中国DOS联盟

There is a batch program for hackers, hope everyone likes it.

1.bat

@echo off
Color 0A
cls
echo ------------------------
echo +Delete current system share directories+
echo ------------------------
pause
net stop Server
net share c$ /delete
net share d$ /delete
net share e$ /delete
net share f$ /delete
net share admin$ /delete
net share ipc$ /delete
net start Server
cls
echo Congratulations
echo ------------------------
echo +All share directories have been deleted+
echo ------------------------
echo + The following will modify registry entries +
echo + +
echo +Close system default share attributes +
echo ------------------------
pause
echo Generate delshare.reg to prepare for modifying registry
echo Windows Registry Editor Version 5.00> c:\delshare.reg
echo >> c:\delshare.reg
echo "AutoShareWks"=dword:00000000>> c:\delshare.reg
echo "AutoShareServer"=dword:00000000>> c:\delshare.reg
echo Run delshare.reg to modify registry
regedit /s c:\delshare.reg
echo Delete delshare.reg temporary file
del c:\delshare.reg
cls
echo Congratulations
echo ----------------------
echo + Share vulnerability repair completed +
echo ----------------------
pause
call 9.bat

2.bat

@echo off
Color 0A
cls
echo --------------------------------------
echo +Next we will modify registry to increase system security+
echo + (Resist a certain strength of Ddos attack) +
echo --------------------------------------
pause
echo Generate registry temporary file
echo Windows Registry Editor Version 5.00> c:\dosforwin.reg
echo >> c:\dosforwin.reg
echo "EnableICMPRedirect"=dword:00000000>> c:\dosforwin.reg
echo "DeadGWDetectDefault"=dword:00000001>> c:\dosforwin.reg
echo "DontAddDefaultGatewayDefault"=dword:00000000>> c:\dosforwin.reg
echo "EnableSecurityFilters"=dword:00000000">> c:\dosforwin.reg
echo "AllowUnqualifiedQuery"=dword:00000000>> c:\dosforwin.reg
echo "PrioritizeRecordData"=dword:00000001>> c:\dosforwin.reg
echo "ReservedPorts"=hex(7):31,00,34,00,33,00,33,00,2d,00,31,00,34,00,33,00,34,00,\>> c:\dosforwin.reg
echo 00,00,00,00>> c:\dosforwin.reg
echo "SynAttackProtect"=dword:00000002>> c:\dosforwin.reg
echo "EnablePMTUDiscovery"=dword:00000000>> c:\dosforwin.reg
echo "NoNameReleaseOnDemand"=dword:00000001>> c:\dosforwin.reg
echo "EnableDeadGWDetect"=dword:00000000>> c:\dosforwin.reg
echo "KeepAliveTime"=dword:00300000>> c:\dosforwin.reg
echo "PerformRouterDiscovery"=dword:00000000>> c:\dosforwin.reg
echo "EnableICMPRedirects"=dword:00000000>> c:\dosforwin.reg
echo =============================
echo Run dosforwin.reg to modify registry
regedit /s c:\dosforwin.reg
echo Delete dosforwin.reg temporary file
del c:\dosforwin.reg
echo =============================
cls
echo Congratulations
echo ----------------------------
echo +Your computer's ability to defend against DDOS has been enhanced+
echo ----------------------------
pause
call 9.bat

3.bat

@echo off
Color 0A
cls
echo ----------------------------------
echo +Next we will disable some insecure services+
echo + (To increase system security) +
echo ----------------------------------
pause
echo Disable telnet to prevent remote opening of telnet.
echo Generate registry temporary file.
echo Windows Registry Editor Version 5.00> c:\telnet.reg
echo >> c:\telnet.reg
echo "Start"=dword:00000004>> c:\telnet.reg
echo Run telnet.reg to modify registry
regedit /s c:\telnet.reg
echo Delete telnet.reg temporary file
del c:\telnet.reg
echo =================================================
echo Disable Remote Registry Service to prevent remote registry operation
echo Generate registry temporary file
echo Windows Registry Editor Version 5.00> c:\regedit.reg
echo >> c:\regedit.reg
echo "Start"=dword:00000004>> c:\regedit.reg
echo Run regedit.reg to modify registry
regedit /s c:\regedit.reg
echo Delete temporary file
del c:\regedit.reg
echo =================================================
echo Disable Messenger to prevent message spam
echo Generate registry temporary file
echo Windows Registry Editor Version 5.00> c:\message.reg
echo >> c:\message.reg
echo "Start"=dword:00000004>> c:\message.reg
echo Run message.reg to modify registry
regedit /s c:\message.reg
echo Delete message.reg
del c:\message.reg
echo =================================================
echo Close TCP/IP NetBIOS Helper Service
echo Generate registry temporary option
echo Windows Registry Editor Version 5.00> c:\netbios.reg
echo >> c:\netbios.reg
echo "Start"=dword:00000004>> c:\netbios.reg
echo Run netbios.reg to modify registry
regedit /s c:\netbios.reg
echo Delete netbios.reg
del c:\netbios.reg
echo =================================================
cls
echo Congratulations
echo ----------------------------
echo + Your computer is much safer +
echo ----------------------------
pause
call 9.bat

