Privilege Escalation and repair for out-of-star Virtual Machine Systems

Source: Internet
Author: User

The out-of-the-star virtual machine has been regarded as BT. In fact, I feel better. At least he supports aspx. If you find some execution directories, you can kill them in 99% seconds and take the server permissions.
The latest version of the directory that can be executed outside of the star is C: Documents and SettingsAll UsersApplication DataMicrosoftMedia Index, and the directory C: PHPPEAR. C: phppear I found that many virtual machines are writable and executable during the 10th and 11th months, but not many of them are found. C: Documents and SettingsAll UsersApplication DataMicrosoftMedia Index this directory forum has mentioned many times, and the pesticide articles last night are quite clear.



The biggest off-star BUG is that FTP comes with the system, which can be listed by listing IIS configuration information. (Upload cscript.exe and modified adsutil. vbs)



7i24 virtual host management platform controlled end freehostrunat fa41328538d7be36e83ae91a78a1b16f! 7
Freehostrunat is created during off-star installation and belongs to the administrators user group. It is estimated that some people still do not understand this user fa41328538d7be36e83ae91a78a1b16f! 7. What is the encryption method. I used to be so stupid. I also ran to the external registry, configuration files, and so on, and finally did not decrypt it. Later I thought about it. His verification process could not be encrypted, because the FTP that comes with windows would not recognize the ciphertext, and other websites would be in plain text, so I just need to log on directly.

Fix: wait for the official fix.

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.