BashKeyLogger Use user's PROMP_COMMAND as a keylogger Change 127.0.0.1 to the attacker's IP address. Change 4444 to a netcat port on the attacker's machine.