View Code? Open in Web Editor
NEW
This project forked from dcantrell/netstat
Trojan version of netstat (Linux net-tool)
License: GNU General Public License v2.0
Shell 0.07%
C 96.59%
Makefile 2.17%
M4 1.17%
not-a-netstat's Introduction
- modify netstat (Linux program to list connections) so that it initiates a reverse shell on user activation
- conceals our network process from results
- replace existing binary
- Download the netstat source code and set up the environment for compilation.
- Edit the netstat.c file and implement the backdoor function.
- Compile the modified code to generate the Trojan netstat binary.
- Integrate the backdoor function into the main function of the netstat code.
- Modify the TCP function to hide connections to the Trojan server from the netstat output.
- Test the Trojan netstat functionality, including both normal and root user executions.
- Verify the non-malicious detection of the Trojan binary by scanning it with VirusTotal.
- Replace the original netstat binary with the Trojan version.
not-a-netstat's People
Watchers
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent