iExploit

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Sign In Apply for Membership

Top Posters

Who's Online (0)

Powered by Vanilla. Made with Bootstrap.
Looking to introduce yourself? Look no further, and click here! We also have IRC! [irc.evilzone.org #iexploit]
iSSH backdoor
  • chroniccommand
    Posts: 1,389
    So I'm going to be working on a project soon. It's a backdoor for iPod / iPhone's that can be exploited via SSH. I've already coded the exploit in Python to gain remote root, but I'm going to be working on a backdoor for it either in C or Python. Some backdoor functions include:
    [list]
    [*]SSH backdoor[/*:m]
    [*]Execute arbitrary code[/*:m]
    [*]Remote Buffer OverFlow / Heap OverFlow[/*:m]
    [*]Remote VNC[/*:m]
    [*]Read from files(EG: /etc/passwd)[/*:m]
    [*]Write to files(EG: /etc/passwd)[/*:m]
    [*]Download files(EG:/var/mobile/document.pwn)[/*:m]
    [*]Upload files(EG:/home/root/expl0it.c)[/*:m]
    [*]More..[/*:m][/list:u]

    If anybody has any ideas feel free to add them :)
  • Xin
    Posts: 3,251
    That sounds elite bro! Gotta have delete files too , :)
    Xin
  • chroniccommand
    Posts: 1,389
    said:


    That sounds elite bro! Gotta have delete files too , :)


    Oops that's true :P I'm also thinking of a meterpreter session starter.
  • Xin
    Posts: 3,251
    Yeah you need to keep it stable though, too many features may take a lot of debugging :)
    Xin
  • chroniccommand
    Posts: 1,389
    said:


    Yeah you need to keep it stable though, too many features may take a lot of debugging :)



    Well debugging is part of the coding process =P Just gotta figure out if I should code it in C or Python.
  • Xin
    Posts: 3,251
    Which ever your best at really , i would probably be more help with C
    Xin
  • chroniccommand
    Posts: 1,389
    said:


    Which ever your best at really , i would probably be more help with C



    I'll probobly code it in Python, as I'm better at coding sockets in Python and I already coded the remote root exploit in Python, which makes the job a whole lot easier.
  • Xin
    Posts: 3,251
    Yeah true, fair enough good luck on it! Whats the ETA?
    Xin
  • chroniccommand
    Posts: 1,389
    said:


    Yeah true, fair enough good luck on it! Whats the ETA?



    No ETA at the moment. I'm thinking about putting this all in one "meterpreter-like environment". Like a meterpreter session, but my own hand coded environment.
  • Xin
    Posts: 3,251
    that sounds good chronic i wouldnt know how to do that
    Xin
  • chroniccommand
    Posts: 1,389
    said:


    that sounds good chronic i wouldnt know how to do that



    It's actually fairly simple. Just ask for raw input by the user. I'll put pre-made commands such as the ones listed and more. Like if the user types "delete" without the quotes on "CShell"(What I'm calling the meterpreter environement), it asks for the file to delete and then deletes it.
  • rx-
    Posts: 169
    Dude, how you gonna do openssh backdoor? Patch and recompile, or modifying binary/running program in memory? Also, i dont understand for what purpose could remote bof/hof could be? I mean you already have it rooted, right?
Add a Comment