工具opentelnet源代码

最新推荐文章于 2021-05-13 01:11:53 发布
最新推荐文章于 2021-05-13 01:11:53 发布
阅读量2.9k 收藏
点赞数
分类专栏： .NET技术 文章标签： 工具 service null access query email
工具opentelnet源代码
作者： 　来源于： 　发布时间：2006-1-2 23:08:23


//     
//      Telnet Remote Configure And Wake Up
//     
//      File      : OpenTelnet.cpp
//      Version   : 0.5
//      Comment   : only for win2k and XP(pro/server/adv)
//     
//      Create at : 2002.3.8
//      Create by : refdom
//              Email         : [email]refdom@263.net[/email]
//              Home Page : [url]www.opengram.com[/url]
//
//              If you modify the code, or add more functions, please email me a copy.
//     

#include <stdio.h>
#include <assert.h>
#include <windows.h>
#include <Winnetwk.h>
#include <Winreg.h>
#include <Shlwapi.h>

#pragma comment(lib, "Advapi32.lib")
#pragma comment(lib, "Mpr.lib")

SC_HANDLE       g_schSCManager;
HKEY              g_hKey;
DWORD              g_DefaultTelnetStartType;
DWORD              g_DefaultRegistryStartType;
LPBYTE              g_lpDefaultTelnetNTLM;
LPBYTE              g_lpDefaultTelnetPort;

void Usage(char*);
int RestartTelnet();
int StartRemoteRegistry();
int MyStartService(SC_HANDLE, char*);


int main(int argc, char* argv[])
{
       int nRetCode;
       char szIpc[50] = "";
       HKEY hKey;
       LPSTR lpUserName, lpPassword;
       NETRESOURCE NET;

       DWORD dwNTLM, dwTelnetPort;

       Usage(argv[0]);
       if (argc < 5)
              return 0;

       sprintf (szIpc, "%s//ipc$", argv[1]);
       lpUserName = argv[2];
       lpPassword = argv[3];

       NET.lpLocalName = NULL;
       NET.lpRemoteName = szIpc;
       NET.dwType = RESOURCETYPE_ANY;
       NET.lpProvider = NULL;

       printf ("Connecting %s...",argv[1]);

ReConnect:

       nRetCode = WNetCancelConnection2(szIpc, CONNECT_UPDATE_PROFILE, TRUE);
       if (nRetCode == NO_ERROR)
              printf ("Canncel Successfully!/n");

       nRetCode = WNetAddConnection2(&NET, lpPassword, lpUserName, CONNECT_INTERACTIVE);
       if (nRetCode == ERROR_ALREADY_ASSIGNED || nRetCode == ERROR_DEVICE_ALREADY_REMEMBERED)
       {
              printf ("Already conneted to the server!/n");
              printf ("Now re-connecting the server.../n");
              goto ReConnect;
       }
       else if (nRetCode == NO_ERROR)
              printf ("Successfully!/n");
       else
       {
              printf ("/n/tErr:");
              switch (nRetCode)
              {
              case ERROR_ALREADY_ASSIGNED:


              case ERROR_ACCESS_DENIED:
                     printf ("ERROR_ACCESS_DENIED/n");
                     break;
              case ERROR_BAD_NET_NAME:
                     printf ("ERROR_BAD_NET_NAME/n");
                     break;
              default:
                     printf ("CONNECT ERR:%d!/n",GetLastError());
                     break;
              }
              return 0;
       }

       //open SCManager
       g_schSCManager = OpenSCManager(argv[1], NULL, SC_MANAGER_ALL_ACCESS);
       if (g_schSCManager == NULL)
       {
              printf ("Open SCManager failed!/n");
              return 0;
       }

       //check remote registry service is running
       if (!StartRemoteRegistry())
       {
              printf ("All Process Failed!/n");
              return 0;
       }

