Back Orifice

Infobox Software
name = Back Orifice



caption = screenshot of the Back Orifice client
developer = Sir Dystic (cDc)
operating_system = Microsoft Windows,
UNIX-systems (client only)
latest_release_version = 1.20
latest_release_date = August 3, 1998
genre = remote administration
license = freeware,
(open source UNIX client)
website = [http://www.cultdeadcow.com/tools/bo.html Back Orifice Homepage]

Back Orifice (often shortened to BO) is a controversial computer program designed for remote system administration. It enables a user to control a computer running the Microsoft Windows operating system from a remote location.Richtel, Matt. " [http://www.nytimes.com/library/tech/98/08/cyber/articles/04hacker.html Hacker Group Says Program Can Exploit Microsoft Security Hole] ," "New York Times" 4 August 1998. Retrieved 24 April 2007.] The name is a word play on Microsoft BackOffice Server software.

Back Orifice was designed with a client-server architecture. A small and unobtrusive server program is installed on one machine, which is remotely manipulated by a client program with a graphical user interface on another computer system. The two components communicate with one another using the TCP and/or UDP network protocols. In a reference to the Leet phenomenon, this program commonly runs on port 31337.

The program debuted at DEF CON 6 on August 1, 1998. It was the brainchild of Sir Dystic, a member of the U.S. hacker organization CULT OF THE DEAD COW. According to the group, its purpose was to demonstrate the lack of security in Microsoft's operating system Windows 98.

Although Back Orifice has legitimate purposes, such as remote administration, there are other factors that make it suited for less benign business. The server can hide itself from cursory looks by users of the system. As the server can be installed without user interaction, it can be distributed as payload of a Trojan horse.

For those and other reasons, the antivirus industry immediately categorized the tool as malware and appended Back Orifice to their quarantine lists. Despite this fact, it was widely used by script kiddies because of its simple GUI and ease of installation.

A sequel application, Back Orifice 2000 was released in 1999.

References

External links

* [http://www.cultdeadcow.com/tools/bo.html Back Orifice official site]
* [http://sourceforge.net/projects/boxp Back Orifice XP]