{"id":2825,"date":"2021-07-20T21:10:52","date_gmt":"2021-07-20T13:10:52","guid":{"rendered":"https:\/\/www.charflower.com\/?p=2825"},"modified":"2021-07-20T21:10:52","modified_gmt":"2021-07-20T13:10:52","slug":"poc%e7%a6%bb%e7%ba%bf%e6%89%b9%e9%87%8f%e6%9b%b4%e6%96%b0windows-xp-7-8-10%e6%a0%b9%e8%af%81%e4%b9%a6%e9%9b%86","status":"publish","type":"post","link":"https:\/\/www.charflower.com\/?p=2825","title":{"rendered":"[POC]\u79bb\u7ebf\u6279\u91cf\u66f4\u65b0Windows XP\/7\/8\/10\u6839\u8bc1\u4e66\u96c6"},"content":{"rendered":"\n<p>\u5de5\u7a0b\u5e08\u4eec\u7ecf\u5e38\u9700\u8981\u5728\u79bb\u7ebf\u73af\u5883\u4e0b\u7f6e\u5907\u5168\u65b0\u7684Windows 7\/10\u7684\u6a21\u677f\uff0c\u7531\u4e8e\u6839\u8bc1\u4e66\u6570\u76ee\u4f17\u591a\uff0c\u624b\u52a8\u66f4\u65b0\u6781\u5176\u7e41\u7410\uff1b\u4e0d\u66f4\u65b0\u8bc1\u4e66\uff0c\u53c8\u4f1a\u5bfc\u81f4\u90e8\u5206\u8f6f\u4ef6\u5b89\u88c5\u5931\u8d25\u3002\u5982\u4ee5\u4e0b\u7ec4\u4ef6\u5b89\u88c5\u5931\u8d25(<em><strong>0x800b010a \u65e0\u6cd5\u5efa\u7acb\u5230\u4fe1\u4efb\u6839\u8bc1\u4e66\u9881\u53d1\u673a\u6784\u7684\u8bc1\u4e66\u94fe<\/strong><\/em> )\uff0c\u8fdb\u800c\u5bfc\u81f4VDA\u5b89\u88c5\u5931\u8d25\uff1a<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"http:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_19_11_01.png\"><img loading=\"lazy\" width=\"486\" height=\"302\" src=\"http:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_19_11_01.png\" alt=\"\" class=\"wp-image-2826\" srcset=\"https:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_19_11_01.png 486w, https:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_19_11_01-300x186.png 300w\" sizes=\"(max-width: 486px) 100vw, 486px\" \/><\/a><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"http:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_20_50_47.png\"><img loading=\"lazy\" width=\"831\" height=\"637\" src=\"http:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_20_50_47.png\" alt=\"\" class=\"wp-image-2827\" srcset=\"https:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_20_50_47.png 831w, https:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_20_50_47-300x230.png 300w, https:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_20_50_47-768x589.png 768w\" sizes=\"(max-width: 831px) 100vw, 831px\" \/><\/a><\/figure>\n\n\n\n<p>\u89e3\u51b3\u65b9\u6848\uff1a<\/p>\n\n\n\n<p>\u5728\u80fd\u4e0a\u7f51\u7684\u8ba1\u7b97\u673a\u4e0a\uff0cCMD\u6267\u884c<\/p>\n\n\n\n<p><em>Certutil -syncWithWU \u76d8\u7b26:\\CTLUpdates<\/em><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"http:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_20_54_59.png\"><img loading=\"lazy\" width=\"576\" height=\"404\" src=\"http:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_20_54_59.png\" alt=\"\" class=\"wp-image-2828\" srcset=\"https:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_20_54_59.png 576w, https:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_20_54_59-300x210.png 300w\" sizes=\"(max-width: 576px) 100vw, 576px\" \/><\/a><figcaption>\u4e0d\u540c\u65f6\u671f\u7684\u8bc1\u4e66\u6570\u91cf\u53ef\u80fd\u6709\u6240\u4e0d\u540c<\/figcaption><\/figure>\n\n\n\n<p>\u5c06\u8bc1\u4e66\u5168\u90e8\u6253\u5305\uff0c\u4e0a\u4f20\u5230Windows 7\/10\u6a21\u677f\u4e2d\uff0c\u5236\u4f5c\u4e00\u4e2aadm\u6a21\u677f\u6587\u4ef6\uff0c\u5c06\u4ee5\u4e0b\u4ee3\u7801\u7c98\u8d34\u5230notepad++\u4e2d\uff0c\u53e6\u5b58\u4e3aRootDirURL.adm\u6587\u4ef6\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>CLASS MACHINE\r\nCATEGORY !!SystemCertificates\r\n    KEYNAME \"Software\\Microsoft\\SystemCertificates\\AuthRoot\\AutoUpdate\"\r\n    POLICY !!RootDirURL\r\n       EXPLAIN !!RootDirURL_help\r\n       PART !!RootDirURL EDITTEXT\r\n             VALUENAME \"RootDirURL\"\r\n       END PART\r\n    END POLICY\r\nEND CATEGORY\r\n&#91;strings]\r\nRootDirURL=\"URL address to be used instead of default ctldl.windowsupdate.com\"\r\nRootDirURL_help=\"Enter a FILE or HTTP URL to use as the download location of the CTL files.\"\r\nSystemCertificates=\"Windows AutoUpdate Settings\"<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"http:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_20_59_37.png\"><img loading=\"lazy\" width=\"594\" height=\"416\" src=\"http:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_20_59_37.png\" alt=\"\" class=\"wp-image-2829\" srcset=\"https:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_20_59_37.png 594w, https:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_20_59_37-300x210.png 300w\" sizes=\"(max-width: 594px) 100vw, 594px\" \/><\/a><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"http:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_21_00_25.png\"><img