Questions tagged [backdoor]

A backdoor is a method of bypassing normal authentication, securing illegal remote access to a computer while attempting to remain undetected.

Filter by
Sorted by
Tagged with
16
votes
10answers
6k views

Would an encryption scheme that generates an extra key to be securely stored offsite be a safe backdoor?

Let me be clear first and foremost: I do not think installing a backdoor in security algorithms is a good idea. They undermine the trust in the software and in the company that provides the service. ...
14
votes
1answer
4k views

How can anyone access Intel's “backdoor OS”, MINIX?

I've read that all recent Intel-based machines include a secret MINIX-based OS, and that it even includes its own web-server. How does one access this OS's services from the main OS? Its purpose ...
1
vote
0answers
132 views

Flash Descriptor write-protection defaults

According to Intel in this article, to exploit Intel SA 00086 an attacker needs physical access if Flash Descriptor write protections are enabled. I assembled my computer myself, and it doesn't look ...
0
votes
1answer
337 views

PHP Backdoor on live server [duplicate]

Suddenly one of our Wordpress websites started sending spam emails and it was blacklisted on MXToolBox. So with the server support I scaned the files and found a strange file called timer.php ...
2
votes
1answer
362 views

How does this backdoor work?

I just found that one of my wordpress websites included backdoor (my guess). As I see now, the same file on server is different than original on my laptop drive. So I think my website is already ...
2
votes
1answer
110 views

Can back doors be reasonably well hidden in end-to-end encrypted communication?

Supposing governments can hold secrets and no rogue employees exist, can a back door in an end-to-end communication protocol be kept secret and not be abused by criminals as well, as often supposed? ...
0
votes
2answers
226 views

Would one consider the breaking of Enigma in WWII to be an early example of a backdoor?

In a recent discussion re Tory Minister and British Home Secretary Amber Rudd's insistence that WhatsApp install a backdoor for government monitoring of encrypted data, I brought up Enigma as an early ...
14
votes
3answers
4k views

How would a backdoor gain persistence

I know that if you were to gain access to a system and restart it, an implanted backdoor would be killed. Or if you were to locate the backdoor in task manager you would be able to kill it. However, I'...
1
vote
0answers
53 views

Secure deployment of xpdf on production

I have an application, which needs the functionality of converting PDF documents to text documents, and then parse them to retrieve information. I am using xpdf utility pdftotext to achieve that. I ...
3
votes
2answers
301 views

Is the site wrong about an ethical hacking question or am I?

Can you let me know if this site is crazy? or am I?
6
votes
1answer
872 views

Is Intel i3 CPU affected by the Intel ME vulnerability?

Hello I have an Intel® Core™ i3-2328M CPU @ 2.20GHz computer processor (I think Sandy Bridge). https://ark.intel.com/products/70927/Intel-Core-i3-2328M-Processor-3M-Cache-2_20-GHz I have heard about ...
1
vote
0answers
998 views

Is there a list of new laptops without Intel Management Engine built in? [closed]

Is there a list of new laptops without Intel Management Engine built in? I'm reading about Intel Management Engine as being a secret backdoor for hackers. (See, https://www.eff.org/deeplinks/2017/05/...
0
votes
2answers
1k views

Hardware / firmware backdoors : TPM as a security risk - How to turn it into security advantage?

--- Question: What are the exact risks of using TPM 2.0 or owning this integrated chip? In what circumstances? What are the solutions to minimize risks? Details: My primary goal was to try to find ...
14
votes
2answers
9k views

How to disable Intel ME?

After reading about Intel ME containing secret backdoors, I would like to know if it is possible to disable Intel ME?
4
votes
2answers
240 views

Securing the bootloader

When using full disk encryption the bootloader is not encrypted thus allowing attacks like the Evil Maid. My question is how can I secure myself from this? Can I encrypt the drive or store it in a ...
1
vote
0answers
204 views

Using .data segment for Code Execution with DEP Enable

Sorry if this seems like a silly question. I am working on practicing backdooring applications for a cert I am working on, and one of the methods is to use existing code caves. The issue is, these ...
0
votes
3answers
332 views

Can OS protect us from backdoored CPU? [closed]

I was wondering if O.S. can act in such a way to hide from CPU what it is doing? I know that everything is computed only in CPU, but O.S. decides what that is, and keeps track of file system, etc. For ...
1
vote
0answers
319 views

Was double pulsar's source code ever released?

