Questions tagged [backdoor]
A backdoor is a method of bypassing normal authentication, securing illegal remote access to a computer while attempting to remain undetected.
197
questions
0
votes
0
answers
17
views
How does the --os-shell parameter in Sqlmap work? Is it still anonymous over Tor?
How does the --os-shell parameter in Sqlmap work? I know its uploading a backdoor, but how is sqlmap uploading it and is the file just a normal reverse shell trojan?
And is it still anonymous when ...
- 107
0
votes
1
answer
69
views
Is creating a backdoor without specifying an IP possible?
Is it possible to create a backdoor without configuring an IP? For example, if I want to create a listener that everyone can access, what can I do? Something like a backdoor, RAT or something like ...
- 3
0
votes
2
answers
65
views
How can a backdoor install a Chrome extension?
I read this: https://duo.com/decipher/malicious-chrome-extension-backdoor-uncovered-in-malware-campaign#:~:text=One%20of%20these%20is%20a,system%20and%20installing%20the%20extension. I quote this part ...
- 1
0
votes
2
answers
111
views
When a backdoor is installed in a device, does it become vulnerable to 'everyone', or only to the attacker?
I'm running tests on my devices. But I'm scared that by doing this, I will make my devices vulnerable. If I executed a backdoor sent to me (being an app with a payload on it, or doc, or email, etc), ...
1
vote
0
answers
140
views
How can I know if phone is already infected?
Last year, my friend who is learning hacking for nearly 3 years hacked my phone using social engineering by installing some malware in my phone. (After researching on Google, I think it might be a ...
- 11
0
votes
1
answer
205
views
SSD supports hardware AES encrytion. hdparm does not report a "Security" section. Should I be concerned?
Note that this is a different case from similar question asked 7 years ago, here: hparm -I /dev/sda does not report a Security section - should I be concerned?
In my case the SSD (part number: ...
- 3
0
votes
0
answers
191
views
Feasibility of CPU Backdoors
Recently I was thinking of the feasibility of hardware backdoors in the CPU introduced by manufacturers at the behest of three letter agencies. I can think of two potential backdoors that seem ...
2
votes
1
answer
214
views
Is Zircon kernel (from Fuchsia OS) safer by being a microkernel?
Fuchsia's possible Android replacement uses the Zircon microkernel. This means that the drivers should run in userspace.
Is this an advantage over Android? For example, closed source drivers now can't ...
- 121
1
vote
0
answers
206
views
Is this javascript code malicious? [closed]
a friend visited this site:
h-t-t-p-s://adidastore.buzz/adidass/tb.php?_t=1614958342
I malformed the url so no one accidently clicks on it
Below is the code the site is serving.
I don't know ...
- 11
2
votes
1
answer
149
views
Found a backdoor and multiple trojans in a computer. Is the hacker doing everything manually? [closed]
So I found a backdoor, multiple trojans and crypto miners in a client's PC. He is worried that his personal information has been compromised.
What happened:
During the installation of Kaspersky anti-...
- 121
0
votes
2
answers
225
views
How do I know that the ISO image of the Linux distribution I have downloaded does not contain the NSA backdoor?
I have downloaded the ISO image of Kubuntu 20.10 and installed it.
I am afraid that the ISO image may have been tainted (for example, by the NSA) to insert a backdoor into it.
As I see it, there are ...
- 495
19
votes
7
answers
6k
views
Don't one-time recovery codes for 2FA introduce a backdoor?
Although using multi-factor authentication is clearly a good move, I'm struggling with the 'one-time recovery codes' concept. It seems to me that if you choose to use them, what you're doing is ...
- 307
-1
votes
1
answer
138
views
Why governments use spywares instead of just redirecting traffic to their own servers by announcing a new path on BGP?
I was reading about The Hacking Team on Wikipedia. It produces "offensive intrusion and surveillance capabilities" and sells it to "to governments, law enforcement agencies". Its ...
- 495
1
vote
1
answer
169
views
Step by step protocol for complete system wipe (suspecting persistent backdoor)
I have reason to believe that there is a persistent backdoor on my device, one which is not removed after a re installation of the OS.
I wanted to know the step by step protocol of system wipe to ...
- 15
40
votes
5
answers
8k
views
How can you trust that there is no backdoor in your hardware?
We know that Intel processors have one (ME) so it is definitely possible.
In general, how could you even trust a piece of hardware like a CPU or network card, even if the manufacturer says there is no ...
- 403
0
votes
2
answers
293
views
How to close or block remote access backdoors?
