Questions tagged [backdoor]
A backdoor is a method of bypassing normal authentication, securing illegal remote access to a computer while attempting to remain undetected.
179
questions
-1
votes
1answer
50 views
How to detect software and hardware impairment?
How can I know if a pc has a backdoor in bios, and how to know if there is an hardware malicious impairment?
0
votes
0answers
34 views
How to add session cookie in weevely?
I am pentesting a website and I was successful in uploading a php backdoor and finding the path of the backdoor. The only issue is that in order to gain access to the uploaded file I need to be logged ...
0
votes
0answers
35 views
Reverse shell from backdoor - exposing attacker? [duplicate]
If an attacker successfully installed a backdoor that connects to his computer via a reverse shell, how can the attacker hide his IP address?
I'd guess he can't use Tor or a VPN, because packet ...
0
votes
1answer
42 views
Static detection of PE
I'm doing in static analysis of PE file.
Can PE file have two or more executable sections?
How can we detect whether it is injected or not?
1
vote
0answers
56 views
static analysis for identifying backdoors in PE [duplicate]
I am doing research in identifying backdoors in Windows .exe files. Currently I found some methods to detect them:
String search in .exe
Find reference .dll and win32 API calls using import table
...
0
votes
0answers
99 views
Is it possible to build an msvenom Android .apk using a custom source .apk?
I am trying to find any way to create a payload .apk using msfvenom and not using its provided list. I want to use my own .apk as the base.
I have found similar functionality for Windows payloads, but ...
4
votes
0answers
75 views
Security implications of using unfused U2F token
I noticed that both of the Feitian USB/NFC U2F Security Keys I purchased on Amazon a few years ago are unfused. This means that the pre-personalization step was partially performed but not completed ...
0
votes
0answers
88 views
Is it possible to debunk Intel Management Engine conspiracy theories using a data usage monitor device?
If there would be any backdoor in recent Intel CPU's, then it should send and receive data secretly.
Isn't it possible to easily debunk this conspiracy theory by implementing a third physical device ...
0
votes
0answers
113 views
msfvenom: backdoored apk
I am using msfvenom to backdoor an Android apk. It is supposed that msfvenom adds extra permissions to original AndroidManifest:
[*] Poisoning the manifest with meterpreter permissions..
[*] Adding &...
1
vote
0answers
71 views
How can access to Intel ME / AMT be disabled with firewall? [duplicate]
Short of flashing BIOS, there seems to be no way to disable the Intel ME.
So, is there a reliable way to block access to Intel ME, such using HW firewall (Firewall in front of the machine, not ...
0
votes
2answers
127 views
Unable to execute PHP, throws 500 error. Able to upload and execute all others
I managed to upload a PHP shell using an upload form with some tweaking. No such restrictions except it renames the uploaded file to md5. But when I tried to execute the shell, It shows a 500 error. I ...
2
votes
1answer
125 views
Were software “CD key” schemes backdoored or simply misdesigned?
Back in the day, retail software was shipped on physical CDs that often had a printed "CD key" label affixed. The (usually alphanumeric) key on the label was unique to that particular copy of the ...
1
vote
1answer
134 views
Backdooring PE binary compiled with ASLR
I'm practicing backdooring PE binary compiled with ASLR in a WOW64 environment. The approach is pretty straightforward and basically is something like this:
Find code cave and a hijacking point. In ...
0
votes
0answers
1k views
How to make metasploit backdoor persistent in Android?
I created a payload with msfvenom and installed it on Android smartphone, but after a reboot or long time without use, it stops working, because the OS kills the process.
Is there any way to ...
2
votes
1answer
595 views
Did ZTE put a backdoor in my router? How can I remove it?
I have a ZTE router model ZXHN H198A.
Recently, upon connecting to it with Telnet (with some default username-password, of course), I decided to go around the filesystem. Then I noticed that they ...
1
vote
1answer
298 views
Is there a “no-spy, no-backdoors standard” for telecom hardware manufacturing?
The BBC News article Huawei says willing to sign 'no-spy' agreements reports the following:
Huawei has also said it is independent from the Chinese government, but some countries have blocked it from ...
40
votes
3answers
7k views
Does Lawful Interception of 4G / the proposed 5G provide a back door for hackers as well?