Double Pulsar I can only see a binary at this address: https://github.com/x0rz/EQGRP_Lost_in_Translation News articles seem to not discriminate between the source code and the binary
2
votes
2answers
308 views

How to find injected code in SQL?

Recently one of my sites was hacked. The hacker used SQL injection to compromise the security. After getting SQL access he injected code in many places in the database. I cleaned up many of them. But ...
3
votes
1answer
275 views

Can Windows Theme files (aero.msstyles) be sideloaded with spyware in their resources, specifically in UI scripts

Short version: topic Detailed version: I want to use a specific 3rd party theme for Windows. I'm already using an open source solution which I've compiled myself to disable Window's restriction on ...
1
vote
1answer
192 views

Can malware attach itself to user files?

Recently my AV has been detecting Trojan backdoors, Rootkits and Worms quite often. Some go unnoticed (I've checked suspicious files in VirusTotal a few times and they indeed turned out to be malware ...
3
votes
1answer
1k views

hparm -I /dev/sda does not report a Security section - should I be concerned?

I am in the habit of wiping new drives and for SSDs I use hdparm to perform an ATA secure erase. I just purchased two 44-pin PATA SSDs through an eBay seller in China and hdparm does not report a ...
12
votes
5answers
39k views

How can I detect backdoors?

I have a machine running Mac OS X and I suspect there may be a backdoor installed. I know that I could take it to a professional security firm for analysis, or nuke it from orbit, but I'm interested ...
0
votes
1answer
870 views

Injecting meterpreter/reverse_tcp into apache2 with msfvenom results in seg fault of apache2

I've been trying to use msfvenom with the linux/x86/meterpreter/reverse_tcp payload and an apache2 binary. My intent is to create a tainted version of apache2 to establish a persistent backdoor on the ...
1
vote
2answers
314 views

How should a backdoor be delivered? [closed]

I am wondering about the ways a backdoor could be delivered to someone and the advantages and disadvantages of the various ways. As a backdoor, I mean a script or payload that may be able to get a ...
1
vote
1answer
498 views

Possible to backdoor a Netcat Listener?

I have been getting into backdooring computers and servers using either specialized software or some malicious command that spawns a backdoor on the target machine, then pipes the terminal to my ...
0
votes
3answers
1k views

Reverse shell would expose attacker?

Could you guys help me understand reverse shells better? Would an attacker be exposed when using a reverse shell in a real attack? For example, if I have a reverse shell on a Linux VM that connects ...
2
votes
1answer
591 views

Tracking a backdoor by recording packets

I am by no means very bright when it comes to networking. But I know a bit. Let's say I suspect a backdoor is on my pc. To counter it I setup a device between the router and my pc to log everything. ...
166
votes
6answers
21k views

Apple's open letter - they can't or won't backdoor iOS?

Apple released an open letter to the public outlining their reasons for not complying with the FBI's demands to modify the iPhone's security mechanism. Here's a summary: The FBI has an iPhone in ...
8
votes
2answers
903 views

How are Intel/Amd Microcode Issues Delivered? Is it possible to block them?

After reading this article, I am really curious as to how, exactly processor microcode updates from Intel or AMD are issued. In what way is the data transmitted? Is it possibly to 'firewall' these ...
0
votes
1answer
269 views

Is ist possible to emed a backdoor in a picture? [duplicate]

Is it possible to infect a picture with a backdoor? And what can I google for that?
5
votes
3answers
1k views

BadUSB: Why are firmware writeable in the first place? Manufacturer's backdoor?

How many of you have actually updated their mouse, keyboard or USB stick firmware? How many vendor actually propose updates for such devices? However these devices firmware often offer a proprietary ...
29
votes
1answer
16k views

Consequences of tampered /etc/ssh/moduli

What are the consequences if an attacker is able to modify the /etc/ssh/moduli file?
0
votes
1answer
166 views

What is the meaning of back channel or backdoor in a program?