I've been reading about famous hacking groups targeting law firms, corporations and individuals. They always use remote access backdoors to get into a victim's computer or phone and lock the system ...
- 29
0
votes
1
answer
732
views
metasploit: how to use linux/http/webmin_backdoor
I am trying to gain access to a server using CVE-2019-15107 with help of metasploit. I tried to find examples of its usage, but I found none.
My machines ip is 192.168.109.133. I am connected to a vpn ...
0
votes
1
answer
95
views
WordPress script injections [duplicate]
I manage an Ubuntu server that runs a number of WordPress sites. This morning one of them went down and was showing the exception
PHP Fatal error: Namespace declaration statement has to be the very ...
- 101
0
votes
3
answers
3k
views
Can remote control still take place during Windows session lock?
I was AFK from my Windows 10 machine, without locking it, and came back to an active TeamViewer session and someone remotely performing a PayPal donation. I do not have TeamViewer installed.
I'll ...
- 453
-1
votes
1
answer
130
views
How to detect software and hardware impairment? [closed]
How can I know if a pc has a backdoor in bios, and how to know if there is an hardware malicious impairment?
- 3
0
votes
0
answers
176
views
How to add session cookie in weevely?
I am pentesting a website and I was successful in uploading a php backdoor and finding the path of the backdoor. The only issue is that in order to gain access to the uploaded file I need to be logged ...
- 1
0
votes
0
answers
244
views
Reverse shell from backdoor - exposing attacker? [duplicate]
If an attacker successfully installed a backdoor that connects to his computer via a reverse shell, how can the attacker hide his IP address?
I'd guess he can't use Tor or a VPN, because packet ...
0
votes
1
answer
140
views
Static detection of PE
I'm doing in static analysis of PE file.
Can PE file have two or more executable sections?
How can we detect whether it is injected or not?
- 11
1
vote
0
answers
56
views
static analysis for identifying backdoors in PE [duplicate]
I am doing research in identifying backdoors in Windows .exe files. Currently I found some methods to detect them:
String search in .exe
Find reference .dll and win32 API calls using import table
...
- 11
4
votes
0
answers
138
views
Security implications of using unfused U2F token
I noticed that both of the Feitian USB/NFC U2F Security Keys I purchased on Amazon a few years ago are unfused. This means that the pre-personalization step was partially performed but not completed ...
- 205
1
vote
0
answers
214
views
Is it possible to debunk Intel Management Engine conspiracy theories using a data usage monitor device?
If there would be any backdoor in recent Intel CPU's, then it should send and receive data secretly.
Isn't it possible to easily debunk this conspiracy theory by implementing a third physical device ...
- 139
0
votes
0
answers
306
views
msfvenom: backdoored apk
I am using msfvenom to backdoor an Android apk. It is supposed that msfvenom adds extra permissions to original AndroidManifest:
[*] Poisoning the manifest with meterpreter permissions..
[*] Adding &...
- 35
1
vote
0
answers
322
views
How can access to Intel ME / AMT be disabled with firewall? [duplicate]
Short of flashing BIOS, there seems to be no way to disable the Intel ME.
So, is there a reliable way to block access to Intel ME, such using HW firewall (Firewall in front of the machine, not ...
- 1,786
0
votes
2
answers
268
views
Unable to execute PHP, throws 500 error. Able to upload and execute all others
I managed to upload a PHP shell using an upload form with some tweaking. No such restrictions except it renames the uploaded file to md5. But when I tried to execute the shell, It shows a 500 error. I ...
2
votes
1
answer
172
views
Were software "CD key" schemes backdoored or simply misdesigned?
Back in the day, retail software was shipped on physical CDs that often had a printed "CD key" label affixed. The (usually alphanumeric) key on the label was unique to that particular copy of the ...
- 2,025
1
vote
1
answer
235
views
Backdooring PE binary compiled with ASLR
I'm practicing backdooring PE binary compiled with ASLR in a WOW64 environment. The approach is pretty straightforward and basically is something like this:
Find code cave and a hijacking point. In ...
- 171
0
votes
0
answers
1k
views
How to make metasploit backdoor persistent in Android?
I created a payload with msfvenom and installed it on Android smartphone, but after a reboot or long time without use, it stops working, because the OS kills the process.
Is there any way to ...
- 109
2
votes
1
answer
2k
views
Did ZTE put a backdoor in my router? How can I remove it?
I have a ZTE router model ZXHN H198A.
Recently, upon connecting to it with Telnet (with some default username-password, of course), I decided to go around the filesystem. Then I noticed that they ...
