This is a proof of concept implementation of win32 reverse backdoor program called the Insider. Unlike many other backdoor programs, Insider is not server listening some tcp/udp port, it is a client program that communicates with the server part through http protocol. This design has some unique features:
Insider network consists of the following parts:
Client is a simple win32 program that is distributed on victim machine in some way - send some executable to victim, do some ActiveX tricks, whatever. The client features:
The cgi part can be installed on any server that can execute perl cgi scripts - anonymous hosting service should be fine.
This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.
This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
Nick Snickers < nick102799 (at) hotmail.com >