1. Information Networking Security and Assurance Lab National Chung Cheng University Backdoors and Remote Access Tools INSA Laboratory

2. Information Networking Security and Assurance Lab National Chung Cheng University 2 Introduction The goal is to control remotely

3. Information Networking Security and Assurance Lab National Chung Cheng University 3 Outline Windows  VNC  NetBus Pro  BO  Sub7 Linux  STCPSHELL

4. Information Networking Security and Assurance Lab National Chung Cheng University 4 VNC Simple Remote Assess Tool Desktop http://www.realvnc.com/

5. Information Networking Security and Assurance Lab National Chung Cheng University 5 Setup VNC Server

6. Information Networking Security and Assurance Lab National Chung Cheng University 6 Connect to VNC Server

7. Information Networking Security and Assurance Lab National Chung Cheng University 7 NetBus Pro Allow full control It isn’t as graphically friendly asVNC http://www.packetstormsecurity.org

8. Information Networking Security and Assurance Lab National Chung Cheng University 8 Setup NetBus Server

9. Information Networking Security and Assurance Lab National Chung Cheng University 9 Double Click

10. Information Networking Security and Assurance Lab National Chung Cheng University 10 Back Orifice More functions Support plug-ins http://www.bo2k.com/

11. Information Networking Security and Assurance Lab National Chung Cheng University 11 Setup BO Server

12. Information Networking Security and Assurance Lab National Chung Cheng University 12 Setup Client

13. Information Networking Security and Assurance Lab National Chung Cheng University 13 Connect to Victim

14. Information Networking Security and Assurance Lab National Chung Cheng University 14 SubSeven Sub7 is similar to BO2k and Netbus More convenient  Just execute file http://www.hackpr.net/~sub7/downloads.html

15. Information Networking Security and Assurance Lab National Chung Cheng University 15 Setup Sub7 Server

16. Information Networking Security and Assurance Lab National Chung Cheng University 16 Connect to Victim

17. Information Networking Security and Assurance Lab National Chung Cheng University 17 SCTPSHELL Create a virtual shell on victim’s computer Spoof TCP packets http://www.pkcrew.org/tools/stcpshell.c Server IP Spoofing Client 140.123.113.72 Server 140.123.113.93

18. Information Networking Security and Assurance Lab National Chung Cheng University 18 Summary