[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Full-disclosure] Checking out backdoor shells
- To: <full-disclosure@xxxxxxxxxxxxxxxxx>
- Subject: Re: [Full-disclosure] Checking out backdoor shells
- From: Kai <kai@xxxxxxxxx>
- Date: Sat, 19 May 2012 01:01:01 +0400
Dear Mr. MustLive#2,
hello and welcome to the full-disclosure mailing list.
Faithfully yours
On Fri, 18 May 2012 15:50:04 -0500, Adam Behnke wrote:
> A backdoor shell can be a PHP, ASP, JSP, etc. piece of code which can
> be
> uploaded on a site to gain or retain access and some privileges on a
> website. Once uploaded, it allows the attacker to execute commands
> through
> the shell_exec () function, upload/delete/modify/download files from
> the web
> server, and many more. For defacers, it allows them to navigate
> easily to
> the directory of the public_html or /var/www and modify the index of
> the
> page.
--
Cheers,
Kai
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/