Udemy
    •  
    •  
    •  
    •  
    •  
    •  
    •  
    •  
Turn what you know into an opportunity and reach millions around the world.
Learn More
Your cart is empty.
Keep shopping
Ethical Hacking: Linux Backdoor
Rating: 4.5 out of 5(57 ratings)
14,038 students

Ethical Hacking: Linux Backdoor

Detect and Create Linux Backdoors
Created byPeter A
Last updated 8/2022
English
English [Auto],

What you'll learn

  • Basic Linux security
  • How to Find a Backdoor on a Linux system
  • Techniques to Create a Backdoor on a Linux system
  • Why Anti-Virus is not enough

Course content

1 section8 lectures40m total length
  • Introduction5:10

    Explore how attackers gain initial access on Linux servers using Kali Linux tools, scanning with NMP to find http and ssh, and using Hydra to brute-force passwords for backdoors.

  • SSH Backdoor5:19

    Demonstrates how an SSH backdoor uses a generated key pair stored in a hidden .ssh directory to log into a server without passwords, highlighting the role of public key authentication.

  • Detect SSH Backdoor3:31

    Detect ssh backdoors by inspecting authorized_keys for unknown keys, remove them, and disable password login to enforce ssh key-based access and prevent reentry.

  • PHP Backdoor (Web Shell)4:31

    Explore how a php backdoor web shell uses a web server to execute arbitrary commands from a browser, running as the server user and bypassing passwords.

  • Detect PHP Backdoor (Web Shell)2:10

    Identify backdoors by inspecting web server access logs in /var/log and spot commands passed in URLs, revealing a backdoored php web shell.

  • PHP Reverse Shell Backdoor5:47

    Explore how a PHP reverse shell backdoor enables a target server to connect back to an attacker, delivering a command line interface and remote access.

  • Cronjob Backdoor8:11

    Learn how cron jobs schedule scripts at specific times, and how a backdoor can be installed by running a malicious script via cron to establish a reverse shell.

  • Bashrc Backdoor5:44

    Shows how a hidden dot file such as .bashrc runs on login and enables a backdoor via a reverse shell, connecting the server to the attacker's machine.

Requirements

  • Some Linux knowledge required

Description

A linux backdoor is usually a tool that allows you to forward connect to a server by using ssh and then execute commands on the remote machine. But it could also be a reverse shell, where instead the server connects to your attack box and lets you run commands on the server. . A backdoor can be placed in a file belonging to an unsuspecting user, e.g. in .bashrc, .profile or .login. But there are many more ways a backdoor can be installed.

In this course you will learn about various ways a backdoor can be installed on Linux. You will learn how hackers can compromise your system and to do it yourself.  The backdoor runs hidden and is usually not visible in the process list. It allows the remote user to run arbitrarily defined commands on the victim's machine without them knowing it.

The usual security advise is apply patches provided by your OS vendor as soon as possible. Additionally, running only necessary processes with elevated privileges should be considered - especially on publicly facing servers and workstations. But that isn't enough, so in this course you will learn how to detect a backdoor.

It is a beginners course. You don't need prior knowledge except basic Linux knowledge, like the basic commands. It helps if you have some knowledge on Linux servers. If you want to check your system for backdoors or if you want to install backdoors yourself, this course is for you.


Who this course is for:

  • Beginner Ethical Hackers