内网渗透笔记

<div class="blogpost-body" id="cnblogs_post_body">
<div>
<div>
<div>
<span style="border:0px;text-indent:0px;letter-spacing:normal;text-transform:none;word-spacing:0px;color:rgb(34,34,34);">Team:Syclover Author:L3m0n Email: </span>
<a href="mailto:iamstudy&" style="border:0px;text-indent:0px;letter-spacing:normal;text-transform:none;word-spacing:0px;color:rgb(0,51,102);">iamstudy@126.com</a>
</div>
<div style="border:0px;text-indent:0px;letter-spacing:normal;text-transform:none;word-spacing:0px;">
<span style="border:0px;text-indent:0px;letter-spacing:normal;text-transform:none;word-spacing:0px;color:rgb(34,34,34);">[TOC]</span>
</div>
<h3 style="letter-spacing:normal;text-indent:0px;text-transform:none;word-spacing:0px;"><span style="letter-spacing:normal;text-indent:0px;text-transform:none;word-spacing:0px;color:rgb(34,34,34);">域环境搭建</span></h3>
<div style="border:0px;text-indent:0px;letter-spacing:normal;text-transform:none;word-spacing:0px;">
<span style="border:0px;text-indent:0px;letter-spacing:normal;text-transform:none;word-spacing:0px;color:rgb(34,34,34);">准备： DC: win2008 DM: win2003 DM: winxp</span>
</div>
<div style="border:0px;text-indent:0px;letter-spacing:normal;text-transform:none;word-spacing:0px;">
<span style="border:0px;text-indent:0px;letter-spacing:normal;text-transform:none;word-spacing:0px;color:rgb(34,34,34);">win2008(域控) 1、修改计算机名：</span>
</div>
<div style="border:0px;text-indent:0px;letter-spacing:normal;text-transform:none;word-spacing:0px;">
<span style="border:0px;text-indent:0px;letter-spacing:normal;text-transform:none;word-spacing:0px;color:rgb(34,34,34);">2、配置固定ip: 其中网关设置错误，应该为192.168.206.2，开始默认的网管</span>
</div>
<div style="border:0px;text-indent:0px;letter-spacing:normal;text-transform:none;word-spacing:0px;">
<span style="border:0px;text-indent:0px;letter-spacing:normal;text-transform:none;word-spacing:0px;color:rgb(34,34,34);">3、服务器管理器---角色：</span>
</div>
<div style="border:0px;text-indent:0px;letter-spacing:normal;text-transform:none;word-spacing:0px;">
<span style="border:0px;text-indent:0px;letter-spacing:normal;text-transform:none;word-spacing:0px;color:rgb(34,34,34);">4、配置域服务: dos下面输入 </span>
<span style="border:0px;text-indent:0px;letter-spacing:normal;text-transform:none;word-spacing:0px;color:rgb(34,34,34);">dcpromo</span>
</div>
<div style="border:0px;text-indent:0px;letter-spacing:normal;text-transform:none;word-spacing:0px;">
<span style="border:0px;text-indent:0px;letter-spacing:normal;text-transform:none;word-spacing:0px;color:rgb(34,34,34);">Ps：这里可能会因为本地administrator的密码规则不合要求，导致安装失败，改一个强密码</span>
</div>
<div style="border:0px;text-indent:0px;letter-spacing:normal;text-transform:none;word-spacing:0px;">
<span style="border:0px;text-indent:0px;letter-spacing:normal;text-transform:none;word-spacing:0px;color:rgb(34,34,34);">5、设置林根域：林就是在多域情况下形成的森林,根表示基础,其他在此根部衍生具体见：</span>
<a href="http://angerfire.blog.51cto.com/198455/144123/" style="border:0px;text-indent:0px;letter-spacing:normal;text-transform:none;word-spacing:0px;color:rgb(0,51,102);">http://angerfire.blog.51cto.com/198455/144123/</a>
</div>
<div style="border:0px;text-indent:0px;letter-spacing:normal;text-transform:none;word-spacing:0px;">
<span style="border:0px;text-indent:0px;letter-spacing:normal;text-transform:none;word-spacing:0px;color:rgb(34,34,34);">6、 </span>
<span style="border:0px;text-indent:0px;letter-spacing:normal;text-transform:none;word-spacing:0px;color:rgb(34,34,34);font-weight:bold;">域数据存放的地址</span>
</div>
<div style="border:0px;text-indent:0px;letter-spacing:normal;text-transform:none;word-spacing:0px;">
<span style="border:0px;text-indent:0px;letter-spacing:normal;text-transform:none;word-spacing:0px;color:rgb(34,34,34);">win2003、winxp和08配置差不多</span>
</div>
<div style="border:0px;text-indent:0px;letter-spacing:normal;text-transform:none;word-spacing:0px;">
<span style="border:0px;text-indent:0px;letter-spacing:normal;text-transform:none;word-spacing:0px;color:rgb(34,34,34);">注意点是： 1、配置网络 dns server应该为主域控ip地址</span>
</div>
<div style="border:0px;text-indent:0px;letter-spacing:normal;text-transform:none;word-spacing:0px;">
<span style="border:0px;text-indent:0px;letter-spacing:normal;text-transform:none;word-spacing:0px;color:rgb(34,34,34);">2、加入域控</span>
</div>
<div style="border:0px;text-indent:0px;letter-spacing:normal;text-transform:none;word-spacing:0px;">
<span style="border:0px;text-indent:0px;letter-spacing:normal;text-transform:none;word-spacing:0px;color:rgb(34,34,34);">域已经搭建完成，主域控会生成一个 </span>
<span style="border:0px;text-indent:0px;letter-spacing:normal;text-transform:none;word-spacing:0px;color:rgb(34,34,34);">krbtgt</span>
<span style="border:0px;text-indent:0px;letter-spacing:normal;text-transform:none;word-spacing:0px;color:rgb(34,34,34);"> 账号他是Windows活动目录中使用的客户/服务器认证协议，为通信双方提供双向身份认证</span>
</div>
<div style="border:0px;text-indent:0px;letter-spac