

		   	  Linux DemonKit
			    version 1.0 

  	  		daemon9@netcom.com 
		      alhambra@infonexus.com

			 1996, The Guild

	A collection of Utilies for Linux 1.x.x.  We assume no responsibility
	for anything stupid anyone might do.  Merely for informational
	purposes.  More to come from this kit, so stay tuned!

	Kit History:		
	
	March 22	Started kit with DemonLogin and DemonPing.
	March 23	Added splitvt and SocketDemon.
	March 24	Added Netstat trojan and Banish.
	March 25	Added Demonidentd.
	March 26	finialized code for rumble function in login,
			and added recover.c to kit.
	March 28	Finalized code for Banish.
	June 30		DemonTelnet added.


	Kit Contents:

	DemonLogin	Trojaned login to drop you to a (root) shell if 
			proper login and passwd are given.  Optional
			code to log all other username/passwd duos and
			spit them to a file, encrypted. (Note that
			encryption algo 'rot47' is merely for obfuscation, 
			not security.  It can be broken by a cryptographer
			by hand with 47 well chosen characters.)
			Trojaned by daemon9.

	rot47.c		Companion program to decrypt the rot47 encrypted
			login/passwd file.
	

	DemonPing	Trojaned ping to drop you into a root shell if
			the proper argument is given.
			Trojaned by daemon9.

	DemonIdent	Enter sekret arguments, and an SUID root shell
			is created in /tmp.
			Trojaned by Alhambra.

	DemonTelnet	Keeps a log of username/passwd/site triplets

	Banish		Selective erasure from system logfiles.  Allows
			you to speficy how far back you want to erase
			a specifed login from the wtmp.  Clears utmp
			and lastlog as well.
			Coded by daemon9.

	Netstat		Trojaned netstat to cloak a specified UID, 
			connection, port &/or socket.  Taken from the 
			Linux rootkit.
			Trojaned by IRA.

	Splitvt		The ASR splitvt exploit.  Drops you into a
			root shell via the poorly written SUID root
			program splitvt(1). 
			Written by Dave G. & Vick M.

	SocketDemon	Robust, but easily spottable daemon that sits
			on an arbitrary port and waits for an
			authenticated connection.  Spawns a root
			shell (or executes commands).
			Written by Pluvius.
	
	
	
