> For the complete documentation index, see [llms.txt](https://www.heresecurity.wiki/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.heresecurity.wiki/redteam-hong-dui/xi-tong-lei/fu-jin-cheng-po-huai.md).

# 父进程破坏

```
命令explorer.exe / root与cmd.exe / c类似，只不过使用explorer会破坏进程树，会创建新实例explorer.exe，使之成为新实例下的子进程
```

![image](https://raw.githubusercontent.com/xiaoy-sec/Pentest_Note/master/img/665.png) ![image](https://raw.githubusercontent.com/xiaoy-sec/Pentest_Note/master/img/666.png)