Questions tagged [backdoor]
A backdoor is a method of bypassing normal authentication, securing illegal remote access to a computer while attempting to remain undetected.
2
votes
1answer
119 views
What can be done to defend against acoustic keyboard evesdroping?
It is reasonably well established that it is possible to determine what one is typing based on keyboard sounds, and the difference between different keys (source). This provides a significant issue to ...
2
votes
1answer
83 views
What features would you use to detect a backdoor or a bot installation?
I was reading a document about logging and analysis. The document talks about statistical analysis and machine learning techniques to detect some attack scenarios. For instance, If you want to detect ...
0
votes
1answer
61 views
How can I ensure that I can trust to OS?
How can I ensure that some OS can be trusted? I'm not speaking about possible security problems which can happen everywhere but about something like a backdoor left by a developer. Can such a thing ...
1
vote
3answers
268 views
Ken Thompson's compiler hack
I have gone through Ken Thompson's compiler hack paper; can't we just go through the compiler's source code and check for any backdoor, what was the article's point?
Can we be sure that there are no ...
1
vote
0answers
33 views
What guidelines can I follow to know if I can trust a software editor?
At work or at home, I often find some useful piece of software. Sometimes I may find it on a forum, mentioned on a video, or by talking to a colleague.
But how do I know if the editor of the software ...
2
votes
2answers
87 views
Security and thumb drive [duplicate]
If my laptop is locked, can a thumb drive be able to still infect my computer, or create a backdoor, or any other security risk if it's plugged into it. If so what are some example
175
votes
11answers
30k views
Search for military installed backdoors on laptop
My laptop was confiscated by the military institute of my country and they made me to give them all my passwords (I cannot tell you the name of my country). They did not give it back to me for one ...
4
votes
4answers
257 views
Is there a standard for labeling a vulnerability as an intentional backdoor?
US concerns of intentional vulnerabilities placed in foreign manufactured equipment has lit up headlines. Is there a standard that sorts (differentiates) poor-designs from intentionally placed ...
9
votes
2answers
1k views
Is it possible to examine a Huawei device to answer definitively whether or not there is a security risk?
There has been a lot of news lately, and in the last few years, about Huawei being a security risk. Can someone explain what the basis is for the risk, other than speculation? Is there not a way to ...
1
vote
1answer
114 views
Where can I report a program to be reviewed for security vulnerabilities and privacy issues?
After looking for software to store information, I found a program that caught my attention instantly. I purchased a license but after a while, I realized that the program had a big vulnerability.
On ...
2
votes
2answers
265 views
How do persistent reverse shells and other malware gain their persistancy?
I heard about persistent reverse shells, and how in theory, they can stay indefinitely on the target's system, and how they can connect back to the host when the target's machine boots up, but how do ...
1
vote
1answer
79 views
Sending a executable that use LD_PRELOAD to modify fopen and create a backdoor
I follow the article Hooking libc using Go shared libraries to create the following code:
package main
import (
"C"
"bufio"
"log"
"net"
"net/textproto"
"os/exec"
"...
1
vote
1answer
121 views
U2F devices: backdoors possible?
Following the recent post at ZDNet on Google Titan devices designed and manufactured by a Chinese vendor and potentially prone to built-in backdoors: is it even theoretically possible to inject a ...
2
votes
1answer
45 views
Vulnerabilities of IT system due to hardware?
Is there any relation between specific hardware (like specific kind of CPU etc) or laptop manufacturing brands and the hacked environments run on? Can this be measured in any way like stolen data or ...
0
votes
1answer
231 views
Do vendors put backdoors on network devices?
There are several articles that says that vendors plant backdoors on network devices intentionally, such as this one.
They found backdoors that were made by the vendors. Also, I read somewhere else ...
1
vote
1answer
321 views
Privacy implications of Intel CPU backdoors [closed]
I didn't follow all the episodes about backdoors in Intel CPUs
What can intelligence or law enforcement agencies potentially do on a computer equipped with a vulnerable Intel CPU (connected to the ...
2
votes
1answer
470 views
How could a hacker access my Wordpress admin area?
I have two sites which appear to have been hacked. I checked the access logs and found these log entries:
"GET / HTTP/1.1" 200 20213 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/...
