Weak passwords may allow attackers to guess the uTorrent login password and begin manipulating files on the server. Step 1: Brute-Force the Login with PatatorĪs research suggests, most passwords are six to eight characters in length. The PowerShell script is designed to embed a persistent backdoor and immediately delete itself when completed. This article will show how uTorrent web apps can be brute-forced and used to download a PowerShell script into the Windows 10 Startup directory. bashrc when someone successfully authenticates to the server.

It would cause the server to execute the attacker's. bashrc file, replacing the original one found on the server. An attacker can use the compromised torrent client to download a malicious. bashrc file found in most Linux system is essentially a Bash script that's executed every time a new terminal is opened or SSH login is established. Linux systems are equally vulnerable to such attacks but are out of the scope of our demonstration here. Modifying the default download directory in a hacked uTorrent client.

Utorrent remote