What is backdoor and why is it created in first place if it creates additional unnecessary risk? You might want to take up an example to explain it in detail.
1
vote
1answer
414 views

is it possible to avoid hardware backdoors? [closed]

Hi I have recently started to learn about data protection. After the snowden events it seems pretty certain that intelligence agency may have planted backdoors in hardware. I have got a few questions ...
1
vote
1answer
895 views

Unable to execute PHP shell

I have uploaded a simple PHP shell onto a server, but I get one of the following error messages when I am trying to execute a code: Warning: shell_exec() Unable to execute 'ls' in .... on line 2 ...
-1
votes
3answers
745 views

PHP Code Found Is It Malicious? [duplicate]

I found the following code on my website. What does it do? Is it malicious? <?php @ignore_user_abort(true); @set_time_limit(0); $getherw3423 = "FFS"."W35"."25KK"."Sfj"; $...
2
votes
2answers
10k views

How did the hacker get access to my WordPress upload folder? [closed]

Yesterday I found out there is this http://pastebin.com/MRRny4Ht PHP file in my friends server. I want to know how was the hacker able to upload it there? I read the similar questions but couldn't ...
2
votes
1answer
250 views

Is the Ethereum blockchain truly a tamper-proof way to deploy distributed applications?

The Ethereum website says that it provides a "cryptographically secure, decentralized, tamper-proof network" on which applications written in the Solidity contract language could be deployed. (https://...
4
votes
1answer
472 views

Can a running interpreted program cryptographically prove it is the same as as a published source code version?

Can a running interpreted program, for example in languages like python, javascript, ruby, java or php, cryptographically prove that it is the same as a published source code version in a way that ...
1
vote
2answers
598 views

Outgoing traffic block - Best policy

I'm concerned that in my network some background applications / virus can use my internet connection as malicious backdoor, and then I'm in trouble (i.e. authorities can think that one of my pc has ...
7
votes
2answers
292 views

Software can be audited, is there an equivalent for hardware?

In software, code auditing can be used as a mean to gain trust into a software. Of course closed, proprietary software would complicate this, and require to do reverse engineering. Anyway there seems ...
0
votes
2answers
157 views

malicious file on my websites, can't delete it [duplicate]

About 10 days ago I saw 2 unknown files on my websites (ASP.NET websites). they spread on all 3 of my websites, and placed them selves in the CSS folder. The first one was with the name of 'Paths....
4
votes
2answers
2k views

I found what, I believe, is a backdoor in my home router, what should I do?

My country doesn't have any laws regarding this subject (Brazil). And I don't want to disclose it to the police, it's more likely they will just keep it to themselves. What should I do?
4
votes
2answers
164 views

The risks of choosing a browser [closed]

I just tried Chromium, which in its fast rendering and lightweight feel really appealed to me, so I considered switching. But looking at the project, I see that the Chromium project has strong links ...
0
votes
0answers
19 views

What are the security risks of making an app closed-source? [duplicate]

What are the security risks, if any, of making an app closed-source vs. open-source?
1
vote
0answers
57 views

Does DSR or L3DSR allow for a secret back channel between hosts? How can it be stopped?

This Serverfault question describes how a load balancer can embed data that will be round-tripped back to the originating node. Traditionally DSR can't exceed the boundaries of a broadcast domain. ...
1
vote
1answer
396 views

Firmware backdoor in external hard drive without a specific driver possible?

I heard that researchers found some external hard drive with embedded backdoor (into the firmware). I don't know if an external hard drive backdoor can be executed only by using a generic driver. ...
4
votes
3answers
3k views

Is Bitlocker trustworthy?

My question isn't about whether or not the encryption on Bitlocker works, but whether or not there has been any security audits about potential backdoors Microsoft may have installed. I don't have a ...
1
vote
0answers
439 views

How to know if I have been infected with trojan horse through Fritz Box exploit?

This is my first post on here, and the first time I put serious thoughts into network security. I think I have an serious security issue in my network. It seems like someone somehow injected a ...