|
To upgrade a running copy of Back Orifice remotely, simply upload the new
version of the server to the remote host, and use the Process spawn command
to execute it. When run, the server will automatically kill any programs
running as the file it intends to install itself as, install itself over the
old version, run itself from its installed position, and delete the updated
exe you just ran.
Before installation, several aspects of the server can be configured. The
filename that Back Orifice installs itself as, the port the server listens
on, and the password used for encryption can all be configured using the
boconf.exe utility. If the server is not configured, it defaults to listening
on port 31337, using no password for encryption (packets are still encrypted),
and installing itself as " .exe" (space dot exe).
The client communicates to the server via encrypted UDP packets. For
successful communication, the client needs to send to the same port the server
is listening on, and the client password must match the encryption password
server was configured with.
The port the client sends its packets from can be set using the -p option with
both the gui and text clients. If packets are being filtered or a firewall
is in place, it may be necessary to send from a specific port that will not be
filtered or blocked. Since UDP communication is connectionless, the packets
might be blocked either on their way to the server or the return packets might
be blocked on their way back to the client.
|