kkevsterrr / backdoorme Goto Github PK

although may not be entirely necessary or prudent - pupy & metasploit both come with superior keyloggers and can be started outside of our interface

system calls in C do not respect bash aliases by default, and could potentially make poison more obvious

Run update-rc.d to add commands to startup

Could be a good idea to run sudo commands with new user's password, prevents from somebody changing their password and messing every backdoor up

Set a default port for each backdoor and let the user set a specific port if they're interested

Add cronjob support to the remaining 5 backdoors.

Bash -
Netcat -
Netcat-traditional - Done
Metasploit - Done
Perl - Done
Pupy - Done
Python - Done

Set up & background python's SimpleHTTPServer module for full filesystem access:

nohup python -m SimpleHTTPServer > /dev/null &

give user ability to change name, location, etc

Renaming/removing/poisoning essential system calls used for defense

1. Remove defensive calls, like 'rm', etc
2. Poison outputs, like netstat
3. Build wrapper backdoors around functions - create 'ls' binary that calls out a backdoor and then runs the real 'ls'

This one feels particularly evil

Ability to create or take down firewall

Include which target is the current target, more information about if the session is open, and improve the overall look of the printout

give the user the ability to enumerate either backdoors, modules, or both.

give the user the ability to set if the account has root access to determine which options will work or not

And I don't know why. Netcat-traditional works fine.

Similarly to how metasploit can background & foreground a meterpreter and other shells, handling this within the program could be cool and powerful, and prevent us from having to open multiple windows in order to make anything work

Something like "show modules" will list the available modules

• Enable FTP
• Enable Telnet
• Enable HTTP Server
  ...etc