guest权限提升方法总结（Summary of guest privilege raising method）.docVIP

guest权限提升方法总结（Summary of guest privilege raising method） Summary of Guest privilege raising method Summary of Guest privilege raising method: Now the intrusion is becoming increasingly difficult, peoples safety awareness are generally improved a lot, even individual users understand the firewall and anti-virus software to equipment in hand, for the Microsoft patch is no longer without interest. So now we want to host the password on the Internet is almost a scanning weak fond dream. (thats a great thing.) But it also makes it difficult for us to do hacking detection. By various means, we do not usually have access to a system administrator directly. For example, we can only get IUSR-MACHINENAME privileges through some attacks on IIS (such as uploading ASP Trojan horses, and certain overflows, etc.). This account is usually the system default guest authority, so how to get the system administrator or system permissions, it becomes increasingly important. So, I summed up a few of you often use the promotion of permissions, the following content is my collation, there is no new method, written to me like rookie look. Experts can be omitted, of course, you have to review, I do not object, and by the way to help me find out what additions and modifications: 1, social engineering. For social engineering, I think we must not be unfamiliar, right? If you dont quite understand the noun, you should go and find some relevant information We usually obtain sensitive information of targets by various means, and then analyze them so that we can deduce the password of the other partys admin. For example, what would you do if we were able to get a admin password on the website by guessing the servers database and then uploading an ocean top horse? First look at the code for the ASP file to carry off all that one has to see the username and password to connect to the SQL? Wrong or wrong. We should first type in a netstat - an command to see the port he is opening (of course, to see t