Reverse Remote Shell [rrs]

[LiquidWorm]

Шведската компанија Cycom AB, формирана 2004 година, веќе подолго време е водечка компанија од полето на едукација и ИТ консалтинг сервиси. Одделот за сигурност, Cycom Security, на 9-ти мај, 2004 година го објави добро познатиот rrs (Reverse Remote Shell) којшто им помогна на многу администратори и сигурносни офицери низ целиот свет.
Бла бла да не должам ...

rrs is a reverse (connecting) remote shell. Instead of listening for incoming connections it will connect out to a listener (rrs in listen mode). The listener will accept the connection and receive a shell from the remote host. rrs features:

- Full pseudo-tty support
- Full OpenSSL support (high encryption, client/server authentication, choice of cipher suites)
- Twofish encryption
- A simple XOR cipher
- Plain-text (unencrypted) session
- Peer-side session monitoring (snooping)
- Daemon option and reconnection features.

rrs is Free Software distributed under the MIT License and is known to compile and run under Linux, FreeBSD, NetBSD, OpenBSD and QNX.

Инсталација:
[hl='SHELL']
$ tar -xzf rrs-x.xx.tar.gz
$ cd rrs-x.xx

# type "make" without an argument for a list
# of pre-defined compilation options for various
# target systems.

$ make generic
$ make install

# or, if you rather want to install rrs under
# /usr/{bin,man/man1}, then type:

$ make PREFIX=/usr install
[/hl]

Автор:

My name is Michel Blomgren. I'm an information security consultant specializing in risk/vulnerability assessment and penetration testing with Cycom AB, www.cycom.se. I'm the developer of SENTINIX, a GNU/Linux distribution designed for monitoring, intrusion detection, anti-spam, anti-virus and clustering. You may contact me by sending an e-mail to <michel.AT.cycom.se>. If you like to keep the conversation private, fetch my PGP public key on http://www.cycom.se/misc/pubkeymichel.asc (886A 7B17 1747 6C82 7A7E EAC0 A3F1 2943 101C 18FA).

Директен линк за превземање (верзија 1.70): http://security.cycom.se/uploads/36/19/rrs-1.70.tar.gz

Официјлна веб страна на rrs: http://security.cycom.se/dl/rrs