Timeline for Prevent shell script inside image file
Current License: CC BY-SA 3.0
12 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jan 2, 2021 at 6:00 | history | tweeted | twitter.com/StackSecurity/status/1345248471373242368 | ||
| May 30, 2015 at 16:16 | vote | accept | William Calvin | ||
| May 22, 2015 at 16:50 | history | edited | William Calvin | CC BY-SA 3.0 |
Add more descriptive title
|
| May 22, 2015 at 11:37 | comment | added | RoraΖ | @DeerHunter I don't think the OP is asking how to deal with the compromise as a whole. He's asking specifically how to better validate an image file. | |
| May 22, 2015 at 10:04 | comment | added | William Calvin | The logs shows attempted loading from certain form. Basically, if there is any form submitted. It will record all data in encrypted format. I decrypted them and I can see the name of the file uploaded and also the time. | |
| May 22, 2015 at 10:01 | review | Close votes | |||
| May 22, 2015 at 15:26 | |||||
| May 22, 2015 at 9:48 | comment | added | LvB | does the log actually log activity, or just intend? How is the file presented to the checker? What parameters are logged? | |
| May 22, 2015 at 9:44 | comment | added | Deer Hunter | possible duplicate of How do I deal with a compromised server? | |
| May 22, 2015 at 9:36 | answer | added | ddyer | timeline score: 4 | |
| May 22, 2015 at 9:36 | comment | added | William Calvin | I have custom activity logs. I checked the logs and they actually uploaded an image but this image is actually a virus. | |
| May 22, 2015 at 9:31 | comment | added | LvB | How do you know that these checks are even done? Maybe they are bypassing your check using some other exploit (like possible Shellshock). | |
| May 22, 2015 at 9:01 | history | asked | William Calvin | CC BY-SA 3.0 |