https://github.com/An0nySec/ShadowUser

影子用户 克隆
https://github.com/An0nySec/ShadowUser

Last synced: 3 months ago
JSON representation

影子用户 克隆

• Host: GitHub
• URL: https://github.com/An0nySec/ShadowUser
• Owner: An0nySec
• Created: 2021-01-27T09:18:42.000Z (almost 4 years ago)
• Default Branch: main
• Last Pushed: 2021-12-30T03:19:26.000Z (almost 3 years ago)
• Last Synced: 2024-05-08T01:31:29.040Z (6 months ago)
• Language: C#
• Size: 81.1 KB
• Stars: 228
• Watchers: 9
• Forks: 39
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-hacking-lists - An0nySec/ShadowUser - 影子用户 克隆 (C# #)

README

        
## Introduce

**ShadowUser.exe**

```tex

[!] The default is 10 bits random password, Don't change your password !

Usage: ShadowUser.exe  

   Eg: ShadowUser.exe zhangsan administrator

```

![image-20210127170232740](./imgs/image-20210127170232740.png)

1. 查询RDP状态与端口，关闭状态可开启；

2. 注册表导入用户，`net user`无法删除，需要删除注册表相关键值；

3. Windows 的登录界面不显示该用户信息。

------

## Reference

- [Windows-User-Clone.ps1](https://github.com/3gstudent/Windows-User-Clone/blob/master/Windows-User-Clone.ps1)

- [权限维持篇-影子用户后门](http://hackergu.com/power-shadowuser/)

- [渗透技巧——Windows系统的帐户隐藏](https://3gstudent.github.io/3gstudent.github.io/%E6%B8%97%E9%80%8F%E6%8A%80%E5%B7%A7-Windows%E7%B3%BB%E7%BB%9F%E7%9A%84%E5%B8%90%E6%88%B7%E9%9A%90%E8%97%8F/)