1
2
3
4
5
6
7
8
9

## 启动 firewalld 服务，添加端口 6666
fuser -k 6666/tcp

systemctl restart firewalld.service
firewall-cmd --zone=public --add-port=6666/tcp --permanent
systemctl stop firewalld.service

## 开启代理，通过外部访问 6666 转发到 6166(即内网服务器端口)
ssh -fNCL *:6666:localhost:6166 localhost

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13

// super.c
// --------
#include <stdio.h>
#include <stdlib.h>
#include <sys/types.h>
#include <unistd.h>

int main(void)
{
        setuid(0);
        clearenv();
        system("export PATH=/sbin:/bin:/usr/bin:/usr/local/bin:$PATH; /bin/bash");
}