分类 ‘工具收集’ 下的日志
Cain RDP (Remote Desktop Protocol) Sniffer Parser
As some of you may know, Cain has the ability to ARP poison, sniff and pull off a man in the middle attack against the RDP/Remote Desktop/Terminal Services protocol. It's kind of hit a miss depending on the network layout and what version of RDP is in use. Pulling out keystrokes from the decrypted log file made by Cain can be quite a chore, so I coded up this quick little parser. Normally you would have to look through the RDP logs Cain makes by hand, searching for entries like "Key pressed client-side: 0x5 - 'a'". Using my script you can interpret those logs and save the keystrokes sent by the client to the server. This is very useful for finding passwords that may have been sent over the RDP session. I plan to use this script in a future video, but for now it can be downloaded from the following link:
Download Cain RDP Sniffing Log Parser
Just choose the file you want to parse, then choose a name for the output text file.
原文 (via tr4c3)
ps：很方便的东西。原始下载连接防盗链，tr4c3提供的下载链接
百度blog备份脚本baidublogbak.vbs
作者：lcx
'=========================================================================================================
'用法示例：
'cscript bak.vbs 百度用户名 第I页 至第n页 目录列表.htm 用户名 密码
'例如我的blgo示例：
'cscript baidublogbak.vbs myvbscript 0 3 url.htm myvbscript mima
'表示从第0页备份到第3页，blog的共有页数打开http://hi.baidu.com/用户名/blog/index/0就可以看到了。url.htm存放的是目录列表
'注意的是百度是从0页计数的
'如果用户名和密码随便写也可以备份，但是无法备份私有文档
'推荐几页几页备份，最好建单独一个目录将bak.vbs放进去，会在当前目录生成mht文档。因为有的网络原因，有的无法成mht，请对照url.htm目录列表检查
'====================================================================================================
利用CDO.Message做的vbs下载者
作者：lcx
vbs下载者有很多了，我这里是一个伟大的发明，利用CDO.Message做的vbs下载者。伟大是装B的意思。
NP先把代码写完了，详情看这里：
由于NP写的不知什么原因，在我机器上执行后生成的exe，进程不会自动退出，我重新更新一下。
＝＝＝＝＝＝＝用下面这个hta文件来转exe变成16进制的html保存了。这样也会方便一点。＝＝＝＝＝＝＝
阅读全文 »
