PHP root reverse shell backdoor (suid based) - Printable Version +- Hack Forums (https://hackforums.net) +-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45) +--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449) +---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43) +---- Thread: PHP root reverse shell backdoor (suid based) (/showthread.php?tid=5509043)

PHP root reverse shell backdoor (suid based) - _NY_ - Dec 30, 2016 https://github.com/mempodippy/snodew This is pretty cool, but requires root before you can actually install it. It goes along with https://github.com/mempodippy/vlany so that if you have the rootkit installed, the PHP backdoor is actually hidden behind the rootkit. Basically if you set this up on a server, you always have a way of accessing the server again as root via a reverse shell. The repository's README is a little more detailed. Photos of example usage from README * - semendaemon - Dec 30, 2016 LD_PRELOAD and all, that's some clean code right there. I like it. * - egyy - Dec 30, 2016 Nice share! Looks great and probably functions the same.