hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant

drporka
Usage:
Service manager v1.3, © Hideout Inc
--------------------------------------

SERVICES HELP for this help message.
SERVICES LIST <machinename> for a list of all running Win32 process services.
SERVICES DELETE <servicename> <machinename> to delete the specified service.
SERVICES CONFIG <servicename> <machinename> for detailed configuration info abou
t a service.
SERVICES START <servicename> <machinename> to start a service.
SERVICES STOP <servicename> <machinename> to stop a service.
SERVICES PAUSE <servicename> <machinename> to pause a service.
SERVICES CONTINUE <servicename> <machinename> to continue a service.

SERVICES CREATE <servicename> <displayname> <service program> <machinename>.
SERVICES CREATESVRANY <servicename> <displayname> <srvany.exe> <service program>
<machinename>.
Ex. CREATESVRANY "system" "System" "c:\winnt\svrany.exe" "c:\winnt\serv-u.exe".



My Comment:

The best there is! i think smile.gif
just enyoy this nice peace of software in your rootkits.
drporka
forgot svrany.exe for:
CREATESVRANY

enyoy!
vnet576
defenitely looks interesting...gonna check it out.
mrBob
hmm, looks nice... wink.gif
but what's the difference between SERVICES CREATESVRANY and SERVICES CREATE ? unsure.gif
ducky
I wonder if it installs services on a remote machines with no admin rights...Gonna check on my sis PC (Evil laugh)

Thanks 4 sharing blink.gif
vnet576
QUOTE (ducky @ Oct 4 2003, 07:11 PM)
I wonder if it installs services on a remote machines with no admin rights...Gonna check on my sis PC (Evil laugh)

Thanks 4 sharing blink.gif

anything that modifys the registry requires admin or system rights....
Divx_dude
Yeah thx alot for it dewd wink.gif
Elftor
thxs for this tool dude ! smile.gif
Intervention
Often you can't add services "directly", so you need to do it through svrany.exe
If I'm not mistaken, Serv-u etc require you to use svrany or Firedaemon.
The good thing about svrany is it it only adds one service, and under the name you specify, while Firedaemon installs its own service PLUS yours..
I could be wrong here tongue.gif

Anyway, I've found this tool to be quite reliable.
^RB^
hmm looks like a nice nifty app there...
But isn't this the same as instsrv.exe in combination with srvany??? Only difference I notice atm is that you have more options with this proggie, so it must definitely be better...


oh, and you don't need srvany to install Serv-U as a service afaik... I installed using instsrv here on my own comp, and it works great!!!!



Anywayz, thanks a lot for the heads up drporka!!!!
Johny
know this one for a long time
svrany.exe can come in handy if a program doesn't support service, but for servu the best en most easy way is to do a complete hexedit of it smile.gif than you can change whatever you want and is it always installed immediatly under a nice name smile.gif
GhostCow
thanks for this bitchin post m8! biggrin.gif

question: after i use it on a remote machine, can i delete the file? (cuz firedeamon is undeletable...) dry.gif
xaph
great!!!

I was always using firedaemon smile.gif

greetz XapH
Thom
Just me it wont work for?
ssj4conejo
thx. i have a question is it possible to use this service starter to start a batch file? because the /i function wont install batch files for me.
h4x0re
my vir scanner picked this up, not sure if i should use it :\
Montana
If I want to install a service like this:
file.exe -q config.txt
how do I do it?
=k3Rn=
seems to be an useful tool.
@h4x0re : why does it get detected by a vidrus scanner? i would think it's a legit tool.
Jeeve5
QUOTE (ssj4conejo @ Oct 5 2003, 06:54 PM)
thx. i have a question is it possible to use this service starter to start a batch file? because the /i function wont install batch files for me.

you cannot install a batch file s service AFAIK. use bat2exe or bat2com and then install it as service wink.gif
boshcash
i will see this prog .. it may help me alot thnx
jead99
Usefull tool gonna try it out, thanks for sharing guys smile.gif
yeyo
Thanks a lot 4 it man biggrin.gif

very usefull
no_stress
just a tip... with this, your service can be a BAT file wink.gif
phaeton
I don't understand, why does this kick firedaemon's ass? I use FD (it will never be caught as a virus) it installs and deletes services, plus it makes sure they keep running. It's beautifully easy to hide. Does this monitor the service to make sure it is running and restart it if it closes?

I will stay with FD for a long time =D
daguilar01
CODE
service1          Firedaemon: Service1

thats why it sucks, admin sees that, and knows thta firedaemon just doesnt look like it should be in his services
phaeton
Lol, 1 registry keys can be changed =D 2, use it with a rootkit admin will never see anything =D
daguilar01
if an admin uses some kind of remote software to monitor his machines, than im pretty sure a rootkit like hackerdefender will not work, i believe in teh readme for hacker defender it says that it only makes files, services, folders, etc invisible to the local machine, remote software like dameware or something, can still see everythign normal
ive never used firedaemon, been usign services.exe since day 1, so cant really tell you if it really is any better or if its any worse
phaeton
hxdef doesn't hide NetBIOS output, yes thats true, but then again DameWare doesn't use this afaik, the only way for the admin to find you is to log on through a system share, but then again, we don't do things to even make them suspicios. DameWare/Remote Admin both do not see the app/files because they are hooked just like everything else.
nolimit
I've used this tool for over a year, I know the guy who coded it.
Only disadvantage of this over firedaemon is fd restarts closed/crashd processes, this doesnt. But yea, this is alot easier to install services with versus fd.
maxxis
CODE
http://www.governmentsecurity.org/forum/http://www.governmentsecurity.org/forum/index.php?showtopic=5576&st=0


hihi biggrin.gif
PSR
gr8 work man , will check it out .

thx a lot dude smile.gif
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.