asdf01001的博客

BrainTools What is it? An utility for working with Brainfuck and related languages. It can encode and decode programs in various formats. What works? EVERYTHING! You can run Brainfuck programs and encode/decode Brainfuck code using Brainloller and Braincopter. Plus, given that Brainloller produces very small images, the utility features an image resizer. Usage bftools This utility saves images in PNG format, so watch your extensions. This utility reads images in all formats supported by the .NET framework. Note: By default, this utility outputs to stdout. Piping is supported! Note: The - character stands for stdin. Encoding bftools encode brainfuck [--output ] bftools encode brainloller --width [--output ] bftools encode braincopter --original [--output ] Decoding bftools decode brainloller [--output ] bftools decode braincopter [--output ] Running bftools run Image operations bftools enlarge [--output ] bftools reduce [--output ] Getting help bftools help Further reading Brainfuck Brainloller Braincopter

PsExec executes a program on a remote system, where remotely executed console applications execute interactively. Usage: psexec [\\computer[,computer2[,...] | @file]][-u user [-p psswd][-n s][-l][-s|-e][-x][-i [session]][-c [-f|-v]][-w directory][-d][-<priority>][-a n,n,...] cmd [arguments] -a Separate processors on which the application can run with commas where 1 is the lowest numbered CPU. For example, to run the application on CPU 2 and CPU 4, enter: "-a 2,4" -c Copy the specified program to the remote system for execution. If you omit this option the application must be in the system path on the remote system. -d Don't wait for process to terminate (non-interactive). -e Does not load the specified account's profile. -f Copy the specified program even if the file already exists on the remote system. -i Run the program so that it interacts with the desktop of the specified session on the remote system. If no session is specified the process runs in the console session. -h If the target system is Vista or higher, has the process run with the account's elevated token, if available. -l Run process as limited user (strips the Administrators group and allows only privileges assigned to the Users group). On Windows Vista the process runs with Low Integrity. -n Specifies timeout in seconds connecting to remote computers. -p Specifies optional password for user name. If you omit this you will be prompted to enter a hidden password. -s Run the remote process in the System account. -u Specifies optional user name for login to remote computer. -v Copy the specified file only if it has a higher version number or is newer on than the one on the remote system. -w Set the working directory of the process (relative to remote computer). -x Display the UI on the Winlogon secure desktop (local system only). -priority Specifies -low, -belownormal, -abovenormal, -high or -realtime to run the process at a different priority. Use -background to run at low memory and I/O priority on Vista. computer Direct PsExec to run the application on the remote computer or computers specified. If you omit the computer name PsExec runs the application on the local system, and if you specify a wildcard (\\*), PsExec runs the command on all computers in the current domain. @file PsExec will execute the command on each of the computers listed in the file. program Name of application to execute. arguments Arguments to pass (note that file paths must be absolute paths on the target system). You can enclose applications that have spaces in their name with quotation marks e.g. psexec \\marklap "c:\long name app.exe". Input is only passed to the remote system when you press the enter key, and typing Ctrl-C terminates the remote process. If you omit a user name the process will run in the context of your account on the remote system, but will not have access to network resources (because it is impersonating). Specify a valid user name in the Domain\User syntax if the remote process requires access to network resources or to run in a different account. Note that the password is transmitted in clear text to the remote system.

Usage: MS12-020.exe Remote_host_add Example: MS12-020.exe www.test.com MS12-020.exe 192.168.1.1 Source Code Copyright Silic Group Application Copyright Xiaomo.wabzsy

在获取到mysql用户的hash后， 可用hash直接登陆mysql进行操作 比如我们注入出数据库的hash，但是没办法拿到webshell 我们可以使用mysql_hash，用hash登陆并控制数据库 使用方法： mysql_hash.exe -u root -p < 1.txt Enter password: ***************************************** 其中1.txt在同目录，内容为你想执行的sql语句， 比如：show databases;