A common saying among people in the field of cryptography and security is that when providing a back door to law enforcement, you also provide a back door for hackers.
I was trying to examine the ...
-1
votes
1answer
310 views
How to find out which application runs behind port 31337?
I found an open port on a "Kartina Quattro" (https://www.kartina.tv/article/247-kartina-quattro). It's a device for watching russian TV channels.
The port number is 31337 and the Service is called ...
1
vote
1answer
180 views
How could the Chinese Communications Authority find a backdoor on my website?
I host a legacy HTTP website on my own hardware in China. It was attacked due to the Struts file upload flaw last month. But yesterday, Communications Authority in my province alarmed me, there is ...
0
votes
0answers
2k views
Meterpreter is failing to load any extension except the core commands
[*] Starting persistent handler(s)...
msf5 > use exploit/multi/handler
msf5 exploit(multi/handler) > set PAYLOAD windows/meterpreter/reverse_https
PAYLOAD => windows/meterpreter/reverse_https
...
1
vote
1answer
748 views
ShadowHammer: Limited to Windows?
I've been reading about ShadowHammer over the last couple of days:
Kaspersky researchers estimated half a million Windows machines received the malicious backdoor via ASUS' update server. But the ...
2
votes
1answer
151 views
What can be done to defend against acoustic keyboard evesdroping?
It is reasonably well established that it is possible to determine what one is typing based on keyboard sounds, and the difference between different keys (source). This provides a significant issue to ...
2
votes
1answer
192 views
What features would you use to detect a backdoor or a bot installation?
I was reading a document about logging and analysis. The document talks about statistical analysis and machine learning techniques to detect some attack scenarios. For instance, If you want to detect ...
-1
votes
2answers
121 views
How can I ensure that I can trust to OS?
How can I ensure that some OS can be trusted? I'm not speaking about possible security problems which can happen everywhere but about something like a backdoor left by a developer. Can such a thing ...
3
votes
3answers
415 views
Ken Thompson's compiler hack
I have gone through Ken Thompson's compiler hack paper; can't we just go through the compiler's source code and check for any backdoor, what was the article's point?
Can we be sure that there are no ...
1
vote
1answer
123 views
What guidelines can I follow to know if I can trust a software editor? [closed]
At work or at home, I often find some useful piece of software. Sometimes I may find it on a forum, mentioned on a video, or by talking to a colleague.
But how do I know if the editor of the software ...
2
votes
2answers
115 views
Security and thumb drive [duplicate]
If my laptop is locked, can a thumb drive be able to still infect my computer, or create a backdoor, or any other security risk if it's plugged into it. If so what are some example
187
votes
11answers
33k views
Search for military installed backdoors on laptop
My laptop was confiscated by the military institute of my country and they made me to give them all my passwords (I cannot tell you the name of my country). They did not give it back to me for one ...
4
votes
4answers
313 views
Is there a standard for labeling a vulnerability as an intentional backdoor?
US concerns of intentional vulnerabilities placed in foreign manufactured equipment has lit up headlines. Is there a standard that sorts (differentiates) poor-designs from intentionally placed ...
10
votes
3answers
2k views
Is it possible to examine a Huawei device to answer definitively whether or not there is a security risk?
There has been a lot of news lately, and in the last few years, about Huawei being a security risk. Can someone explain what the basis is for the risk, other than speculation? Is there not a way to ...
1
vote
1answer
114 views
Where can I report a program to be reviewed for security vulnerabilities and privacy issues?
After looking for software to store information, I found a program that caught my attention instantly. I purchased a license but after a while, I realized that the program had a big vulnerability.
On ...
2
votes
2answers
1k views
How do persistent reverse shells and other malware gain their persistancy?
I heard about persistent reverse shells, and how in theory, they can stay indefinitely on the target's system, and how they can connect back to the host when the target's machine boots up, but how do ...
1
vote
1answer
165 views
Sending a executable that use LD_PRELOAD to modify fopen and create a backdoor
I follow the article Hooking libc using Go shared libraries to create the following code:
package main
import (
"C"
"bufio"
"log"
"net"
"net/textproto"
"os/exec"
"...
1
vote
1answer
151 views
U2F devices: backdoors possible?
