基于局域网渗透的木马技术研究与实现  

RESEARCH AND IMPLEMENTATION OF A TECHNOLOGY OF TROJAN HORSE BASED ON INTERNAL PENETRATING IN LAN

作　　者：田磊[1] 李振海[1] 陈琳[1] 李世超[1] 

机构地区：[1]解放军信息工程大学,河南郑州450004

出　　处：《计算机应用与软件》2007年第10期195-197,204,共4页Computer Applications and Software

摘　　要：考虑局域网渗透的需求,对现有的木马技术进行了研究,深入分析了动态嵌入式DLL木马中的远程线程技术,提出了一种基于Winsock 2 SPI的新型DLL木马。该木马与采用远程线程技术的木马相比,在Windows环境中具有很好的隐藏性和跨平台性,在局域网渗透中具有一定的应用价值。Considering internal penetrating requirement in LAN, researches are made on the current Trojan horse technology, Remote thread technology of dynamic embedded DLL Trojan horse is analyzed. A new DLL Trojan horse based on Winsock 2 SPI is proposed. Compared with Trojan horse based on remote thread technology, this Trojan horse has a good disguise for self-protection on Windows. Meanwhile, the Trojan bourse is supported by multifarious Windows platforms, and thus it has some value in internal penetrating in LAN.

关 键 词：局域网 渗透 木马 SPI 服务提供者 协议链 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]