3 ms·
My preferred hypothetical installer Trojan method is to make it append a value to ~/.ssh/authorized_keys and then ping a C&C server with the current username an
by sarciszewski 12y ago
My preferred hypothetical installer Trojan method is to make it append a value to ~/.ssh/authorized_keys and then ping a C&C server with the current username and IP ;)
- idlewan 12y agoYou would still have to hope that sshd is enabled and accepting connections (which by default it shouldn't, at least on end-user distros).
- sarciszewski 12y agoTrue. I've mostly seen PHP devs using this to deploy composer onto staging and production servers, so it would work on them. ;)