Sometimes we are happy to use the Serv-u Local privilege elevation vulnerability to achieve full control of the broiler, but there is always a mistake when we get Webshell. The commands we enter in the Webshell are generally like this:
D:\WEB\su.exe "NET user 1 1/add"
In many cases it will not succeed, and the following information is generally returned:
<220 serv-u FTP Server v6.0 for WinSock ready ...
>user Localadministrator
<331 User name Okay, need password.
>pass #l @ $ak #.lk;0@p
<530 not logged in.
This situation is because the administrator has modified the default Serv-u administrator account or password, unable to login nature can not elevate permissions. It is estimated that many friends will shrink from this situation. In fact, we have the means to continue to use serv-u elevation of authority.
Interested friends can use the UE or WINHEX, such as the hexadecimal editor to open the Serv-u management program: ServUAdmin.exe, carefully you will find that it is stored in the administrator's account and password, then how to get this account and password? There are three different ways:
The first is to change the password did not change the account situation. We can open ServUAdmin.exe directly with UE, search account name "Localadministrator", tight the string behind the account is the password. Generally this format: LocalAdministrator.password.Globl ..., where password is the password we need.
The second method is to change the account does not change the password situation. This situation is very rare, the general people believe that will not be so modified it? We only need to search the password on the line, ditto.
The third method is universal, directly open the same version of the two ServUAdmin.exe, in the ServUAdmin.exe with the default password to find the address of the password, directly to the target machine ServUAdmin.exe query the address can find the password and account.
After the password if the server to support PHP, you can use Wofeiwo serv-u local privileges to enhance the PHP script to achieve permissions, because the account and password can be modified, or directly using the SERV-U local rights generator to generate the required program, and then use the UE modification can be.
Believe this method announced, the network will have a number of servers down, I hope everyone is enough.
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.
