Tag Info

New answers tagged

2

Modified PHP shell. Compromise is bad; shell's worse. Best have backups, nuke, change passwords, reload. Quick legwork: The string "FFSW3525KKSfj" trivially obtains this result, which is clearly inspired by the same codebase (containing all split base64 reference). Easy pivot from there is "ERROR! CANT DO NOTHING!". That discovers it's related to this ...


-1

It's a simple script that will take an argument passed to it from another script or possibly even the URL, and then run it as arbitrary php code. So it is only as malicious as the random stranger who installed it for you is, or whoever finds it. Who knows! Maybe you will find the convenience of having your webserver running arbitrary code helpful.


1

This code is parsing base64 encoded post data and running it as a script. My advice to you would be to pull the site that is affected down immediately as any data that is stored in the file system or any connected databases is now at risk. remove database users and prepare to clean up! There are many run throughs of what you should do in the event that ...


0

This by no means is a solid answer (I'd rather leave this as a comment than an answer, but I do not have the proper reputation). Depending on the network settings of your VirtualBox, if someone somehow got control of your VirtualBox, they could possibly get into your router or other devices on your network depending on settings and situation. Not to ...


1

If you can not trust your virtualisation software, you're in deep trouble. The virtualisation software can do *anything it wants) to the virtualised code (due to direct memory manipulation) but this is at the level of "Hey, can someone steal my creditcard data even if I encrypted it from memory when the memory is full of measurement probes?" (a.k.a. you ...


4

I just put some opinions from this link: If they wanted to include backdoors in VirtualBox, they would've closed the source a long time ago. Why would they spend time implementing a backdoor in open-source software that, if ever detected, would pretty much lead to everyone abandoning the software en masse? Leaving it open allows potentially thousands of ...



Top 50 recent answers are included