So, today in #greyhack, i've written backdoorable versions of:
ssh, ps, kill, sudo and passwd.
I say backdoorable, because i haven't added any payloads/features to most of them - yet.
Except for PS and KILL (which don't list certain process or refuse to kill them), i have a ready to go rootkit, installable anywhere on any computer in the game.
I'm thinking logging, subversion, blocking and other bits of fun that one can have.
✅🎯🙄