       //open the registry
       if (!(RegConnectRegistry((LPCTSTR) argv[1], HKEY_LOCAL_MACHINE, &g_hKey) == ERROR_SUCCESS))
       {
              printf ("Connect remote registry failed!/n");
              return 0;
       }

       if (!(RegOpenKeyEx(g_hKey, "SOFTWARE//Microsoft//TelnetServer//1.0", 0, KEY_ALL_ACCESS, &hKey) == ERROR_SUCCESS))
       {
              printf ("Open key failed!/n");
              return 0;
       }

       //read the registry for default config
       g_lpDefaultTelnetNTLM = (LPBYTE) LocalAlloc(LPTR, 50);
       g_lpDefaultTelnetPort = (LPBYTE) LocalAlloc(LPTR, 50);
       DWORD dwDataSize = 50;
       if (!(RegQueryValueEx(hKey, "NTLM", NULL, NULL, g_lpDefaultTelnetNTLM, &dwDataSize) == ERROR_SUCCESS))
       {
              printf ("Read NTLM failed!/n ");
              return 0;
       }
       if (!(RegQueryValueEx(hKey, "TelnetPort", NULL, NULL, g_lpDefaultTelnetPort, &dwDataSize) == ERROR_SUCCESS))
       {
              printf ("Read port failed!/n ");
              return 0;
       }

       //edit the registry
       dwNTLM = atoi(argv[4]);
       if (dwNTLM >= 3)
       {
              dwNTLM = 1;
       }
       dwTelnetPort = atoi(argv[5]);

       if (!(RegSetValueEx(hKey, "NTLM", 0, REG_DWORD, (LPBYTE) &dwNTLM, sizeof(DWORD)) == ERROR_SUCCESS))
       {
              printf ("Set NTLM value failed!");
              return 0;
       }

       RegSetValueEx(hKey, "TelnetPort", 0, REG_DWORD, (LPBYTE) &dwTelnetPort, sizeof(DWORD));

       //restart telnet service
       nRetCode = RestartTelnet();

       if (nRetCode)
       {
              printf ("/nBINGLE!!!Yeah!!/n");
              printf ("Telnet Port is %d. You can try:/"telnet ip %d/", to connect the server!", dwTelnetPort, dwTelnetPort);
       }

       //remain the default setting
       if (!(RegSetValueEx(hKey, "default_NTLM", 0, REG_DWORD, g_lpDefaultTelnetNTLM, sizeof(DWORD)) == ERROR_SUCCESS))
       {
              printf ("Set defaultNTLM value failed!");
              return 0;
       }
       if (!(RegSetValueEx(hKey, "default_Port", 0, REG_DWORD, g_lpDefaultTelnetPort, sizeof(DWORD)) == ERROR_SUCCESS))
       {
              printf ("Set defaultPort value failed!");
              return 0;
       }
       if (!(RegSetValueEx(hKey, "default_TelnetStart", 0, REG_DWORD, (LPBYTE) &g_DefaultTelnetStartType, sizeof(DWORD)) == ERROR_SUCCESS))
       {
              printf ("Set defaulttelnetstart value failed!");
              return 0;
       }
       if (!(RegSetValueEx(hKey, "default_RegistryStart", 0, REG_DWORD, (LPBYTE) &g_DefaultRegistryStartType, sizeof(DWORD)) == ERROR_SUCCESS))
       {
              printf ("Set defaultregistrystart value failed!");
              return 0;
       }

       RegCloseKey(hKey);
       RegCloseKey(g_hKey);
       //close SCManager
       CloseServiceHandle(g_schSCManager);

