My first thought was that it wasn't very sophisticated. Actually, after seeing that the shell script says it must be ran as root and then glancing at the prog.

My first thought was that it wasn't very sophisticated. Actually, after seeing that the shell script says it must be ran as root and then glancing at the prog.c and seeing all the shellcode (along with the intentionally obfuscated variable names), I wouldn't be surprised if this "tool" isn't itself a backdoor.