How to break perl bind port?

postcd

Well-Known Member
Oct 22, 2010
717
19
68
Hello,

i wanted to ask how i can break function of the perl script that is used here:

- Removed Please Don't Link to Images -

(bind p0rt t0 /bin/sh), back-c0nnect [perl]

By breaking i mean the server is protected so when someone try to use such method, it will not work.

This is the php code behind that php script binding function: pastebin com/RKTCp7ME (pasting on the third party site as unlisted, to reduce chances the code is found by [email protected] who then make a workaround in their scripts)

Thank You
 
Last edited by a moderator:

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,913
2,203
363
Hello,

Could you let us know how the /tmp partition is mounted on this system? EX:

Code:
grep tmp /etc/fstab
mount|grep /tmp
Thank you.
 

postcd

Well-Known Member
Oct 22, 2010
717
19
68
Code:
grep tmp /etc/fstab
mount|grep /tmp
# grep tmp /etc/fstab
none /dev/shm tmpfs defaults 0 0
tmpfs /tmp/mysqltmp tmpfs nodev,nosuid,noexec,nodiratime,size=6g 0 0
# mount|grep /tmp
tmpfs on /tmp/mysqltmp type tmpfs (rw,nosuid,nodev,noexec,nodiratime,relatime,size=6291456k)
/dev/simfs on /home/virtfs/user/tmp type simfs (rw,nosuid,noexec,relatime,usrquota,grpquota)
/dev/simfs on /home/virtfs/user/var/tmp type simfs (rw,nosuid,noexec,relatime,usrquota,grpquota)
tmpfs on /home/virtfs/user/tmp/mysqltmp type tmpfs (rw,nosuid,noexec,relatime,size=6291456k)
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,913
2,203
363
Hello,

Try running the following command to secure the /tmp partition and then let us know if the output from the commands in your last response changes:

Code:
/scripts/securetmp
Thank you.