       //close the session with remote server
       printf ("/nDisconnecting server...");
       nRetCode = WNetCancelConnection2(argv[1], CONNECT_UPDATE_PROFILE, TRUE);
       if (nRetCode == NO_ERROR)
              printf ("Successfully!/n");
       else
              printf ("Failed!/n");

       return 0;
}

void Usage(char* pcAppName)
{
       printf ("*******************************************************/n");
       printf ("Remote Telnet Configure, by refdom/n");
       printf ("Email: [email]refdom@263.net[/email]/n");
       printf ("%s/n/n", pcAppName);
       printf ("Usage:OpenTelnet.exe server username password NTLMAuthor telnetport/n");
       printf ("*******************************************************/n");
       return;
}

int RestartTelnet()
{
       DWORD                                   dwWaitTime;
       DWORD                                   dwConfigSize;
       SC_HANDLE                            schTelnetService;
       SERVICE_STATUS                     ssTelnetStatus;
       LPQUERY_SERVICE_CONFIG       lpTelnetConfig;

       printf ("/nNOTICE!!!!!!/n");
       printf ("The Telnet Service default setting:NTLMAuthor=2  TelnetPort=23/n/n");

       //stop the telnet service
       schTelnetService = OpenService(g_schSCManager, "TlntSvr", SERVICE_ALL_ACCESS);
       if (schTelnetService == NULL)
       {
              printf ("Open service failed!/n");
              return 0;
       }

       lpTelnetConfig = (LPQUERY_SERVICE_CONFIG) LocalAlloc(LPTR, 1024);
       if (lpTelnetConfig == NULL)
       {
              printf ("Alloc memory failed!/n");
              return 0;
       }

       if (!QueryServiceConfig(schTelnetService, lpTelnetConfig, 1024, &dwConfigSize))
       {
              printf ("Query service congfig failed!/n");
              return 0;
       }

       //remain the fault start ytpe of telnet service
       g_DefaultTelnetStartType = lpTelnetConfig->dwStartType;

       //change the start type of the telnet service
       if (lpTelnetConfig->dwStartType == SERVICE_DISABLED)
       {
              if (!ChangeServiceConfig(schTelnetService,
                                                        SERVICE_NO_CHANGE,
                                                        SERVICE_DEMAND_START,
                                                        SERVICE_NO_CHANGE,
                                                        NULL, NULL, NULL, NULL, NULL, NULL, NULL))
              {
                     printf ("Change service config failed!/n");
                     return 0;
              }
       }

       if (!(QueryServiceStatus(schTelnetService, &ssTelnetStatus)))
       {
              printf ("Query service status failed!/n");
              return 0;
       }

       if (ssTelnetStatus.dwCurrentState != SERVICE_STOPPED && ssTelnetStatus.dwCurrentState != SERVICE_STOP_PENDING)
       {
              printf ("Stopping telnet service .../n");
              if (!(ControlService(schTelnetService, SERVICE_CONTROL_STOP, &ssTelnetStatus)))
              {
                     printf ("Control telnet service status failed!/n");
                     return 0;
              }

              dwWaitTime = ssTelnetStatus.dwWaitHint / 10;
              if( dwWaitTime < 1000 )
                     dwWaitTime = 1000;
              else if ( dwWaitTime > 10000 )
                     dwWaitTime = 10000;

              Sleep(dwWaitTime);
              if (!QueryServiceStatus(schTelnetService, &ssTelnetStatus))
              {
                     printf ("Query service status failed!/n");
              }

              if ( ssTelnetStatus.dwCurrentState == SERVICE_STOPPED || ssTelnetStatus.dwCurrentState == SERVICE_STOP_PENDING)
              {
                     printf ("Telnet service is stopped successfully!/n");
              }
              else
              {
                     printf ("Stopping telnet service failed!/n");
                     return 0;
              }
       }

       //start the telnet service

       if (!MyStartService(schTelnetService, "telnet"))
              return 0;

