Section: .. / groups / shadowpenguin / unix-tools /
| /// File Name: |
rbackdoor.c |
Description:
|
This is a backdoor program which can be accessed remotely as telnetd. TDM can not use telnet, rlogin, and ftp command, but this backdoor can use such command. However, you have to specify the correctry return code in the telnet client. If you can not change the return code, the "CR" code will be added and sent, so you type";" at the tail of your command.
| | File Size: | 2361 | | Last Modified: | Nov 5 23:24:09 1999 |
| MD5 Checksum: | ada51ed685b7e6fefb3f851412c97226 |
|
| /// File Name: |
sendexp.c |
Description:
|
In the Penguin Toolbox, I published the exploit code that can send and execute a trojan program which is prepared in the attacker host, this is server program which is used by such exploits. This program sends the "*.exe" program to the victim host, and the exploit code executes it.
| | File Size: | 2178 | | Last Modified: | Nov 5 23:24:09 1999 |
| MD5 Checksum: | 7e1e90081114f7b0dc7b85adc49b2840 |
|
| /// File Name: |
udpscan.c |
Description:
|
This is the simple UDP port scanner based on the ICMP.
| | File Size: | 2134 | | Last Modified: | Nov 5 23:24:09 1999 |
| MD5 Checksum: | 69ed992b74f46391cddee89b0ce8dec3 |
|
| /// File Name: |
udp_shell.tar.gz |
Description:
|
This is the UDP based backdoor which supports the UNIX shell command. Generally the UDP packet is not checked by the poor firewalls and packet screening programs, this program is useful in such environment.
| | File Size: | 1984 | | Last Modified: | Nov 5 23:24:09 1999 |
| MD5 Checksum: | 3d5f29691a2cf185943590adff45326b |
|
| /// File Name: |
xifconfig.c |
Description:
|
If you install the sniffer on the SunOS, admin can know that the sniffer is installed by the ifconfig command. This program fakes the ifconfig command, the PROMISC message will not be shown.
| | File Size: | 1746 | | Last Modified: | Nov 5 23:24:09 1999 |
| MD5 Checksum: | d0295f03767b9903bc2275360e4f358e |
|
| /// File Name: |
sut_sol25j.c |
Description:
|
SU trojan for Solaris2.5
| | File Size: | 1338 | | Last Modified: | Nov 5 23:24:09 1999 |
| MD5 Checksum: | 26d22bee6c19251f19d19444e22da58b |
|
| /// File Name: |
sut_sol24.c |
Description:
|
SU trojan for Solaris2.4
| | File Size: | 1295 | | Last Modified: | Nov 5 23:24:09 1999 |
| MD5 Checksum: | 625af8c325b186764a35a61de6972d1a |
|
| /// File Name: |
sut_digital.c |
Description:
|
SU trojan for Digital.
| | File Size: | 1284 | | Last Modified: | Nov 5 23:24:09 1999 |
| MD5 Checksum: | 3e74452aa0e80456e7e2ee22b3bc25f3 |
|
| /// File Name: |
sut_sun41.c |
Description:
|
SU trojan for SunOS4
| | File Size: | 1283 | | Last Modified: | Nov 5 23:24:09 1999 |
| MD5 Checksum: | d73b61254500cf0c87e4239802338064 |
|
| /// File Name: |
sizer.c |
Description:
|
If you install the ps faker, ifconfig faker, and HRS, the size of such programs will be smaller than original commands. This program adjusts the size of executable program, avoids the size check.
| | File Size: | 1144 | | Last Modified: | Nov 5 23:24:09 1999 |
| MD5 Checksum: | 02538901268fd7ff4247fc92bb051163 |
|
| /// File Name: |
hrs100.c |
Description:
|
This is one of the rootshell program. This program will be rootshell if you specify the special argment. If the special argment is not specified, this program calls a specified program. So, you name this program as well known suid program, it's very difficult for admins to find.
| | File Size: | 905 | | Last Modified: | Nov 5 23:24:09 1999 |
| MD5 Checksum: | 972284fa40fbd79e74121a98ef5f226d |
|
|
|
|
|
![.:[ packet storm ]:.](/images/ps-ani.gif)
