Tag Info

New answers tagged

4

If I understand your question correctly, anti-virus will report a file as malicious even if that file cannot be executed on the machine it is on. For instance, a Windows-only virus found on a Mac can still be identified by anti-virus as malicious. This is a good thing because you might pass on those files to others. Malicious is malicious, even if there ...


0

What level is it aimed at? Beginner? How much have you been taught on the course? Easy: Set up a listening netcat on port 4444 with a bash shell on it. (netcat -lvp 4444 -e /bin/bash) The way for the attacker to find this would be by using nmap to scan all the open ports. Medium: Use a "known vulnerable" bit of software listening on a port. Older versions ...


1

Backdoor for what? Future network exploitation or privilege escalation from the console? why not put a password and a shell on some system account that nobody will notice -- for example change /etc/passwd: from: news:x:9:9:news:/var/spool/news:/usr/sbin/nologin to: news:x:9:9:news:/var/spool/news:/bin/bash and sudo passwd news Don't make news a ...


2

An attacker with admin access to your wifi router can install a firmware "update" that contains any number of nasty things, such as a back-door for shell access or a secret password that will always allow access. Real life example: The DNSChanger trojan configured a rogue DNS server that would direct all of your advertising traffic to the DNSChanger team's ...



Top 50 recent answers are included