       CloseServiceHandle(schTelnetService);
       return 1;
}

int StartRemoteRegistry()
{
       SC_HANDLE schRegistryService;
       SERVICE_STATUS ssRegistryStatus;
       LPQUERY_SERVICE_CONFIG lpRegistryConfig;
       DWORD dwConfigSize;

       lpRegistryConfig = (LPQUERY_SERVICE_CONFIG) LocalAlloc(LPTR, 1024);
       if (lpRegistryConfig == NULL)
       {
              printf ("Alloc memory failed!/n");
              return 0;
       }

       schRegistryService = OpenService( g_schSCManager, "RemoteRegistry", SERVICE_ALL_ACCESS);
       if (schRegistryService == NULL)
       {
              printf ("Open remote registry service failed!/n");
              return 0;
       }

       if (!QueryServiceConfig(schRegistryService, lpRegistryConfig, 1024, &dwConfigSize))
       {
              printf ("Query registry service config failed!/n");
              return 0;
       }

       g_DefaultRegistryStartType = lpRegistryConfig->dwStartType;
       if (g_DefaultRegistryStartType == SERVICE_DISABLED)
       {
              if (!ChangeServiceConfig(schRegistryService,
                                                        SERVICE_NO_CHANGE,
                                                        SERVICE_DEMAND_START,
                                                        SERVICE_NO_CHANGE,
                                                        NULL, NULL, NULL, NULL, NULL, NULL,NULL))
              {
                     printf ("Change registry service config failed!/n");
                     return 0;
              }
       }

       if (!QueryServiceStatus(schRegistryService, &ssRegistryStatus))
       {
              printf ("Query remote registry service failed!/n");
              return 0;
       }

       if (ssRegistryStatus.dwCurrentState != SERVICE_RUNNING)
       {
              if (!MyStartService(schRegistryService, "remote registry"))
                     return 0;
       }
       CloseServiceHandle(schRegistryService);
       return 1;
}

int MyStartService(SC_HANDLE schService, char* szServiceName)
{
       DWORD dwWaitTime;
       DWORD dwOldCheckPoint;
       DWORD dwStartTickCount;
       SERVICE_STATUS ssStatus;

       printf ("Starting %s service.../n", szServiceName);
       if (!(StartService(schService, 0, NULL)))
       {
              printf ("Starting %s service failed!/n", szServiceName);
              return 0;
       }

       if (!(QueryServiceStatus(schService, &ssStatus)))
       {
              printf ("Query %s service status failed!/n",szServiceName);
//              return ;
       }

    dwStartTickCount = GetTickCount();
    dwOldCheckPoint = ssStatus.dwCheckPoint;

       while ( ssStatus.dwCurrentState == SERVICE_START_PENDING)
       {
              dwWaitTime = ssStatus.dwWaitHint / 10;
        if( dwWaitTime < 1000 )
            dwWaitTime = 1000;
        else if ( dwWaitTime > 10000 )
            dwWaitTime = 10000;

              Sleep(dwWaitTime);

        // Check the status again.
 
        if (!QueryServiceStatus(schService, &ssStatus))
            break;
 
        if ( ssStatus.dwCheckPoint > dwOldCheckPoint )
        {
            // The service is making progress.
            dwStartTickCount = GetTickCount();
            dwOldCheckPoint = ssStatus.dwCheckPoint;
        }
        else
        {
            if(GetTickCount()-dwStartTickCount > ssStatus.dwWaitHint)
            {
                // No progress made within the wait hint
                break;
            }
        }
       }

       if ( ssStatus.dwCurrentState == SERVICE_RUNNING )
       {
              printf ("%s service is started successfully! %s service is running!/n", szServiceName, szServiceName);
       }
       else
       {
              printf ("%s service is not started!/n", szServiceName);
              return 0;
       }

