql - E /U alma /P /i c:\test.qry
Looked, has tried immediately, unexpectedly real success, but because overflows, server's sql service already stopped, has to wait for when its next time start moved again. However for me, this kind adds the sql account number the method first time, therefore takes records, will prepare later also has can serve a need, ha-ha.
About following also did not say, was on the whole the before old method, although I have not gone a step further now, but estimates already in my hand.
Where previous time wrote about not to write, this time wanted to write a thing.
Previous time said that invades this to be very also simple, but I in afterward invasion process, discovered that is not that simple, added the sql account number, later might have the system jurisdiction, as soon as has not thought looked, discovered has deleted xplog70.dll and cmdshell, paternal grandmother, if below invaded difficultly again to be many, to the evil eight round of placards, has not passed unexpectedly, could not send out, sent the placard to the red fox, several days have not returned, look like to do decide.
This has crossed for several days, afterward I looked in mine hard disk look, had discovered nocmdshell held the order tool, as soon as looked that was the illusory image person writes, mother, punctured the troop also really to be also good, tool also cow B which wrote. Turned on the tool to try, discovered that the real success, has been possible to add the account number and the executive command, but I have tried tftp and echo am not good, looked like or has some questions. Although might the executive command, but has not been able to pass on mine wooden horse, this with I beforehand SQL overflow's jurisdiction was the same, but also has lost the ehco order, before could also echo, how be good, asked several friends, have not obtained the answer which I wanted.
Afterward the custom input " net share " looked, scares to death, the elder sister, saw IPC$, this I before very little has played, had not thought that today has met, arrived immediately on-line has looked for the related IPC$ invasion material. Illuminates the material to make, but is not good, originally on main engine on only then a ipc$ sharing and a cdbook_tem sharing, therefore added added a sharing under cmd " net share the rooto= c:\ ", then input copy update.exe \ \ ***** \ rooto in IPC$, the sound has pressed down the carriage return, brought to smile…
Below lets me see lets me be sad really: “refuses to visit…Duplicate has fallen 0 documents”, the corona dies, paternal grandmother, not added shared, has not let me upload, real BT. Therefore changes to the D plate, saw that to a temp document is spatial, therefore supposes it for sharing, and supposes into everyone sharing, who knows makes a mistake, does not have the jurisdiction, had not thought that the manager is such strong, this also really lets me feel that had the challenging. Does not believe does not decide you, therefore I arrive at the E plate, saw that as soon as to a Bak folder, goes in looked, the discovery is spatial, this should have writes the jurisdiction, supposes it for sharing, copy, may again
Other pages: : 1 * 2 * Next>>
|
You are here: hacking technology
> hacker course
> Content
Category: Home
> hacker course