Break through the three built-in filtering systems of WINDOWS

Win comes with three filtering systems: ipsec, TCP/IP, and XP/2003 shared firewalls.
Assume that you have obtained a SHELL on the SERVER and can upload files. Some may say that, in this case, the SERVER will definitely be suspended. What breakthroughs should you talk about, in fact, this is true, but I just want to talk about the method, sometimes it will be useful.

1 ipsec
Run ipsecpol-x-w REG-p FireWallPolicy-r NetBIOSsessionService-n BLOCK-f * + 0: 135: TCP-f * + 0: 139: TCP-f * + 0: 445: TCP
You can close the 135.139.445 of the Local Machine. As a result, you can change it back.
Ipsecpol-x-w REG-p FireWallPolicy-r NetBIOSsessionService-n PASS-f * + 0: 135: TCP-f * + 0: 139: TCP-f * + 0: 445: TCP
You can also delete this security policy .....
This is useful for shielding some ports on the server that we want to connect to. For example, the Administrator uses IPSEC to limit that only people in the specified IP Address can access the local port 3389.

2 TCP/IP Filtering
Only port communication of the specified protocol is allowed ~
A normal win web server only opens port 21 and port 80 through TCP/IP filtering. If the SHELL is obtained through the overflow of the SERV-U, upload a filter to check the TCP/IP filtering of the other party,
Filter-show all
Then add the ports we are interested in to the filter center.
Filter-Add TCP 3389; All
Reboot the other party's system ~ After the other party restarts, it can connect to the terminal.

Shared firewall of 3xp/2003
This is the easiest thing to do. The longest service name in a line of net stop "......" is the firewall. Then open 3389 [xp, you don't need this]. You can import the Registry without restarting. Connect to the terminal of the other party and add the desired port in the firewall settings. Do not forget that if the other party's 2003 port is a gateway, it will cause the internal network machine to fail to access the network, and the hook in the sharing should be added. Well, you can leave. Oh, you need to use hxdef to hide the process, service name, and port of the terminal service.