Background

How to Hack ? Tips 5


Use various tricks. 

Often, to gain super-user status you have to use tactics such as creating a buffer overflow, which causes the memory to dump and that allows you to inject a code or perform a task at a higher level than you're normally authorized.
  • In unix-like systems this will happen if the bugged software has setuid bit set, so the program will be executed as a different user (super-user for example).
  • Only by writing or finding an insecure program that you can execute on their machine will allow you to do this.

 Create a backdoor. 

Once you have gained full control over a machine, it's a good idea to make sure you can come back again. This can be done by backdooring an important system service, such as the SSH server. However, your backdoor may be removed during the next system upgrade. A really experienced hacker would backdoor the compiler itself, so every compiled software would be a potential way to come back.

Don't forget!

Cover your tracks. 

Don't let the administrator know that the system is compromised. Don't change the website (if any), and don't create more files than you really need. Do not create any additional users. Act as quickly as possible. If you patched a server like SSHD, make sure it has your secret password hard-coded. If someone tries to log-in with this password, the server should let them in, but shouldn't contain any crucial information.

Categories: , Share

Leave a Reply