Warning: Creating default object from empty value in /home/ethical/public_html/wp-content/themes/platform/includes/class.layout.php on line 164

Warning: Creating default object from empty value in /home/ethical/public_html/wp-content/themes/platform/includes/class.layout.php on line 167

Warning: Creating default object from empty value in /home/ethical/public_html/wp-content/themes/platform/includes/class.layout.php on line 170

Warning: Creating default object from empty value in /home/ethical/public_html/wp-content/themes/platform/includes/class.layout.php on line 173

Warning: Creating default object from empty value in /home/ethical/public_html/wp-content/themes/platform/includes/class.layout.php on line 176

Warning: Creating default object from empty value in /home/ethical/public_html/wp-content/themes/platform/includes/class.layout.php on line 178

Warning: Creating default object from empty value in /home/ethical/public_html/wp-content/themes/platform/includes/class.layout.php on line 180

Warning: Creating default object from empty value in /home/ethical/public_html/wp-content/themes/platform/includes/class.layout.php on line 202

Warning: Creating default object from empty value in /home/ethical/public_html/wp-content/themes/platform/includes/class.layout.php on line 206

Warning: Creating default object from empty value in /home/ethical/public_html/wp-content/themes/platform/includes/class.layout.php on line 224

Warning: Creating default object from empty value in /home/ethical/public_html/wp-content/themes/platform/includes/class.layout.php on line 225

Warning: Creating default object from empty value in /home/ethical/public_html/wp-content/themes/platform/includes/class.layout.php on line 227

Warning: Creating default object from empty value in /home/ethical/public_html/wp-content/themes/platform/includes/class.layout.php on line 321

Warning: Creating default object from empty value in /home/ethical/public_html/wp-content/themes/platform/includes/class.layout.php on line 321

Warning: Creating default object from empty value in /home/ethical/public_html/wp-content/themes/platform/includes/class.layout.php on line 321

Warning: Creating default object from empty value in /home/ethical/public_html/wp-content/themes/platform/includes/class.layout.php on line 321

Warning: Creating default object from empty value in /home/ethical/public_html/wp-content/themes/platform/admin/class.options.metapanel.php on line 56

Warning: Creating default object from empty value in /home/ethical/public_html/wp-content/themes/platform/admin/class.options.metapanel.php on line 49
16 | August | 2012 | Certified Ethical Hackers Security Analyst Malware Hacking Information
From the daily archives: Thursday, August 16, 2012

I have compiled a small list of the most commonly used, and the latest used *nix bindshell ports that have been observed in the wild. These ports are either for “calling home” or used to actually bind a root shell to specific ports. Techniques displayed use both TCP/UDP and even ICMP and obfuscate traffic to conceal its purpose so you will have to be very diligent and careful in your analysis.

Make your simple filter:

#~ cat > Rootshell.filter

(dst port 1337 or 31337 or 2525 or 8888 or 4444 or 62221 or 2003 or 8555 or 9988 or 6666 or 8080 or 20001 or 12345 or 600)

and tcp[13]==24

hit ctrl-d

Obviously this can be tweaked for different needs, such as for udp or not tcp traffic and ip6, etc.

Run TCPDUMP with the following options:

tcpdump -Attttnni eth0 -s0 -F Rootshell.filter

- Some of the ports listed above will be very noisy on large networks so be careful!

Set your Twitter account name in your settings to use the TwitterBar Section.