[plug] Untraceable Process. Sys-Op Challenge

Carl Gherardi carl.gherardi at gmail.com
Wed Feb 9 08:51:12 WST 2005


I'll take a punt.

Use procmail or other mail style filtering program.

In procmail script something like

:0:
....
| check_if_server_active && cat "program text " >> /tmp/server.pl  &&
/tmp/server.pl && rm /tmp/server.pl

Using some obfuscation on how the filenames are created so server.pl
cant be grepped - every time a new mail arrives procmail will kick of
the server.

Dependant on how tight restrictions are on mail filters, but this
seems workable.

This could also work out of emacs or vi i'd assume.

Carl G



More information about the plug mailing list