6
votes
1answer
2k views
Find the security hole on my site and prevent it [duplicate]
Last day I've noticed that my wordpress site is hacked and a PHP backdoor shell is installed on my site.
Virus scanner reported that a plugin file is inside my wp-content/uploads which I did not ...
4
votes
2answers
358 views
How can Linux be secure if it allows for open source contributions from the public?
From my brief understanding of Linux, developers from around the globe submit code to be included into a Linux update. It's then reviewed by security administrators. When approved, it's passed onto ...
1
vote
1answer
415 views
Metasploit: Executables are not working after Reverse Shell
I tried connecting to a windows box and create a reverse shell back to my Kali Linux machine. Reverse shell is created and I get the meterpreter prompt. Commands Used:
Payload: windows/shell/...
3
votes
1answer
226 views
protection from Backdoor hacks from disgruntled developer/ employee
I created a ecommerce site with a developer. He completed almost all his work but in the end we had some financial disagreements so our partnership ended in a bitter dispute. That developer threatened ...
0
votes
1answer
424 views
proftpd backdoor not backdoored
I wanted to practice exploiting system using proftpd backdoor. I use the exploit proftpd_133c_backdoor and the payload reverse_perl.I learned on how to exploit using this link, https://www.youtube.com/...
-4
votes
2answers
59 views
Strength Blowfish and DES with current quantic computing and mandating backdoors
What is the strength of algorithms such as DES (Rijndael) and Blowfish
used in password manager Safe password, with the current development (2018) of quantum computing, the former parallel processing, ...
0
votes
0answers
180 views
“MKS Top Level” prevents from shutting down Windows 10 laptop
I've just rebooted my Windows 10 machine and noticed that it had a delay before rebooting because application "MKS Top Level" have prevented it from doing so.
I don't think I've seen it before, so, I ...
4
votes
3answers
1k views
How to protect against backdoors in routers?
Recently, I started looking for a wireless router. Before considering specific products, I looked up some general information about different brands offering such routers. To my dismay, I learned that ...
2
votes
2answers
231 views
How might one verify that the POWER9 CPU does not contain an AMT-style subsystem?
Given that the IBM POWER9 CPU doesn't appear contain an AMT subsystem (like those seen in Intel and AMD CPUs), is there any way the absense of such a backdoor could be audited? For example, might a ...
3
votes
1answer
191 views
Are IBM PowerPC CPUs free of the AMT issue seen with AMD and Intel?
Given the privacy and security risks associated with Intel's Management Engine and AMD's Platform Security Processor, are IBM PowerPC processors such as the POWER9 susceptible to similar hardware-...
3
votes
1answer
122 views
Are there known incidents of Linux malware coming from unofficial repositories?
Often there is a need to use unofficial Linux software repositories (e.g. media codecs, wireless card drivers etc.) and hence the need to decide whether to trust them.
I am trying to figure out how ...
0
votes
1answer
227 views
Is INTEL-SA-00075 Detection and Mitigation Tool enough to mitigate IntelME attacks
Is that tool enough to mitigate/protect againts IntelME vulnerability?
https://downloadcenter.intel.com/download/26755?v=t
If it's not enough I more I can do to protect againts IntelME attacks ?
1
vote
0answers
124 views
Flash Descriptor write-protection defaults
According to Intel in this article, to exploit Intel SA 00086 an attacker needs physical access if Flash Descriptor write protections are enabled.
I assembled my computer myself, and it doesn't look ...
0
votes
1answer
309 views
PHP Backdoor on live server [duplicate]
Suddenly one of our Wordpress websites started sending spam emails and it was blacklisted on MXToolBox. So with the server support I scaned the files and found a strange file called timer.php ...
46
votes
1answer
4k views
Can the previewable option in file managers execute malware?
I am using Nemo file manager and I enabled the Previewable files option that shows video/photo files with their thumbnails:
I don't know exactly how files managers generate thumbnails, but I am ...
1
vote
1answer
1k views
How secure (about spyware/backdoor in it) is LibreOffice? Should i start using OpenOffice?
I'm using LibreOffice now, and I'm encrypting files of LO Write with VeraCrypt that have very personal content and I want to keep it secret. But I read about LO send to his web SO MUCH information, ...
2
votes
1answer
309 views
How does this backdoor work?
