Let's say, you wanted to make an application which provides some web service on the surface, while secretly giving shell access to the box on which it runs.
The application is in a scripted language like php, python or node, and of course you would not want your victims (the ones that install your application) to find out about it.
I guess the big challenge in this scenario would be to hide or obfuscate the part of the code that provides the shell access. Ideas that come to mind are:

-encrypt the code as a string and decrypt it at runtime
-embed the code in some file like an impage or a pdf,  (possibly encrypted) and read it later from there
-use some obscure coding style in order to make the code less readable (possibly using obfuscators)

All of these approaches have their pros and cons, with the second one being the hardest to detect I think.
All of the options like plausible deniability, though.

So maybe the best thing would be to use a broken lib somewhere in the code (maybe statically linked).

How would you go about this ?

What's your

--
Posted on def2

Anonymous wrote:

Let's say, you wanted to make an application which provides some web service on the surface, while secretly giving shell access to the box on which it runs.
The application is in a scripted language like php, python or node, and of course you would not want your victims (the ones that install your application) to find out about it.
I guess the big challenge in this scenario would be to hide or obfuscate the part of the code that provides the shell access. Ideas that come to mind are:

-encrypt the code as a string and decrypt it at runtime
-embed the code in some file like an impage or a pdf,  (possibly encrypted) and read it later from there
-use some obscure coding style in order to make the code less readable (possibly using obfuscators)

All of these approaches have their pros and cons, with the second one being the hardest to detect I think.
All of the options like plausible deniability, though.

Maybe leave some debug code in when releasing code. Something that gives the dev shell access, but should not be enabled in release or should have been removed. You forgot to remove it.

So maybe the best thing would be to use a broken lib somewhere in the code (maybe statically linked).

I guess that's how government agencies get a lot of stuff done. Exploit bugs in libs.



--
Posted on: Rocksolid Light
dkzerogt6z6ybhcj.onion

Maybe leave some debug code in when releasing code.

I think that is a classic as well. Pretty much like a hardcoded default password. Gives you maximum deniability, but easier to detect.

I guess that's how government agencies get a lot of stuff done. Exploit bugs in libs.

That option should be the optimum between deniability and secrecy.

--
Posted on def2