Back Orifice
Encyclopedia
Back Orifice is a controversial computer program
designed for remote system administration
. It enables a user to control a computer running the Microsoft Windows
operating system from a remote location. The name is a word play
on Microsoft BackOffice Server
software.
Back Orifice was designed with a client–server architecture. A small and unobtrusive server program is installed on one machine, which is remotely manipulated by a client program with a graphical user interface
on another computer system. The two components communicate with one another using the TCP
and/or UDP
network protocols
. In a reference to the Leet
phenomenon, this program commonly runs on port
31337.
The program debuted at DEF CON
6 on August 1, 1998. It was the brainchild of Sir Dystic
, a member of the U.S. hacker
organization Cult of the Dead Cow
. According to the group, its purpose was to demonstrate the lack of security in Microsoft
's operating system
Windows 98
.
Although Back Orifice has legitimate purposes, such as remote administration
, there are other factors that make it suited for less benign business. The server can hide itself from cursory looks by users of the system. As the server can be installed without user interaction, it can be distributed as payload of a Trojan horse
.
For those and other reasons, the antivirus industry immediately categorized the tool as malware
and appended Back Orifice to their quarantine lists. Despite this fact, it was widely used by script kiddie
s because of its simple GUI
and ease of installation.
Two sequel applications followed it, Back Orifice 2000
, released in 1999 and Deep Back Orifice by French Canadian hacking group QHA.
Computer program
A computer program is a sequence of instructions written to perform a specified task with a computer. A computer requires programs to function, typically executing the program's instructions in a central processor. The program has an executable form that the computer can use directly to execute...
designed for remote system administration
Remote administration
Remote administration refers to any method of controlling a computer from a remote location.Software that allows remote administration is becoming increasingly common and is often used when it is difficult or impractical to be physically near a system in order to use it, or in order to access web...
. It enables a user to control a computer running the Microsoft Windows
Microsoft Windows
Microsoft Windows is a series of operating systems produced by Microsoft.Microsoft introduced an operating environment named Windows on November 20, 1985 as an add-on to MS-DOS in response to the growing interest in graphical user interfaces . Microsoft Windows came to dominate the world's personal...
operating system from a remote location. The name is a word play
Word play
Word play or wordplay is a literary technique in which the words that are used become the main subject of the work, primarily for the purpose of intended effect or amusement...
on Microsoft BackOffice Server
Microsoft BackOffice Server
Microsoft BackOffice Server was a computer software package featuring Windows NT Server and other Microsoft server products that ran on NT server. It was marketed during the 1990s and early 2000s for use in branch operations and for small businesses to run their back office operations.The small...
software.
Back Orifice was designed with a client–server architecture. A small and unobtrusive server program is installed on one machine, which is remotely manipulated by a client program with a graphical user interface
Graphical user interface
In computing, a graphical user interface is a type of user interface that allows users to interact with electronic devices with images rather than text commands. GUIs can be used in computers, hand-held devices such as MP3 players, portable media players or gaming devices, household appliances and...
on another computer system. The two components communicate with one another using the TCP
Transmission Control Protocol
The Transmission Control Protocol is one of the core protocols of the Internet Protocol Suite. TCP is one of the two original components of the suite, complementing the Internet Protocol , and therefore the entire suite is commonly referred to as TCP/IP...
and/or UDP
User Datagram Protocol
The User Datagram Protocol is one of the core members of the Internet Protocol Suite, the set of network protocols used for the Internet. With UDP, computer applications can send messages, in this case referred to as datagrams, to other hosts on an Internet Protocol network without requiring...
network protocols
Transport layer
In computer networking, the transport layer or layer 4 provides end-to-end communication services for applications within a layered architecture of network components and protocols...
. In a reference to the Leet
Leet
Leet , also known as eleet or leetspeak, is an alternative alphabet for the English language that is used primarily on the Internet. It uses various combinations of ASCII characters to replace Latinate letters...
phenomenon, this program commonly runs on port
TCP and UDP port
In computer networking, a port is an application-specific or process-specific software construct serving as a communications endpoint in a computer's host operating system. A port is associated with an IP address of the host, as well as the type of protocol used for communication...
