###############################################################################
#################### UNIX*UNIX*UNIX*UNIX*UNIX*UNIX*UNIX* ######################
#################### N                                 U ######################
################O### I    Enter Password: _________    N ####O#################
################|### X                                 I ####|#################
################|### *UNIX*UNIX*UNIX*UNIX*UNIX*UNIX*UNIX ####|#################
################|############################################|#################
################|############################################|#################
####|   |   |  ||  |  |  |  |  |  |  |  |  |  |  |  |  |  |  ||   |   |  |#####
####+-+-+-+-+--||--|--|--|--|--|--|--|--|--|--|--|--|--|--|--||-+-+-+-+--+#####
####| |   |    ||  |  |  |  |  |  |  |  |  |  |  |  |  |  |  || |   |    |#####
####+-+-+-+-+--||--|--|--|--|--|--|--|--|--|--|--|--|--|--|--||-+-+-+-+--+#####
####|   |   |  ||  |  |  |  |  |  |  |  |  |  |  |  |  |  |  ||   |   |  |#####
####+-+-+-+-+--||--|--|--|--|--+--+--+--+--+--|--|--|--|--|--||-+-+-+-+--+#####
####| |   |    ||  |  |  |  |  S M E A G O L  |  |  |  |  |  || |   |    |#####
####+-+-+-+-+--||--|--|--|--|--+--+--+--+--+--|--|--|--|--|--||-+-+-+-+--+#####
####|   |   |  ||  |  |  |  |  |  |  |  |  |  |  |  |  |  |  ||   |   |  |#####
####+-+-+-+-+--||--|--|--|--|--|--|--|--|--|--|--|--|--|--|--||-+-+-+-+--+#####
####| |   |    ||  |  |  |  |  |  |  |  |  |  |  |  |  |  |  || |   |    |#####
####+-+-+-+-+--||--|--|--|--|--|--|--|--|--|--|--|--|--|--|--||-+-+-+-+--+#####
####|   |   |  ||  |  |  |  |  |  |  |  |  |  |  |  |  |  |  ||   |   |  |#####
####+---+---+--+V  V  V  V  V  V  V  V  V  V  V  V  V  V  V  V+---+---+--+#####
###############################################################################



Yepp, just another backdoor... but with some more features

  1.  EUID Changing
      ^^^^^^^^^^^^^
      While online type >maskas admin< and you will get EUID of User 'admin'
      Sure 'root' must be the Owner of 'Smeagol', the SetUID Bit must be set
      and the OS must support the SavedUID.

      You could also start 'Smeagol' with another UID by using the '-m'
      Option.


  2.  Log Cleaner
      ^^^^^^^^^^^
      Type >remove joe< to start Simple Nomad's LogCleaner and delete
      Entries for user "joe".

      I advise you to include van Hauser's 'Clean' instead... it's much more
      better!


  3.  Process Table Faking I (Programname)
      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
      The Smaegol-Server masks himself to "biod" , "atd, "lpd" or "init"
      after every INVAL Seconds... and the
      Session-Process (the Server's Grandchild) masks himself to "atrun".


  4.  Process Table Faking II (Process ID)
      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
      The PID also changes after INVAL Seconds.


  5.  Process Table Faking I|| (User ID)
      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
      And last but not least the UID changes after INVAL Seconds.
      (give '-c' Option at cmd line, you must be 'root')


  6.  TTY Hijacking
      ^^^^^^^^^^^^^^  
      >ttyhij tty1< can be used to hijack a TTY Session.
      It's just the simple 'ioctl()' Stuff so you can't see the Output.
      I kept it simple only for the Sake of portability.
      With this Feature you can bypass encrypted Networksessions,
      One-Time-Passwords, Firewalls and the simple '/bin/login'.


  7.  Process Accounting Cleaner
      ^^^^^^^^^^^^^^^^^^^^^^^^^^
      Type >accth< to start Zhart's Acct Handler (ineractive Mode).
      Take care about the ACCTH define, look at the 'Makefile'...
      If ACCTH is defined Process Accounting is available, otherwise
      not. ;)


  8.  No plain ASCII Strings
      ^^^^^^^^^^^^^^^^^^^^^^
      All (not all but most of them) Strings are encrypted (loose Algorithm)
      by the 'StrHide' function, so the Admin isn't able to get Infos from
      'Smeagol' by using 'strings'


  9.  Online Help
      ^^^^^^^^^^^
      For help just type >helpme<.


Check the Makefile and then just type "make genpw" to create the Password-
generator, cut-n-paste the Cipher into smeagol.h.*/auth.h and type
"make generic" or "make aix" to compile and link Smeagol's Binary.

"make convert" links 'n' compiles the Stringhide-Stuff... some Chars are
prefixed with '\' to avoid Interpretation by the Compiler.

I tested 'Smeagol' under AIX 4.* and 3.* and under Linux 1.0.59 and 2.0.33.
While testing under AIX EUID Changing don't work... I did some minor
Changes on the Code maybe it works now.
I also complied some earlier Versions under Solaris 2.5...


BUGS: - 'pstree' shows the real argv[0]


     TICK (t_i_c_k@hotmail.com)
