[es] - Ubijanje Winlogon.exe servisa!

passwdpasswd

Član broj: 116565
Poruke: 24
*.adsl.net.t-com.hr.

Profil

^{04.11.2006. u 17:19 - pre 212 meseci}

Ako ce nekom danas sutra trebat ovako sta!?

Znaci to je zasticen windowsov proces [probajte ga killat sa Task Managerom], za neupucene:

Code:

Description:
winlogon.exe is a process belonging to the Windows
login manager. It handles the login and logout procedures on
your system. This program is important for the stable and secure
running of your computer and should not be terminated.

Znaci da bi se ubio (kako brutalno zvuci ta rijec) winlogon.exe potrebno je nista drugo nego imati debug privilegije koje se lako dobivaju pozivajuci par apija, evo koda kako sve to zajedno obaviti, da.. OVO RADITE NA VLASTITU ODGOVORNOST, JA NISAM ODGOVORAN ZA POSLJEDICE POKRETANJA OVOG KODA/PROGRAMA... mada nema vam se sta lose desit.. komp se samo resetira i to je to :D.. evo koda da ne duljim:

Code:

unit Unit2;

interface

uses
  Windows, Messages, SysUtils, Variants, Classes, Graphics, Controls, Forms,
  Dialogs, StdCtrls, ShellApi, Tlhelp32;

type
  TForm2 = class(TForm)
    Button1: TButton;
    ListBox1: TListBox;
    procedure Button1Click(Sender: TObject);
  private
    { Private declarations }
  public
    { Public declarations }
  end;

var
  Form2: TForm2;

implementation

{$R *.dfm}

const SE_DEBUG_NAME='SeDebugPrivilege';

procedure TForm2.Button1Click(Sender: TObject);
var hSnapHandle:THandle;
    lpProcE:TProcessEntry32;

    hToken:THandle;
    sedebugnameValue:TLargeInteger;
    tkp, ptkpPrev:TOKEN_PRIVILEGES;
    bRet:Boolean;
    ulRet:ULONG;

    _handleWL:THandle;
    _exitCode:DWORD;

begin

if not OpenProcessToken(GetCurrentProcess(),
        TOKEN_ADJUST_PRIVILEGES or TOKEN_QUERY, hToken) then
     ShowMessage('Nece');

    bRet:=LookupPrivilegeValue( Nil, SE_DEBUG_NAME, sedebugnameValue);
    if not bRet then
        CloseHandle(hToken);


    tkp.PrivilegeCount:= 1;
    tkp.Privileges[0].Luid:=sedebugnameValue;
    tkp.Privileges[0].Attributes:=SE_PRIVILEGE_ENABLED;

  ptkpPrev:=tkp;
    bRet:=AdjustTokenPrivileges(hToken,FALSE,&tkp,sizeof(ptkpPrev),ptkpPrev,ulRet);

    CloseHandle(hToken);

hSnapHandle:=CreateToolhelp32Snapshot(TH32CS_SNAPALL,0);
if hSnapHandle<>0 then
begin
  if Process32First(hSnapHandle, lpProcE)=true then
    begin
       while Process32Next(hSnapHandle, lpProcE) do
        begin
         _handleWL:=OpenProcess(PROCESS_ALL_ACCESS,false,lpProcE.th32ProcessID);
         ListBox1.Items.Add(lpProcE.szExeFile+'--'+IntToStr(_handleWL));
         if lpProcE.szExeFile='winlogon.exe' then
          begin
           ShowMessage('Sad cu da ga razvalim!!! :P');
           GetExitCodeProcess(_handleWL, _exitCode);
           TerminateProcess(_handleWL, exitCode);
          end;
          CloseHandle(_handleWL);
        end;
    end;
end;

end;
end.

U attachu imate .exe pa ako ima neko hrabar nek ga proba!! Kao sto rekoh ja nisam ni na koji nacin odgovoran za posljedice :D

Get Process Explorer... fuck d task manager.... !! Yea, task manager.. my ass

Prikačeni fajlovi

Project1.exe - 411.5k

Odgovor na temu