De foarte mult timp ma confrunt cu o problema : atacuri cu brute force pe ftp ( ftp-ul fiind pe windows 2008 ) care imi genereaza si un log destul de mare de circa 5 , 6 , 8 mb dar au fost loguri si de 16 mb . M-am gandit sa al descurajez pe intruder , chiar daca acesta foloseste un fisier de useri si parole ‘default’ lucru care ma facut sa ma gandesc ca este un novice in materie si am creat urmatorul scenariu :
-
-
-
-
strComputer = "."
Set objWMIService = GetObject("winmgmts:" _
& "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")
Set colServiceList = objWMIService.ExecQuery("Associators of " _
& "{Win32_Service.Name=’MSFTPSVC’} Where " _
& "AssocClass=Win32_DependentService " & "Role=Antecedent" )
For each objService in colServiceList
objService.StopService()
Next
Wscript.Sleep 20000
Set colServiceList = objWMIService.ExecQuery _
("Select * from Win32_Service where Name=’MSFTPSVC’")
For each objService in colServiceList
errReturn = objService.StopService()
Next
Wscript.Sleep 20000
Set objWMIService = GetObject("winmgmts:" _
& "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")
Set colServiceList = objWMIService.ExecQuery _
("Select * from Win32_Service where Name=’MSFTPSVC’")
For each objService in colServiceList
errReturn = objService.StartService()
Next
Wscript.Sleep 20000
Set colServiceList = objWMIService.ExecQuery("Associators of " _
& "{Win32_Service.Name=’MSFTPSVC’} Where " _
& "AssocClass=Win32_DependentService " & "Role=Dependent" )
For each objService in colServiceList
objService.StartService()
Next
