(2.4) [service Trojan -slimftp] introduction and use

Catalog

One 、 brief introduction

1.1、 summary ：

1.2、 characteristic ：

 1.3、 download ：

Two 、 Use

2.1、 First step ： Prepare the environment

2.2、 The second step ： Install the server and associated test files ‎

2.3、 The third step ：‎ Extract supporting files ‎

‎2.4、 Step four ： test ‎

Browser Test ‎‎：‎

‎ Expected results ‎‎：‎

2.5、 Step five ： Delete ：

---

One 、 brief introduction

1.1、 summary ：

Same as WinShell equally , The software itself is just a FTP The server program is not a Trojan , But its compactness and concealment are praised by everyone , So it is widely spread among hackers . Its server-side program only 22KB

Adminftp. exe and Slimftp2. exe Two main documents

---

1.2、 characteristic ：

• ‎ Conforming to the standard FTP Server implementation , Can work with all major FTP Use with client ‎
• ‎ Completely multithreaded 32 Bit application , Available in all Windows On the platform as Windows System service operation ‎
• ‎ Support passive mode transmission , And allow recovery of failed transfers ‎
• ‎ Memory usage is small ; It will not occupy system resources ‎
• ‎ Easily configure server options through configuration files ‎
• ‎ All activities recorded to the file ‎
• ‎ Support binding to specific interfaces in a multi homed environment ‎
• ‎ User definable timeout ‎
• ‎ No installation routines ; Will not take over your system ‎
• ‎ Support all standards FTP command ：ABOR、APPE、CDUP/XCUP、CWD/XCWD、DELE、HELP、LIST、MKD/XMKD、NOOP、PASS、PASV、PORT、PWD/XPWD、QUIT、REIN、RETR、RMD/XRMD、RNFR/RNTO、STAT、STOR、SYST、TYPE、USER‎
• ‎ The following extensions are supported FTP command ：MDTM、NLST、REST、SIZE‎
• ‎ Support setting file timestamp ‎
• ‎ accord with ‎‎RFC 959‎ and ‎​​​​​​​‎RFC 1123‎ standard ‎

---

 1.3、 download ：

http://www.whitsoftdev.com/files/slimftpd.ziphttp://www.whitsoftdev.com/files/slimftpd.zip

---

---

Two 、 Use

2.1、 First step ： Prepare the environment

SlimftPD Now need Visual C ++ 2005 Runtime library

You can download it in the software center

or

http://www.whitsoftdev.com/files/vcredist_x86.exehttp://www.whitsoftdev.com/files/vcredist_x86.exe

2.2、 The second step ： Install the server and associated test files ‎

9 Follow this tutorial , Please follow the instructions below to SlimFTP And test files extracted to C Driver .‎

• ‎ stay ‎‎C‎‎ Create a drive named ‎‎uc_slimftpd_tutorial Of ‎‎ Folder ‎
• ‎ Download the file ‎‎uc_slimftpd_tutorial.exe‎‎ （266KB MD5=3eed932f281ac95617feef82b0a276c8）‎
• ‎ Save to the folder above to check MD5 Signature , To ensure that there is no error or tampering when downloading .‎

notes 1：‎‎ file uc_slimftpd_tutorial.exe‎‎ Is a single self extracting archive .‎  ‎

notes 2：‎‎ Like a unified server , It does not use the registry , So there are no real installation or uninstallation files , Uninstall just delete the file .‎

2.3、 The third step ：‎ Extract supporting files ‎

double-click ‎‎uc_slimftpd_tutorial.exe‎‎ This will start the extraction process . There is no need to change the folder destination , Just click “ extract ” Can finish .‎

About the files and folders you will see after the extraction process , Please refer to the figure below ：（ Note that you can delete the archive

‎ Top level folders ‎	uc_slimftpd_tutorial
‎ Sub level folders ：‎	‎ Include dave、john and original, To provide working folders that you can navigate through in this tutorial . Original include SlimFTPd, from WhiteSoft Development download .‎
‎ Program files ：‎	‎ServiceTool.exe：‎‎ Allow you to FTP The server is installed as a service , It is a switching operation file , It also allows you to uninstall the service .‎ ‎SlimFTPd.exe：‎‎FTP Server program ‎ ‎SlimFTPd.log：‎‎ This file was created when the server was running .（ Not included in the download ）‎ ‎slimftpd.conf：‎‎ This includes the server configuration detailed in this tutorial ‎
‎ Supporting documents ：‎	‎uc_kill_process.bat：‎‎ Single line batch file for starting the service , Just use the command prompt to save .‎ ‎uc_start_service.bat：‎‎ Single line batch file for starting the service , Just use the command prompt to save .‎ ‎uc_stop_service.bat：‎‎ Single line batch file for stopping service , Use the command prompt again to save .‎ ‎uc_stop_uninstall_service.bat：‎‎ A two-line batch file , Used to stop the service first , Then unload it .‎
‎ Sub level folders ：‎	‎uc_tskill‎‎： Contains the terminating process program of the unified server ‎

‎2.4、 Step four ： test ‎

Browser Test ‎‎：‎

1. ‎ Double click on the file ‎‎SlimFTPd.exe‎‎ Wait until you create the following file ‎‎SlimFTPd.log‎
   ‎（ If it fails to start , see also ‎‎ The problem part will not start ‎)
2. ‎ You may be challenged by the firewall allowing you to connect to all ports .‎
3. ‎ Type the following in the browser address bar ：‎‎ftp://localhost/‎
4. ‎ A pop-up window will be displayed ：‎‎“ Authentication required ”‎‎ Type in the following ：‎

• ‎ user name ： ‎‎ric‎
• ‎ password ：unicenter

---

‎ Expected results ‎‎：‎

1. ‎ The displayed page will be similar to the image on the right ‎
2. ‎ single click “‎‎ Until a higher level directory ‎‎” link ‎
   ‎ If it does occupy a level , There is ‎‎ Serious security problems ‎‎ And errors in the configuration file .‎
3. ‎ Click folder “‎‎ original ‎‎”, This will take you down one level ‎
4. ‎ Click folder again “‎‎slimftpd‎‎”, This will take you down one level .‎
5. ‎ single click “‎‎ To a higher level directory ‎‎” link , This will take you to the next level . Come again , The last level will be the level shown on the right

2.5、 Step five ： Delete ：

Sl imFTPd Not only a delicate F T P Server side , And it is also a green software , If you want to delete it , Just delete all the files generated by the decompression directly , Don't forget , Also delete the registration HKEY_LOCAL_MACHINE\Software\WhitSoft Development\SlimFTPd Contents of subkeys .