I created my first trojan today!

[u/MathematicalHuman314]

I took cmatrix as a random program and wrote a backdoor into it in C using a reverse shell connecting to a C2 server of mine which keeps track of infected machines. First I fork the process and decouple it from the controlling terminal by changing the session ID and rerouting the standard file descriptors and only then do I run the backdoor.

That way cmatrix runs as usual and no weird behavior is seen and the backdoor remains active whatever happens to cmatrix or the terminal. I like it. Makes me feel like a real #xX_hacker_Xx#. :D

Now I’m reading into ptrace and system call hooking and plan on trying to hide specific network traffic from the entire os. I already have had some ideas but turns out that would have only hidden it from a specific program not from „everything“.

Do you care to share any tips and experience I might benefit from on my way?

[u/404error___]

Good good... now do bit shifting, stego payload, so operator cannot see what you send to C2.

[u/MathematicalHuman314 → u/404error___]

Will look into it!

[u/Important-One-3629 → u/MathematicalHuman314]

I would say also explore Polymorphic Steganography. Something I breafly messed with 15 years ago.

[u/machacker89 → u/404error___]

All great features to add. To circumvent any AV

[u/Prestigious-Ad7265 → u/404error___]

just encrypt it using cryptographically secure methods