Chapter four entering the system by the back door
the unauthorized reproduction in whole or in part of this publication in any form is prohibited.
This lesson describes ways in creating back doors and computer systems.
We will start simply by modifying the file slash ATC slash past W.D.
before making any changes.
We create a backup copy of the file.
Slash slash past W.D..
Now we will add the user John who will have administrator privileges and will be able to log in without
a password.
As we can see the log in has been successful.
The user John is being recognized as root.
Now we will modify the configuration file on the server.
I it.
D.
Slash ATC slash i net d dot com.
Let's check which record format is valid in the configuration file of the program
now we will archive the file and create an entry that will make the system Shell available on port 901
the SWAT service
before the connection can start.
We must reload the net settings
as we can see.
We have gained remote access to the system without needing to log in.
Let's combine the methods we have learned and create a backdoor that will automatically set up an administrator
account after detecting the connection on the chosen port.
We will now copy the required programs from the disk and continue with their compilation and installation
as we can see the user John does not exists in the file.
Slash ATC pass w d at first but after the back program starts he is added automatically.
Now let's modify the I-net d configuration daemon and reloaded settings.
We did it after connecting the port nine to one.
The John account has been created.
Now we will try to achieve the same effect by using the ICMP protocol.
So let's compile and test our program
as we can see after receiving the needed ICMP packets.
The user John has been created.