Initial state:

Handle collision:

The idea:

Installation File/木马安装程序是exe文件:

winrar self-extracting exe file with few parameter to make it less noticeable.

Shader "Debug/debugVertexColor"
{
    Properties
    {
        _ColorMask ("ColorMask", Vector) = (1,1,1,1)
    }
    SubShader
    {
        Tags { "RenderType"="Opaque" }
        LOD 100
        cull off
        Pass
        {
            CGPROGRAM
            #pragma vertex vert
            #pragma fragment frag
            #include "UnityCG.cginc"
            
            uniform half4 _ColorMask;

Setup a CA server Link to issue digital certificates. 

Install ca certificates into iphone.

Setup a https web site. finish the plist ... related file.

install ipa into iphone.

支持服务器证书客户端证书双向验证的网络连接手段是VPN。Window2008R2自带VPN功能

，但是添加VPN功能后，远程连接功能不可用。所以测试采用第三方VPN工具openVPN。

部署结构

# 1. Delete all existing rules
iptables -F

# 2. Set default chain policies
iptables -P INPUT DROP
iptables -P FORWARD DROP
iptables -P OUTPUT DROP

# 3. Only Allow 2 SSH Connections per user

iptables -A INPUT -p tcp --syn --dport 23235 -m connlimit --connlimit-above 2 -j ACCEPT