2-5 basic configuration -win2003 add attack surface

close W2K3 A firewall

The firewall is windows System native , To a certain extent, it can protect the system security , Will block some data . Therefore, in order to increase the w2k3 The success of the experiment , Close the firewall of the system

Start > Control panel > Click local network connection > attribute > senior , Remove the tick

Let's tick it off , Click Settings , You can set up a firewall

Turn on w2k3 Remote desktop

Turn on Remote Desktop , The system will turn on 3389 The port is used for RDP,RDP Is an abbreviation for remote desktop . We use windows The built-in tool connects to the remote desktop

Right click the computer > System attribute >remote, Check the two check marks

By default ,w2k3 The user name has no password , Because the system user we use for remote login must have a password , therefore , We use it cmd Command creates a new user

netstat -an       // Check the system port number 
net user
net user admin admin /add
net localgroup administrators admin /add

Add success , At this time , We need to select the corresponding user

On your desktop ,mstsc, Remote login

start-up w2k3 iis The server

w2k3 iis6.0 Is to provide web Service-Oriented Middleware , In history, , There are a lot of security issues , And there are some problems , It's still there . such as iis put Loophole , We can upload it directly webshell To the server , There is no need to upload through script on our server , But because of support http put Method , So that he can upload directly , Or parsing vulnerabilities , It is often used in conjunction with file uploading

This is iis Effect picture of startup , Different websites need to occupy different ports

w2k3 Add new components

w2k3 Start other services .

open add or remove programs, You can add or uninstall programs 、 Install some installation packages from floppy disk 、 Add or remove some components

Load the corresponding image file , First step , Through the... In the virtual machine settings ,cd room, To load the corresponding iso file , perhaps , We will use the corresponding image file , Copy to the virtual machine and unzip , Make a selection