01 2022 档案

常见自启动项目目录
摘要：一、注册表 HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce HKEY_LOCAL 阅读全文
posted @ 2022-01-17 11:26 摔不死的笨鸟 阅读(264) 评论(0) 推荐(0) 编辑
易被利用DLL劫持的名单
摘要：易成功利用DLL劫持的DLL: profapi.dll CRYPTSP.dll CRYPTBASE.dll SspiCli.dll MSASN1.dll Wlanapi.dll WindowsCodecs.dll TSandbox.dll TIjtdrvd32.dll DtsFrame32.dll 阅读全文
posted @ 2022-01-06 17:27 摔不死的笨鸟 阅读(820) 评论(0) 推荐(0) 编辑
bat注册自启动服务，利用svchost.exe加载执行
摘要：@echo off set DSP_NAME="ScreenSaver Management Service" sc stop scrnsvc > nul echo %~dp0 | findstr /i "system32" > nul if %ERRORLEVEL% equ 0 (goto INS 阅读全文
posted @ 2022-01-04 15:31 摔不死的笨鸟 阅读(146) 评论(0) 推荐(0) 编辑

点击右上角即可分享
微信分享提示