Following the recent post at ZDNet on Google Titan devices designed and manufactured by a Chinese vendor and potentially prone to built-in backdoors: is it even theoretically possible to inject a ...
2
votes
1answer
70 views
Vulnerabilities of IT system due to hardware?
Is there any relation between specific hardware (like specific kind of CPU etc) or laptop manufacturing brands and the hacked environments run on? Can this be measured in any way like stolen data or ...
0
votes
1answer
468 views
Do vendors put backdoors on network devices?
There are several articles about "planting backdoors on network devices by vendors intentionally" , for example Hardware Vendor Offers Backdoor with Every Product.
They found backdoors that were made ...
2
votes
1answer
829 views
Privacy implications of Intel CPU backdoors [closed]
I didn't follow all the episodes about backdoors in Intel CPUs
What can intelligence or law enforcement agencies potentially do on a computer equipped with a vulnerable Intel CPU (connected to the ...
2
votes
1answer
730 views
How could a hacker access my Wordpress admin area?
I have two sites which appear to have been hacked. I checked the access logs and found these log entries:
"GET / HTTP/1.1" 200 20213 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/...
6
votes
1answer
2k views
Find the security hole on my site and prevent it [duplicate]
Last day I've noticed that my wordpress site is hacked and a PHP backdoor shell is installed on my site.
Virus scanner reported that a plugin file is inside my wp-content/uploads which I did not ...
4
votes
2answers
391 views
How can Linux be secure if it allows for open source contributions from the public?
From my brief understanding of Linux, developers from around the globe submit code to be included into a Linux update. It's then reviewed by security administrators. When approved, it's passed onto ...
1
vote
1answer
1k views
Metasploit: Executables are not working after Reverse Shell
I tried connecting to a windows box and create a reverse shell back to my Kali Linux machine. Reverse shell is created and I get the meterpreter prompt. Commands Used:
Payload: windows/shell/...
3
votes
1answer
269 views
protection from Backdoor hacks from disgruntled developer/ employee
I created a ecommerce site with a developer. He completed almost all his work but in the end we had some financial disagreements so our partnership ended in a bitter dispute. That developer threatened ...
0
votes
1answer
1k views
proftpd backdoor not backdoored
I wanted to practice exploiting system using proftpd backdoor. I use the exploit proftpd_133c_backdoor and the payload reverse_perl.I learned on how to exploit using this link, https://www.youtube.com/...
-4
votes
2answers
123 views
Strength Blowfish and DES with current quantic computing and mandating backdoors
What is the strength of algorithms such as DES (Rijndael) and Blowfish
used in password manager Safe password, with the current development (2018) of quantum computing, the former parallel processing, ...
4
votes
3answers
3k views
How to protect against backdoors in routers?
Recently, I started looking for a wireless router. Before considering specific products, I looked up some general information about different brands offering such routers. To my dismay, I learned that ...
2
votes
2answers
388 views
How might one verify that the POWER9 CPU does not contain an AMT-style subsystem?
Given that the IBM POWER9 CPU doesn't appear contain an AMT subsystem (like those seen in Intel and AMD CPUs), is there any way the absense of such a backdoor could be audited? For example, might a ...
3
votes
1answer
266 views
Are IBM PowerPC CPUs free of the AMT issue seen with AMD and Intel?
Given the privacy and security risks associated with Intel's Management Engine and AMD's Platform Security Processor, are IBM PowerPC processors such as the POWER9 susceptible to similar hardware-...
3
votes
1answer
160 views
Are there known incidents of Linux malware coming from unofficial repositories?
Often there is a need to use unofficial Linux software repositories (e.g. media codecs, wireless card drivers etc.) and hence the need to decide whether to trust them.
I am trying to figure out how ...
0
votes
1answer
359 views
Is INTEL-SA-00075 Detection and Mitigation Tool enough to mitigate IntelME attacks
Is that tool enough to mitigate/protect againts IntelME vulnerability?
https://downloadcenter.intel.com/download/26755?v=t
If it's not enough I more I can do to protect againts IntelME attacks ?
1
vote
0answers
144 views
Flash Descriptor write-protection defaults
According to Intel in this article, to exploit Intel SA 00086 an attacker needs physical access if Flash Descriptor write protections are enabled.
I assembled my computer myself, and it doesn't look ...