       return 1;
}

=============

 
bulbul2006
关注
  • 0
    点赞
  • 踩
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
专栏目录
opentelnet远程开放软件完整版
07-09
可以进行远程开放telnet服务，现在共享出来。
opentelnet
04-11
Opentelnet.exe的用法： OpenTelnet.exe \\server <帐号> <密码> <NTLM认证方式> <Telnet端口> (注：如果administrator用户的密码为空的话，则格式为:opentelnet.exe \\ip administrator "" <ntml认证方式> <telnet端口> ) 。
opentelnet.exe 源代码
benny5609的专栏
02-28 3538
// OpenTelnet.exe ////server username password NTLMAuthtelnetport#include #include #include #include #include #include #pragma comment(lib, “Advapi32.lib”)#pragma comment(lib, “Mpr.lib”)SC_HANDL
telnet 命令使用详解
sunleis的专栏
12-02 934
1、什么是Telnet？ 　　对于Telnet的认识，不同的人持有不同的观点，可以把Telnet当成一种通信协议，但是对于入侵者而言，Telnet只是一种远程登录的工具。一旦入侵者与远程主机建立了Telnet连接，入侵者便可以使用目标主机上的软、硬件资源，而入侵者的本地机只相当于一个只有键盘和显示器的终端而已。 2、Telnet被入侵者用来做什么 　　(1)Telnet是控制主机的第一手段
telnet源代码
12-19
telnet、 源代码 好东西 大家来看看
telnet 源代码
11-16
**标题：“telnet 源代码”** **描述：**“一个很好用的telnet程式，可供大家参考，期望能对使用者带来便利。” **标签：**“一个很好用的telnet”、“方便大家使用参考” **文件名称列表：**“opentelnet源码” ...
OpenTelnet-开源
05-14
OpenTelnet的开源特性意味着其源代码对公众开放，允许开发者查看、学习、修改和分发软件。这种开放源代码模式促进了社区的协作和创新，使得软件不断进化，同时确保了透明度和自由度。用户可以根据自己的需求定制功能...
telnet源码安装工具
04-02
telnet 源码安装程序，用于不同linux版本 yum不能安装的情况，所以上传这个小工具，方便大家使用。
openTelnet.zip
11-01
黑客专用软件，，用于远程打开目标主机Telnet服务的小工具
Android telnet 客户端
03-03
Android telnet 客户端实现了tcp 链接 telnet协商以及和服务器交互
OpenTelnetV4.zip
07-17
可以用安全的方式打开开发板的telnet，避免向公网环境打开嵌入式设备的telnet端口，提高嵌入式设备的安全等级。
telnet源码（客户端，服务端，linux系统）
03-27
telnet源码包， 包括客户端，服务端，编译没有问题，测试可以使用，对于像了解telnet有很大帮助
Open+TelnetV3_20190307.zip
07-17
这是OpenTelnet的3.0版本，使用Opentelnet提高嵌入式系统的安全性，避免将telnet端口暴露在外网。
linux telnetd 源代码,telnetd源码分析
weixin_39524703的博客
05-13 1334
telnetd是一个telnet服务端程序下载地址：解压缩后进入busybox目录make defconfigmakemake install然后会生成 _install 目录，里面就是编译好的可执行文件源码位于 ./networking/telnetd.c程序流程图：程序中非常重要的就是2个buf，位于struct tsession结构体之后/*Thisishowthebuffersa...
雄迈摄像头研究笔记一:telnet的开启
weixin_30609331的博客
03-12 2376
年前买了个雄迈摄像头,对家里进行安防监控, 该摄像头其实就是个安装了linux系统的嵌入式设备,到手后,对于其未默认开启telnet服务感到很是不爽,所以打算hack之 最简单的办法其实是ttl连上去后开启,其次就是下载固件后直接更改固件,在启动脚本里增加启动telnetd的语句后刷进去,但是因为是新买的,不想失去保修,而且也想趁机多研究学习下,所以只考虑有没有远程开启的办法 从固件开...
远程开启服务及Telnet
森大科技的博客
05-28 943
GPS平台、网站建设、软件开发、系统运维，找森大网络科技！ http://cnsendnet.taobao.com 来自森大科技官方博客 http://www.cnsendblog.com/index.php/?p=683 我看是很有用的 大家试试看 以前都是看大家上传的知识 ，我现在也为大家服务点 1 首先用流光嗅探得到对方密码,主要是弱口令，强壮密码需要一个很好的密码字典和机器性能以及网络速度以及耐心和运气，呵呵。 2 用net use命令建立ipcKaTeX parse error: Undefine
一款非常好用的telnet工具
08-08
一款非常好用的telnet工具，可以用来测试端口是否正常，开发的程序员们经常要用到
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值