Linux Backdoors Tryhackme Writeup

This is a Writeup of Tryhackme room “Linux Backdoors”

Room link: https://tryhackme.com/room/linuxbackdoors
Note: This room is Free

Task 1: Introduction

Hey everyone!

This room is dedicated for learning common Linux backdoors techniques! A backdoor is simply something we can do to ensure our consistent access to the machine.

So even if the machine is rebooted, shut down or whatever, we would still be able to have access to it.

These aren’t actual vulnerabilities but just ways to maintain your access on a target :)

To recreate all the backdoor techniques shown in this room, you could simply try them all on your own machine or use the “THM ATTACK BOX” as it’s

safer and it doesn’t matter if you screw anything up.

Happy Hacking!

Task 2: SSH Backdoors

The first backdoor we are going to look at is: The SSH Backdoor

The ssh backdoor essentially consists of leaving our ssh keys in some user’s home directory. Usually the user would be root as it’s the user with the highest privileges.