New cloud 4.0 uses shell + dongle in the background

Today, one machine calls me shell.

Http://vip.xiaojiecn.com/admin/admin_login.asp

Account admin password 1 *******

 

This website has dogs and everyone knows it ~~ Search for any new cloud on the Internet. In the background, shell is used as a template, and all other registered members fail to pass shell !! (Try it on your own if you don't believe it). Let's try another method today.

Laizhang's dog photo ~~ It feels like an old dog.
0x01 go to the background management office
Channel Management-animation-edit, change the image address to 1.cer; (dongle !!!)

0x02 coming to the animation Channel
Add an animation -- "upload a horse" (it doesn't matter if you choose not to change the name)

 

0x03 check shell
Done

 

0x04 Elevation of Privilege
The website directly gave SA. Isn't it easy ?!
It hurts, and the trojan cannot connect to www.2cto.com.

Configure it with a kitchen knife

 

Forbidden Shell is disabled

0x05 export the Registry

 

0x06 reflection ~
Do not be afraid of a safe dog. Not every dog is abnormal. After all, abnormal dogs are configured according to administrator configuration rules. Not all administrators will configure them ~~
Don't worry if you fail to use the shell method on the Internet. look for other ways and flip the page. Maybe there is another 0-day greeting ~
 

Xiaobian has obtained the server permission