荔园在线
荔园之美，在春之萌芽，在夏之绽放，在秋之收获，在冬之沉淀
[回到开始]
[上一篇][下一篇]
发信人: Lg (创造人生的传奇), 信区: Hacker
标 题: NAV 5.0可以查出你的机器是否已被Back Orifice黑^[?*@?* @?* @i**
发信站: BBS 荔园晨风站 (Fri Nov 6 14:41:52 1998), 站内信件 (WWW POST)
------------------------------------------------------------------------
·Info on Back Orifice Clark_Chang@bbs.ustc.edu.cn (土星)
------------------------------------------------------------------------
NAV 5.0可以查出你的机器是否已被Back Orifice黑掉.
Back Orifice Overview
Back Orifice is a tool consisting of two main pieces, a client
application and a server application. The client application,
running on one machine, can be used to monitor and control a
second machine running the server application. The operations
that the client application can perform on the target machine
(e.g., the machine running the server application) include
the following:
Execute any application on the target machine.
Log keystrokes from the target machine.
Restart the target machine.
Lockup the target machine.
View the contents of any file on the target machine.
Transfer files to and from the target machine.
Display the screen saver password of the current user of the target
machine. The creators of Back Orifice also claim to be able to display
"cached passwords" for the current user, but no other passwords were
displayed during our analysis.
Technical Details
Server application installation
In order for Back Orifice to work, the server application must be
installed on the target machine. This involves executing the server
application on the target machine. The server application is a single
executable file with a size just over 122 kilobytes. The application
creates a copy of itself in the Windows system directory and adds a
value containing its filename to the Windows registry under the key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
The specific registry value which points to the server
--
--
☆ 来源:．BBS 荔园晨风站 bbs.szu.edu.cn．[FROM: 210.39.0.47]
[回到开始]
[上一篇][下一篇]
荔园在线首页 友情链接：深圳大学 深大招生 荔园晨风BBS S-Term软件 网络书店