31337.
The program debuted at DEF CON
DEF CON
DEF CON is one of the world's largest annual computer hacker conventions, held every year in Las Vegas, Nevada...
6 on August 1, 1998. It was the brainchild of Sir Dystic
Sir Dystic
Josh Buchbinder,better known as Sir Dystic, has been a member of CULT OF THE DEAD COW since May 1997,and is the author of Back Orifice.He has also written several other hacker tools, including SMBRelay, NetE, and NBName....
, a member of the U.S. hacker
Hacker (computer security)
In computer security and everyday language, a hacker is someone who breaks into computers and computer networks. Hackers may be motivated by a multitude of reasons, including profit, protest, or because of the challenge...
organization Cult of the Dead Cow
Cult of the Dead Cow
Cult of the Dead Cow, also known as cDc or cDc Communications, is a computer hacker and DIY media organization founded in 1984 in Lubbock, Texas. The group maintains a weblog on its site, also titled "Cult of the Dead Cow"...
. According to the group, its purpose was to demonstrate the lack of security in Microsoft
Microsoft
Microsoft Corporation is an American public multinational corporation headquartered in Redmond, Washington, USA that develops, manufactures, licenses, and supports a wide range of products and services predominantly related to computing through its various product divisions...
's operating system
Operating system
An operating system is a set of programs that manage computer hardware resources and provide common services for application software. The operating system is the most important type of system software in a computer system...
Windows 98
Windows 98
Windows 98 is a graphical operating system by Microsoft. It is the second major release in the Windows 9x line of operating systems. It was released to manufacturing on 15 May 1998 and to retail on 25 June 1998. Windows 98 is the successor to Windows 95. Like its predecessor, it is a hybrid...
.
Although Back Orifice has legitimate purposes, such as remote administration
Remote administration
Remote administration refers to any method of controlling a computer from a remote location.Software that allows remote administration is becoming increasingly common and is often used when it is difficult or impractical to be physically near a system in order to use it, or in order to access web...
, there are other factors that make it suited for less benign business. The server can hide itself from cursory looks by users of the system. As the server can be installed without user interaction, it can be distributed as payload of a Trojan horse
Trojan horse (computing)
A Trojan horse, or Trojan, is software that appears to perform a desirable function for the user prior to run or install, but steals information or harms the system. The term is derived from the Trojan Horse story in Greek mythology.-Malware:A destructive program that masquerades as a benign...
.
For those and other reasons, the antivirus industry immediately categorized the tool as malware
Malware
Malware, short for malicious software, consists of programming that is designed to disrupt or deny operation, gather information that leads to loss of privacy or exploitation, or gain unauthorized access to system resources, or that otherwise exhibits abusive behavior...
and appended Back Orifice to their quarantine lists. Despite this fact, it was widely used by script kiddie
Script kiddie
A script kiddie or skiddie, occasionally skid, script bunny, script kitty, script-running juvenile or similar, is a derogatory term used to describe those who use scripts or programs developed by others to attack computer systems and networks and deface websites.-Characteristics:In a Carnegie...
s because of its simple GUI
Gui
Gui or guee is a generic term to refer to grilled dishes in Korean cuisine. These most commonly have meat or fish as their primary ingredient, but may in some cases also comprise grilled vegetables or other vegetarian ingredients. The term derives from the verb, "gupda" in Korean, which literally...
and ease of installation.
Two sequel applications followed it, Back Orifice 2000
Back Orifice 2000
Back Orifice 2000 is a computer program designed for remote system administration. It enables a user to control a computer running the Microsoft Windows operating system from a remote location. The name is a pun on Microsoft BackOffice Server software.BO2k debuted on July 10, 1999 at DEF CON 7...
, released in 1999 and Deep Back Orifice by French Canadian hacking group QHA.