I just found that one of my wordpress websites included backdoor (my guess).
As I see now, the same file on server is different than original on my laptop drive. So I think my website is already ...
14
votes
1answer
3k views
How can anyone access Intel's “backdoor OS”, MINIX?
I've read that all recent Intel-based machines include a secret MINIX-based OS, and that it even includes its own web-server.
How does one access this OS's services from the main OS?
Its purpose ...
2
votes
1answer
102 views
Can back doors be reasonably well hidden in end-to-end encrypted communication?
Supposing governments can hold secrets and no rogue employees exist, can a back door in an end-to-end communication protocol be kept secret and not be abused by criminals as well, as often supposed?
...
9
votes
2answers
1k views
Are (Intel) chipsets spying on us?
I had a conversation yesterday where someone claimed that I should only use (Intel) computers from before 2006. This was allegedly because after this, software has been embedded in the chipsets that ...
0
votes
2answers
223 views
Would one consider the breaking of Enigma in WWII to be an early example of a backdoor?
In a recent discussion re Tory Minister and British Home Secretary Amber Rudd's insistence that WhatsApp install a backdoor for government monitoring of encrypted data, I brought up Enigma as an early ...
14
votes
3answers
4k views
How would a backdoor gain persistence
I know that if you were to gain access to a system and restart it, an implanted backdoor would be killed. Or if you were to locate the backdoor in task manager you would be able to kill it. However, I'...
1
vote
0answers
45 views
Secure deployment of xpdf on production
I have an application, which needs the functionality of converting PDF documents to text documents, and then parse them to retrieve information. I am using xpdf utility pdftotext to achieve that.
I ...
2
votes
2answers
288 views
Is the site wrong about an ethical hacking question or am I?
Can you let me know if this site is crazy? or am I?
6
votes
1answer
797 views
Is Intel i3 CPU affected by the Intel ME vulnerability?
Hello I have an Intel® Core™ i3-2328M CPU @ 2.20GHz computer processor (I think Sandy Bridge).
https://ark.intel.com/products/70927/Intel-Core-i3-2328M-Processor-3M-Cache-2_20-GHz
I have heard about ...
1
vote
0answers
756 views
Is there a list of new laptops without Intel Management Engine built in? [closed]
Is there a list of new laptops without Intel Management Engine built in?
I'm reading about Intel Management Engine as being a secret backdoor for hackers. (See, https://www.eff.org/deeplinks/2017/05/...
0
votes
2answers
998 views
Hardware / firmware backdoors : TPM as a security risk - How to turn it into security advantage?
--- Question:
What are the exact risks of using TPM 2.0 or owning this integrated chip? In what circumstances?
What are the solutions to minimize risks?
Details:
My primary goal was to try to find ...
1
vote
0answers
154 views
Using .data segment for Code Execution with DEP Enable
Sorry if this seems like a silly question. I am working on practicing backdooring applications for a cert I am working on, and one of the methods is to use existing code caves. The issue is, these ...
0
votes
3answers
329 views
Can OS protect us from backdoored CPU? [closed]
I was wondering if O.S. can act in such a way to hide from CPU what it is doing? I know that everything is computed only in CPU, but O.S. decides what that is, and keeps track of file system, etc.
For ...
1
vote
0answers
281 views
Was double pulsar's source code ever released?
Double Pulsar
I can only see a binary at this address: https://github.com/x0rz/EQGRP_Lost_in_Translation
News articles seem to not discriminate between the source code and the binary
3
votes
4answers
3k views
What is the difference between a backdoor and a rootkit?
I was reading the "What is a rootkit ?" post and I'm confused about the difference between a rootkit and a backdoor. As I understood it, both :
Are a piece of code written by the attacker and ...
2
votes
1answer
185 views
Can Windows Theme files (aero.msstyles) be sideloaded with spyware in their resources, specifically in UI scripts
Short version: topic
Detailed version:
I want to use a specific 3rd party theme for Windows. I'm already using an open source solution which I've compiled myself to disable Window's restriction on ...
1
vote
1answer
175 views
Can malware attach itself to user files?
Recently my AV has been detecting Trojan backdoors, Rootkits and Worms quite often. Some go unnoticed (I've checked suspicious files in VirusTotal a few times and they indeed turned out to be malware ...
