Solution for Asp.net to enhance user permissions to execute EXE programs

Source: Internet
Author: User
Tags windows remote desktop

The remote server VNC cannot be started due to a misoperation, which means Remote Control of the server is no longer possible,
The server has a major project operated by the company. If it is not solved, the problem will be big.

So I tried to use the Windows Remote Desktop through Port Scan intrusion. The result was that the server was not able to perform port filtering.
In the end, you can only deploy the web page to IIS through port 80, and then run web to start the remote service. You can use the website replication function of.
Publish to a remote server on the premise that the Administrator account and password of the remote server are available.

Later, it was found that, due to Asp.net permission issues, there were limits on executing the EXE program on the server, starting the service, and reading and writing the Registry under a specific item.
Fortunately, you can implement File Replication by preparing web. config. Create an <identity impersonate = "true"/> under the system. Web node of Web. config.
You can copy files on the remote server by setting up nodes. The account and password verification box is displayed when you copy files. Only when the verification succeeds will the copy be successful.
With this file copy function, it is easy to do. The next step is to improve the Asp.net execution permission. This requires modifying the Asp.net configuration file on the remote server.
The machine. config file, taking. NET 2.0 as an example, is usually found in the C:/Windows/Microsoft. NET/framework/v2.0.50727/config directory.
To modify the preparation of this file, copy the file to the virtual directory (that is, the directory where the web page is deployed) so that the file can be copied through the vs website.
Go to the local computer, modify the machine. config file on the local computer, and then upload it to the server, and paste the original file.
The <system. Web> node under the machine. config configuration file has a <processmodel AutoConfig = "true"/> node. You can modify the username attribute of this node.
To improve the permissions, you must upgrade the permissions to the Administrator level and have unlimited operations on all resources. Because usename is set to machine by default, it is not displayed,
Modify the value of username to system. The modified node: <processmodel AutoConfig = "true" username = "system"/>
After saving the preparation file, you can resume the file on the remote server and restart the remote server (IIS service must be restarted to take effect. Now, you can run any program,
At this time, I used Delphi to create a program to start the VNC service, upload it to a remote server, run it on a web page, and connect it with the VNC Viewer. OK, I'm done!

I declare that this method cannot be used for illegal operations

 

4.5-1018 off zone classic super handsome edition cotton blend slim fit jacket highlight []
$81.4
Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.