Master Advanced Clever Change settings to strengthen 3389 intrusion _ network surfing

Author: The Origin of nine swords: computer newspaper

Many friends use the input method loophole through 3389 ports to invade other people's servers, will find that after connecting the machine, can not be like the intranet computer to transfer files, which greatly reduced the attack after the invasion, actually hit Microsoft's own "patch" can solve the problem.

Here, the author will introduce the server side and the client configuration method, so that we can through 3389 Terminal Services, to achieve the terminal machine and the local machine file mutual transmission.

Server side (the attacked party)

First, download the patch package at Http://www.sixvee.com/520yy/cpcw/rdp.rar, which contains Rdpclip.exe, Fxfr.dll, rdpdr.dll three files (these files are available in Microsoft's Rdpclip_ Found in hotfix).

Then, place the Fxfr.dll file under the "\winnt\system32\" directory (Windows server System) and create a directory named "Rdpclip" in "\winnt\system32\". Store the Rdpclip.exe file in this directory. Open Registry Editor to find

"HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Terminal Server\wds\rdpwd", the "StartupPrograms" of which "Rdpclip" Change the value to "Rdpclip\rdpclip.exe". This way, the server-side settings are done.

Client (attacking party)

The client's settings are relatively simple, and the "Rdpdr.dll", "Fxfr.dll" two files are copied to the "\program Files\Terminal Services Client" (Windows Server System) The configuration of the client is completed under the directory.

It should be noted that in the client configuration process, the system will be prompted to overwrite the original existing version of the file (installed Terminal Services in the Windows Server system already have these two files), we just click "Yes" to replace it. At the same time, we cannot use Terminal Services in the replacement process, otherwise the overwrite operation will fail.

Now, we can use the client to connect the server, just like in the network for computer sharing, you can easily and quickly copy, paste file operation. For intruders, there is no other way to get the file on the broiler, at this time your hands of the chicken can be your slaughter.