JavaScript must be enabled in order for you to see "WP Copy Data Protect" effect. However, it seems JavaScript is either disabled or not supported by your browser. To see full result of "WP Copy Data Protector", enable JavaScript by changing your browser options, then try again.

透過PSTools與WinSnap截取Windows Logon的Screen

最近因為原本的Ubuntu 13.10各大Mirror站找不到APT的套件庫,所以乾脆灌回M$,剛好在替換Logon的Background時,想說要來截個圖,但是當Logout的時候鍵盤上的Function Key都沒有作用(EX:PrintScreen),找找谷哥大神還真的有Geek想出來辦法,透過PSTools解決Function Key沒有作用的問題外,另外搭配WinSnap來做截圖,因此話不多說,直接看下面的操作就知道了,如下:
1) 下載PSTools並放到C:\Windows\System32目錄下(這邊可以下載,且PATH有包含前面的目錄)

2) 準備WinSnap,並按下Win+R執行CMD(Run as Administrator)

3) 在命令提示字元內執行下列Command
C:\> cd c:\Windows\System32\
c:\Windows\System32>PsExec.exe -?
PsExec v2.11 - Execute processes remotely
Copyright (C) 2001-2014 Mark Russinovich
Sysinternals -
PsExec executes a program on a remote system, where remotely executed console
applications execute interactively.
Usage: psexec [\\computer[,computer2[,...] | @file]][-u user [-p psswd][-n s][-r
servicename][-h][-l][-s|-e][-x][-i [session]][-c [-f|-v]][-w directory][-d][- riority>][-a n,n,...] cmd [arguments]
-a Separate processors on which the application can run with
commas where 1 is the lowest numbered CPU. For example,
to run the application on CPU 2 and CPU 4, enter:
"-a 2,4"
-c Copy the specified program to the remote system for
execution. If you omit this option the application
must be in the system path on the remote system.
-d Don't wait for process to terminate (non-interactive).
-e Does not load the specified account's profile.
-f Copy the specified program even if the file already
exists on the remote system.
-i Run the program so that it interacts with the desktop of the
specified session on the remote system. If no session is
specified the process runs in the console session.
-h If the target system is Vista or higher, has the process
run with the account's elevated token, if available.
-l Run process as limited user (strips the Administrators group
and allows only privileges assigned to the Users group).
On Windows Vista the process runs with Low Integrity.
-n Specifies timeout in seconds connecting to remote computers.
-p Specifies optional password for user name. If you omit this
you will be prompted to enter a hidden password.
-r Specifies the name of the remote service to create or interact.
-s Run the remote process in the System account.
-u Specifies optional user name for login to remote
-v Copy the specified file only if it has a higher version number
or is newer on than the one on the remote system.
-w Set the working directory of the process (relative to
remote computer).
-x Display the UI on the Winlogon secure desktop (local system
-priority Specifies -low, -belownormal, -abovenormal, -high or
-realtime to run the process at a different priority. Use
-background to run at low memory and I/O priority on Vista.
computer Direct PsExec to run the application on the remote
computer or computers specified. If you omit the computer
name PsExec runs the application on the local system,
and if you specify a wildcard (\\*), PsExec runs the
command on all computers in the current domain.
@file PsExec will execute the command on each of the computers listed
in the file.
cmd Name of application to execute.
arguments Arguments to pass (note that file paths must be
absolute paths on the target system).
-accepteula This flag supresses the display of the license dialog.
You can enclose applications that have spaces in their name with quotation marks e.g. psexec \\marklap "c:\long name app.exe".
Input is only passed to the remote system when you press the enter key, and typing Ctrl-C terminates the remote process.
If you omit a user name the process will run in the context of your account on the remote system, but will not have access to network resources (because it is impersonating). Specify a valid user name in the Domain\User syntax if the remote process requires access to network resources or to run in a different account. Note that the password and command is encrypted in transit to the remote system.
Error codes returned by PsExec are specific to the applications you execute, not PsExec.
C:\> psexec -sx cmd.exe

4) 按下Win+L登出,畫面會如下所示(此時可以直接執行Winsnap即可截圖,如果沒看到Black Windows可透過Alt+Tab切換)

◎、以上就是透過PSTools與WinSnap截取Windows Logon Screen的簡易介紹,如果看倌們想要透過另一種方法(Utilman Hack-忘記M$密碼可用),可以參考How to Geek文章介紹,先到這了,收工!

Leave a Comment

NOTE - You can use these HTML tags and attributes:
<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

This site is protected by WP-CopyRightPro