Introduction to the method of universal server on broiler-Safety tutorial

To write this article, I test the environment with a virtual machine, Windows server, and prepare the following Server software and backdoor tools:
Server Software:
Php-4.3.10-win32.zip the latest version of the official, played a full patch;
Mysql-4.0.23-win.zip up-to-date and stable, under the official;
Phpmyadmin-2.6sp2.zip The latest edition of the official;
ZEND2.57 The latest edition of the official;
cesarftp0.99g version of the Super FTP server, powerful, support the background operation, support remote management;
Backdoor tool:
Chost doesn't seem to be on the market! This tool is placed in a compressed package;
NtROOTkit1.22 to the official final version.

　　Configure IIS to support PHP

First, we set up a folder on the broiler's system disk (for example, to set up a home folder on D disk) and build a few more folders under the Created folder: DNS, Html:web, as shown in Figure 1.

Figure 1

File Directory Description:
Home: The main directory of the entire server, we can just hide this.
Dns:chost Tool 2 profiles, L.TXT, D.TXT, specific configuration please see instructions and animation!
HTML: A directory of Web sites, all of which are placed under the name of the domain name. Install Chost 3rd to fill in this HTML directory.
WEB: The required software for all servers: The Host.mdb file is a multiple-domain bundle database of backdoor tools chost, see the tool description.
Set up the folder, and then start the installation. First installed php-4.3.10-win32.zip This file, the author of PHP installed in the Web folder, this direct decompression can be, but need to pay attention to a few points:
1. Modify php.ini-dist for php.ini copy to c:winnt directory;
2. Modify Code Extension_dir = "./" to the extensions of the PHP installation directory. such as C:phpextensions.
3. Find the code "; Extension=php_gd2.dll Extension=php_zip.dll", let the server support the GD library and online decompression, everyone according to their needs change. Just put the preceding annotation symbol ";" Remove the can.
Copy the Php4ts.dll in the PHP installation directory to the System32 directory of the system, and then set up a suffix to support PHP under the IIS and ISAPI script configuration in Internet Services Manager. As shown in Figures 2 and 3.

Figure 2

Figure 3

Click here to see the interface shown in Figure 4:

Figure 4

A dialog box appears after the point is determined, as shown in Figures 5 and 6.

Figure 5

Figure 6

The server now supports ASP and PHP with a good set of words.

installing MySQL

MYSQL installation is relatively simple, all the way installation can be finished, enter mysql/bin/down into the service Mysqld-nt.exe install first start the service "net start MYSQL" Run the WinMYSQLadmin.exe again, fill in the account root, and fill in the password. MySQL to here is OK, look at the taskbar below the icon shows Green, indicating the success of the start, otherwise the description did not succeed! As shown in Figure 7.

Figure 7

　　small hint: Here set the password is no use, the actual is empty password, we want to use phpMyAdmin to change the password.

　　Installing Zend and FTP

Install Zend and MySQL as simple, do not change what things, very simple, see the description on the OK. FTP installation is also relatively simple: when the installation of IIS, select the php.ini path, the default c:winnt all the way to the next step is OK. The author chooses is the cesarftp0.99g version, the function is formidable, supports the remote management.

Setup is over, the Universal Server Setup-> when the system starts, and the server runs when it starts, so it is registered as a service. Select Allow remote control-> change control port and password-> port to change ftp. This can be controlled remotely, the function is very powerful! As shown in Figure 8.

Figure 8

　 Domain name settings

This is going to be chost. Chost Usage Instructions: Edit two text files in Notepad before installation (you must put them under the DNS folder):
1. Disable the Domain Name list file (disablehost list files name D.txt)
The domain name access in the list will appear "No Web site is configured to". ", access to this inside of the domain name or IP will appear:" No Web site is configured in this address. "And I Stay here Empty.
2. Ignore Domain Name list files (ignorehost list file Name l.txt)
Domain name access in the list is not affected by this program. This is generally open to see if there are any bound domain names in IIS
Suggested format: "localhost 127.0.0.1 local IP other domain name", so that access will not be disturbed by this program! File format is a domain name for each line, you can use the * number, such as *.com,*.abc.com.
The file can be saved as any file name, remember the path, and enter the correct location and filename at the first step of the installation. After installation, you can modify these two files again, but you must restart the W3SVC to be effective after the modification. Select the installation file to start the installation, the installation should be aware of the following content:
Disable Host List file name: (Your own dnsd.txt path)
D:homednsd.txt
Ignore Host List file name: (Your own dnsl.txt path)
D:homednsl.txt
DSN connectstring is a DNS connection string that specifies a multiple-domain binding database, which uses the Host.mdb database (or you can add a Host.mdb a table with the same name and structure as the domain table, you must add a system DSN to the ODBC data source management, point to Host.mdb location (the database can be a different name), and fill in the DSN connectstring with "DSN=DSN name;" such as: "Dsn=host; Website ROOT directory: (your own HTML path), as shown in Figure 9, 10.

Figure 9

Figure 10

D:homehtml This directory is the main directory of the virtual site, to open the site and binding domain name as long as the directory under the name of the folder is OK. I built a folder named 163.com under the D:homehtml folder. As shown in Figure 11.

Figure 11

Point Start Menu-> Program-> Admin tool-> Select DNS, this will pop up a DNS Controller operation window, select forward to search area right key new zone, Enter 163.com in the zone name, and then always default, then in the search area will create a 163.com folder, select it, right button new host, named Www,ip address where for the broiler IP, point added. As shown in Figure 12.

Figure 12

Here to set the domain name, in the 163.com folder to build a test page to test, I have a key here a index.asp test page, now the server does not support the ASP suffix, we also want to add. In Internet Information Services, choose the WWW Server main properties, select the document, add index.asp (and more commonly used, such as index.php,index.html ...). ), as shown in Figure 13.

Figure 13

After setting up, enter 163.com in the browser to see what appears? Our test page, as shown in Figure 14.

Figure 14

Now to teach everyone subdirectory binding domain name method, a website can not only a domain name it! Copy the Host.mdb file in the toolkit to the home folder, open it, add a new record in the domain table in the database Host.mdb, UserID casually, can fill in as needed, maindomain for the space main domain name, OtherDomain for the other bound domain name, the format is: ", Domain name 1, domain name 2,*. Domain Name 3,", note "," is half-width, and before and after two can not be omitted. As shown in Figure 15.

Figure 15

After the addition completes, you must add a system DSN to the ODBC data source management, point to Host.mdb location (the database can be in a different name), and fill in the DSN connectstring with "DSN=DSN name;" such as: Dsn=host, as shown in Figure 16 and 17.

Figure 16

Figure 17

The Webconf.asa file and chat folder are then created in the site root directory, and the file contents are:
[Virtualhosting]
Domain name = folder name
Such as:
[Virtualhosting]
Bbs.xxx.com=bbs
Test.xxx.com=fewfew
Where the domain name must be already bound in the multiple domain name database. Create a test page in the Chat folder. Method and Figure 12 of the same, but we add is chat is not www, to note that I am here to simulate the DNS domain name, the actual operation is you to your domain name control surface version to change a record, point to the server IP on it. As shown in Figure 18.

Figure 18

The last is to hide the process of our services, if found to hang, I use the rootkit back door to hide, this is a very powerful kernel-level back door, we only need to install all the programs and folders to hide it.

See here is the heartbeat? , the original Web server is so good set up, and so what? Turn the meat into a Web server.