[资料]入侵网吧服务器（[invasion] Internet bar server）.docVIP

[资料]入侵网吧服务器（[invasion] Internet bar server） [invasion] Internet bar server IPS Internet bar server Author: Guo Shixiang AP statement: This article just told you can enter a Internet server, and did not encourage by this mean, any damage caused by internet order behavior and the author and the authors school. This article can be freely reproduced, but please respect the authors copyright, keep the article intact. Have the impulse to write something, just too lazy to write once, free internet access in the Internet Dongdong, think now is the replacement of something else. Some things are too long and easy to go out of fashion. All the tools mentioned in this article can be found online. First, determine the target The first to determine the target, that is how much the Internet server IP. My client where the Internet is filled with Windows 98+ 2003 Vientiane, estimated Windows server should be more than 2K, with the Superscan 3 scan port 135 ~54 this range, there is only one result to the service desk and looked at a glance, really only one service is not wrong, to determine the target. Two, begin invasion Since the server has 135 ports, then use RPC service buffer overflow overflow tool RPC Exploit GUI try to choose a target for Win2K (ALL) and WinXP (ALL) have not been successful, perhaps is patched, possibly by Skynet firewall on 135 ports such as a limit. Open the Superscan, over 00 (just sweep out the internal server IP address) of the 1~500 port, the display server opened 21 (FTP), 80 (HTTP), 135 (Location Service), 139 (NetBIos), 445 (Microsoft-DS) port, in the IE address bar, enter 00; there is a shared directory, Backup, open the browser again, a lot of things, just have setup Vientiane 2003 let me not too disappointed. Return to the Superscan, you can see the results of column display server using IIS5.1, can determine the target server using Windows XP, Webdavx XP seems to overflow machine is no hope, X-scan is used to scan the web server, the report found