- 21
1
vote
1
answer
377
views
Is there a "no-spy, no-backdoors standard" for telecom hardware manufacturing?
The BBC News article Huawei says willing to sign 'no-spy' agreements reports the following:
Huawei has also said it is independent from the Chinese government, but some countries have blocked it from ...
- 1,375
39
votes
3
answers
7k
views
Does Lawful Interception of 4G / the proposed 5G provide a back door for hackers as well?
A common saying among people in the field of cryptography and security is that when providing a back door to law enforcement, you also provide a back door for hackers.
I was trying to examine the ...
- 467
-1
votes
1
answer
1k
views
How to find out which application runs behind port 31337?
I found an open port on a "Kartina Quattro" (https://www.kartina.tv/article/247-kartina-quattro). It's a device for watching russian TV channels.
The port number is 31337 and the Service is called ...
1
vote
1
answer
220
views
How could the Chinese Communications Authority find a backdoor on my website?
I host a legacy HTTP website on my own hardware in China. It was attacked due to the Struts file upload flaw last month. But yesterday, Communications Authority in my province alarmed me, there is ...
- 19
0
votes
0
answers
4k
views
Meterpreter is failing to load any extension except the core commands
[*] Starting persistent handler(s)...
msf5 > use exploit/multi/handler
msf5 exploit(multi/handler) > set PAYLOAD windows/meterpreter/reverse_https
PAYLOAD => windows/meterpreter/reverse_https
...
1
vote
1
answer
792
views
ShadowHammer: Limited to Windows?
I've been reading about ShadowHammer over the last couple of days:
Kaspersky researchers estimated half a million Windows machines received the malicious backdoor via ASUS' update server. But the ...
- 2,956
2
votes
1
answer
200
views
What can be done to defend against acoustic keyboard evesdroping?
It is reasonably well established that it is possible to determine what one is typing based on keyboard sounds, and the difference between different keys (source). This provides a significant issue to ...
- 215
2
votes
1
answer
323
views
What features would you use to detect a backdoor or a bot installation?
I was reading a document about logging and analysis. The document talks about statistical analysis and machine learning techniques to detect some attack scenarios. For instance, If you want to detect ...
- 180
-1
votes
2
answers
193
views
How can I ensure that I can trust to OS?
How can I ensure that some OS can be trusted? I'm not speaking about possible security problems which can happen everywhere but about something like a backdoor left by a developer. Can such a thing ...
- 103
3
votes
3
answers
636
views
Ken Thompson's compiler hack
I have gone through Ken Thompson's compiler hack paper; can't we just go through the compiler's source code and check for any backdoor, what was the article's point?
Can we be sure that there are no ...
- 235
1
vote
1
answer
266
views
What guidelines can I follow to know if I can trust a software editor? [closed]
At work or at home, I often find some useful piece of software. Sometimes I may find it on a forum, mentioned on a video, or by talking to a colleague.
But how do I know if the editor of the software ...
- 111
2
votes
2
answers
158
views
Security and thumb drive [duplicate]
If my laptop is locked, can a thumb drive be able to still infect my computer, or create a backdoor, or any other security risk if it's plugged into it. If so what are some example
- 67
195
votes
11
answers
34k
views
Search for military installed backdoors on laptop
My laptop was confiscated by the military institute of my country and they made me to give them all my passwords (I cannot tell you the name of my country). They did not give it back to me for one ...
- 1,771
4
votes
4
answers
436
views
Is there a standard for labeling a vulnerability as an intentional backdoor?
US concerns of intentional vulnerabilities placed in foreign manufactured equipment has lit up headlines. Is there a standard that sorts (differentiates) poor-designs from intentionally placed ...
- 1,541
11
votes
3
answers
3k
views
Is it possible to examine a Huawei device to answer definitively whether or not there is a security risk?
There has been a lot of news lately, and in the last few years, about Huawei being a security risk. Can someone explain what the basis is for the risk, other than speculation? Is there not a way to ...
- 213
1
vote
1
answer
152
views
Where can I report a program to be reviewed for security vulnerabilities and privacy issues?
After looking for software to store information, I found a program that caught my attention instantly. I purchased a license but after a while, I realized that the program had a big vulnerability.
On ...
- 125
2
votes
2
answers
2k
views
How do persistent reverse shells and other malware gain their persistancy?
I heard about persistent reverse shells, and how in theory, they can stay indefinitely on the target's system, and how they can connect back to the host when the target's machine boots up, but how do ...
- 125