Serv-u to establish a secure and hidden accounts-vulnerability warning-the black bar safety net

2008-09-10T00:00:00
ID MYHACK58:62200820324
Type myhack58
Reporter 佚名
Modified 2008-09-10T00:00:00

Description

When your meat machine and installed SERV-U, you can use the following method to establish a hidden account

First confirm that the SERV-U installed and can run correctly. Here is a SERV-U extensions, must be installed in the SERV-U3. 0 version of the above! This pack contains a total 4 files webseru.dll myservu. mdb webservu. ini readme.txt Wherein myservu. the mdb is used to store the account number and the password is not encrypted it. webservu. ini save some configuration information

///////////////////////////////////////// //The following is webservu. ini content //////////////////////////////////////// [main] homeDir=d:\mydoc\ dbFile=myservu. mdb logfile=on /////////////////////////// Wherein homeDir=d:\mydoc\represents your FTP root directory, if you have a new account abc,then the account abc of the main Directory of d:\mydoc\abc, you have to ensure that d:\mydoc\abc exists, otherwise access can not. Note that the main directory later\can't Less. dbFile=myservu. mdb defines the account database file name, you can copy it to other directory, but must contain Directory name. For example dbFile=e:\mydoc\ser. mdb. The program also does not detect whether the file exists. If the database file and myservu. dll in the same directory then you do not need to include the path! logfile=on indicates that the record landing information, does not record the words will be on instead of off.

How to get serv-u to load myservu,dll?

First, to ensure that serv-u has been able to run, find the serv-u installation directory of the ServUDaemon. ini file Add

[EXTERNAL] ClientCheckDLL1=c:\mydoc\webseru.dll

If webseru. the dll is placed in the serv-u installation directory can not path, the direct use of the file name Such as: ClientCheckDLL1=webseru.dll

Memory disk, restart the serv-u.