https://github.com/techgaun/bash-backdoor

A simple backdoor in (ba)sh with encrypted communication channel
https://github.com/techgaun/bash-backdoor

backdoor bash netcat

Last synced: about 1 month ago
JSON representation

A simple backdoor in (ba)sh with encrypted communication channel

• Host: GitHub
• URL: https://github.com/techgaun/bash-backdoor
• Owner: techgaun
• License: apache-2.0
• Created: 2015-07-17T20:51:12.000Z (over 9 years ago)
• Default Branch: master
• Last Pushed: 2016-12-16T00:34:58.000Z (almost 8 years ago)
• Last Synced: 2024-08-03T18:22:15.466Z (4 months ago)
• Topics: backdoor, bash, netcat
• Language: Shell
• Homepage:
• Size: 9.77 KB
• Stars: 26
• Watchers: 7
• Forks: 8
• Open Issues: 1
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-nepal - Bash Backdoor

README

        
# bash-backdoor

A simple backdoor in (ba)sh

It is cross-compatible across POSIX shells. While I initially decided to write for bash, I decided to use /bin/sh later.

This little backdoor works well with traditional netcat with -e option but it can be ~~easily~~ ported to support openbsd variant by making use of file descriptors.

My attempt to add support for nc.openbsd has not been very successful. Currently, nc.traditional works very well. nc.openbsd package however has issue in sending output back to client. PRs welcome

* The data over communication channel is totally encrypted with aes-256-cbc using openssl.

* You can generate new key, salt and iv. Check [common.sh](common.sh#L22) for reference

* You can pass several options as env-vars. Check [common.sh](common.sh#L15-L19) for reference

### Usage

Run daemon.sh

`$ ./daemon.sh`

Run client.sh

`$ ./client.sh`

You can run command on the simple prompt in your client-side now.

### Known Issues

[#1](https://github.com/techgaun/bash-backdoor/issues/1)