• [PY] G4H// Anti-Intruders System Cleaner ver 0.1

    Quote Originally Posted by [s] View Post
    Simple release


    Code:
    #!/usr/bin/env python
    from pickle import *
    from struct import *
    from _winreg import *
    print "\n"
    print "\n\t##################################################"
    print "\t#                                                #"
    print "\t#                                                #"
    print "\t#G4H// Anti-Intruders  System Cleaner ver 0.1    #"
    print "\t#                                                #"
    print "\t#        Silic0n@ G4H//Anti-Intruders            #"
    print "\t#                                                #"
    print "\t##################################################"
    print "\n"
    print "\n[*] you can use this script for the Systems with the following properties"
    print "\n  [+] Task Manager Disabled"
    print "\n  [+] Registry Disabled"
    print "\n  [+] Hidden Drives"
    print "\nTask-Manager Enabled"
    path = HKEY_CURRENT_USER
    path_t = "Software\Microsoft\Windows\CurrentVersion\Policies\System"
    hKey = OpenKey(path,path_t,0,KEY_READ|KEY_SET_VALUE)
    SetValueEx(hKey,"DisableTaskMgr",0,REG_DWORD,0)
    print "\nFixing the Hidden Drivers problem"
    # HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Current Version \ Policies\Explorer
    path = HKEY_CURRENT_USER
    path_t = "Software\Microsoft\Windows\CurrentVersion\Policies\Explorer"
    hKey = OpenKey(path,path_t,0,KEY_READ|KEY_SET_VALUE)
    SetValueEx(hKey,"NoDrive",0,REG_DWORD,0)
    # HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
    print "\nfixing the access to registry editor tools"
    path = HKEY_CURRENT_USER
    path_t = "Software\Microsoft\Windows\CurrentVersion\Policies\System"
    hKey = OpenKey(path,path_t,0,KEY_READ|KEY_SET_VALUE)
    SetValueEx(hKey,"DisableRegistryTools",0,REG_DWORD,0)
    path = HKEY_CURRENT_USER
    print "\nFixing the Folder Option Disabled Problem"
    path_t = "Software\Microsoft\Windows\CurrentVersion\Policies\Explorer"
    hKey = OpenKey(path,path_t,0,KEY_READ|KEY_SET_VALUE)
    SetValueEx(hKey,"NoFolderOptions",0,REG_DWORD,0)
    DeleteValue(hKey,"NoFolderOptions")
    This article was originally published in blog: [PY] G4H// Anti-Intruders System Cleaner ver 0.1 started by [s]
  • G4H Twitter

  • Latest Posts

    amolnaik4

    Research Resources for MS SharePoint

    This page contains research notes on Microsoft’s SharePoint MOSS and WSS.

    Link:
    https://www.owasp.org/index.php/Research_for_SharePoint_%28MOSS%29

    amolnaik4 Today, 12:25 PM Go to last post
    b0nd

    Lolz, with the title "About Admin" I thought...

    Lolz, with the title "About Admin" I thought Admins of garage have been exposed ;)

    @hazard74, there is always a proper "way" to ask - you need to discover that. It's not that Pentesters don't have...

    b0nd Today, 09:10 AM Go to last post
    hazard74

    Ok, Anant Shrivastava. Im Sorry :)

    Ok, Anant Shrivastava.

    Im Sorry :)

    hazard74 Yesterday, 06:19 PM Go to last post
    Anant Shrivastava

    not exactly this format but a simmilar kind of a...

    not exactly this format but a simmilar kind of a format i have seen as part of malware. This url format was used to get the commands from the remote server. there was a whole bunch of domain names in...

    Anant Shrivastava Yesterday, 05:30 PM Go to last post
    Immaturedevil

    Hi Neo, Thanks for your comment. I have...

    Hi Neo,

    Thanks for your comment. I have already done that... but no success..as these URLs are not recognized by search engines as such. getting some info if anyone has come across with URLs in...

    Immaturedevil Yesterday, 05:21 PM Go to last post