4.bat

@echo off
Color 0A
cls
echo --------------------
echo + Modify TCP/IP filter +
echo + To enhance defense ability +
echo --------------------
pause
echo Generate registry temporary file
echo Windows Registry Editor Version 5.00> c:\ports.reg
echo >> c:\ports.reg
echo "TCPAllowedPorts"=hex(7):32,00,30,00,00,00,32,00,31,00,00,00,32,00,35,00,00,00,\>> c:\ports.reg
echo 35,00,33,00,00,00,38,00,30,00,00,00,31,00,31,00,30,00,00,00,31,00,34,00,33,\>> c:\ports.reg
echo 00,33,00,00,00,33,00,33,00,38,00,39,00,00,00,35,00,36,00,33,00,31,00,00,00,\>> c:\ports.reg
echo 35,00,36,00,33,00,32,00,00,00,00,00>> c:\ports.reg
echo Run ports.reg to modify registry
regedit /s c:\ports.reg
echo Delete c:\ports.reg
del c:\ports.reg
cls
echo Congratulations
echo ------------------------
echo + Modify TCP/IP filter completed +
echo ------------------------
pause
call 9.bat

5.bat

@echo off
Color 0A
cls
echo ===============================================================
echo * Windows2000 System Vulnerability Basic Repair Program *
echo ===============================================================
echo * Thank you for using, hope you continue to support us *
echo * WeiLan SKY Network Security Alliance *
echo * HTTP://WWW.WeiLanSKY.COM *
echo * weilansky-ghost@TOM.COM *
echo * QQ：21211969 *
echo * Ghost June 1, 2003 *
echo ===============================================================
echo The following program will automatically clear from your computer and exit CMD mode
pause
del 0.bat
del 1.bat
del 2.bat
del 3.bat
del 4.bat
del 9.bat
exit

9.bat

@echo off
Color 0A
cls
echo ===================================
echo + Windows2000 System Security Vulnerability Repair +
echo -----------------------------------
echo + Function Main Menu +
echo ===================================
echo + 1——Repair system share vulnerability +
echo + 2——Enhance defense against DDOS ability +
echo + 3——Disable insecure services +
echo + 4——Modify TCP/IP filter +
echo + 5——Exit and return to window interface +
echo ===================================
echo Please directly continue to enter the function code you need to execute
echo {1 2 3 4 5} and press Enter
echo ===================================


WeiLan SKY Network Security Alliance Vulnerability Repair Tool

Windows2000 System Security Vulnerability Repair

Author: Ghost

This program repairs the following vulnerabilities
WIN2000 default share vulnerability
Disabled Telnet service to prevent remote opening of Ttelnet
Disabled Remote Registry Service to prevent remote registry operation
Disabled Messenger service to prevent message spam
Closed TCP/IP NetBIOS Helper Service
Modified TCP/IP filter
Improved ability to resist DDOS attacks

This program is copyrighted by WeiLan SKY Network Security Alliance Ghost
Any unit and individual can reprint, please indicate the copyright

Last edited by 40szb on 2006-12-27 at 01:08 AM ]

Where is the code or program?

　　Sweat one...

It's very dark, so dark that you can't see the program code ^_^

It turns out it's really dark, all the posts we made have been blacked out

This can also be considered as hackers~~ Hackers in mainland China吧

I see it more like a P processing used by a company network administrator, and it has nothing to do with hackers

It seems quite powerful!

Just some commonly used registry files.

Actually an old red hacker.

Need to be a bit technical when blacking out

I saw it. It's a very common optimization