Tini – Backdoor
If you understand the attacks, then you would also understand the difficulty of placing a backdoor on some machine/server.
Lets meet ‘tini’ ; as the name is, it is tiny (only 3kb in size) and can run without dragging attention.
So here is the behavior, Tini is an executable which listens on port 7777.
Since it is not a true backdoor it doesn’t execute by itself, someone has to execute it. Now by execute what it means is a simple ‘double click’.
On Host A run Tini
On Host B, open up a command prompt and do this ‘telnet <Host A> 7777′, you will be presented with the command prompt of Host A.
Beware that most of the AntiVirii/AntiSpyware products will identify this one and may cause problems so use it with due diligence. This is more of a useful tool than a destructive tool.
Also it is possible to change the port, all you need is a hex editor to open up the Tini binary
If some one would like to know, I would post that as well.
What’s the point!? I think NetCat (nc) can do the same thing.
mc -l -p 7777 -e cmd.exe
Even a telnet can do the same if the service is enabled.
The question would be why do we need Windows XP when we had Windows 2000 ?
The beauty of tini lies in its size.
Cheers,
Rajesh