loading=\"lazy\" width=\"941\" height=\"810\" src=\"http:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_21_00_25.png\" alt=\"\" class=\"wp-image-2830\" srcset=\"https:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_21_00_25.png 941w, https:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_21_00_25-300x258.png 300w, https:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_21_00_25-768x661.png 768w\" sizes=\"(max-width: 941px) 100vw, 941px\" \/><\/a><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"http:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_21_01_46.png\"><img loading=\"lazy\" width=\"285\" height=\"134\" src=\"http:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_21_01_46.png\" alt=\"\" class=\"wp-image-2831\"\/><\/a><figcaption>\u76f4\u5230\u63d0\u793a\u66f4\u65b0\u5b8c\u6210\u3002<\/figcaption><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"http:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_21_03_33.png\"><img loading=\"lazy\" width=\"865\" height=\"625\" src=\"http:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_21_03_33.png\" alt=\"\" class=\"wp-image-2832\" srcset=\"https:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_21_03_33.png 865w, https:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_21_03_33-300x217.png 300w, https:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_21_03_33-768x555.png 768w\" sizes=\"(max-width: 865px) 100vw, 865px\" \/><\/a><figcaption>\u5b89\u88c5\u6210\u529f\u5b8c\u6210<\/figcaption><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"http:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_21_04_17.png\"><img loading=\"lazy\" width=\"791\" height=\"583\" src=\"http:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_21_04_17.png\" alt=\"\" class=\"wp-image-2833\" srcset=\"https:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_21_04_17.png 791w, https:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_21_04_17-300x221.png 300w, https:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_21_04_17-768x566.png 768w\" sizes=\"(max-width: 791px) 100vw, 791px\" \/><\/a><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"http:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_21_05_42.png\"><img loading=\"lazy\" width=\"659\" height=\"482\" src=\"http:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_21_05_42.png\" alt=\"\" class=\"wp-image-2834\" srcset=\"https:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_21_05_42.png 659w, https:\/\/www.charflower.com\/wp-content\/uploads\/2021\/07\/07-20_21_05_42-300x219.png 300w\" sizes=\"(max-width: 659px) 100vw, 659px\" \/><\/a><figcaption>\u4e00\u4e9b\u8fc7\u53bb\u9700\u8981\u5f3a\u5236\u7981\u7528\u8bc1\u4e66\u68c0\u67e5\u624d\u80fd\u63d0\u5347\u542f\u52a8\u901f\u5ea6\u7684\u8f6f\u4ef6\uff0c\u5982\u4eca\u53ef\u4ee5\u79d2\u5f00\u4e86\uff01<\/figcaption><\/figure>\n\n\n\n<p>\u8fd8\u53ef\u4ee5\u53c2\u7167\u5b98\u7f51\u89e3\u51b3\u65b9\u6848\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>https:&#47;&#47;docs.microsoft.com\/zh-cn\/previous-versions\/windows\/it-pro\/windows-server-2012-R2-and-2012\/dn265983(v=ws.11)?redirectedfrom=MSDN<\/code><\/pre>\n\n\n\n<p>Done\uff01<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u5de5\u7a0b\u5e08\u4eec\u7ecf\u5e38\u9700\u8981\u5728\u79bb\u7ebf\u73af\u5883\u4e0b\u7f6e\u5907\u5168\u65b0\u7684Windows 7\/10\u7684\u6a21\u677f\uff0c\u7531\u4e8e\u6839\u8bc1\u4e66\u6570\u76ee\u4f17\u591a\uff0c\u624b\u52a8\u66f4\u65b0\u6781\u5176\u7e41\u7410\uff1b\u4e0d&hellip; <a class=\"more-link\" href=\"https:\/\/www.charflower.com\/?p=2825\">\u7ee7\u7eed\u9605\u8bfb<span class=\"screen-reader-text\">[POC]\u79bb\u7ebf\u6279\u91cf\u66f4\u65b0Windows XP\/7\/8\/10\u6839\u8bc1\u4e66\u96c6<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[4,37],"tags":[39],"_links":{"self":[{"href":"https:\/\/www.charflower.com\/index.php?rest_route=\/wp\/v2\/posts\/2825"}],"collection":[{"href":"https:\/\/www.charflower.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.charflower.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.charflower.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.charflower.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2825"}],"version-history":[{"count":2,"href":"https:\/\/www.charflower.com\/index.php?rest_route=\/wp\/v2\/posts\/2825\/revisions"}],"predecessor-version":[{"id":2836,"href":"https:\/\/www.charflower.com\/index.php?rest_route=\/wp\/v2\/posts\/2825\/revisions\/2836"}],"wp:attachment":[{"href":"https:\/\/www.charflower.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2825"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.charflower.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2825"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.charflower.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2825"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}