Questions tagged [backdoor]

A backdoor is a method of bypassing normal authentication, securing illegal remote access to a computer while attempting to remain undetected.

16 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
4
votes
0answers
89 views

Security implications of using unfused U2F token

I noticed that both of the Feitian USB/NFC U2F Security Keys I purchased on Amazon a few years ago are unfused. This means that the pre-personalization step was partially performed but not completed ...
1
vote
0answers
136 views

Is it possible to debunk Intel Management Engine conspiracy theories using a data usage monitor device?

If there would be any backdoor in recent Intel CPU's, then it should send and receive data secretly. Isn't it possible to easily debunk this conspiracy theory by implementing a third physical device ...
1
vote
1answer
174 views

Backdooring PE binary compiled with ASLR

I'm practicing backdooring PE binary compiled with ASLR in a WOW64 environment. The approach is pretty straightforward and basically is something like this: Find code cave and a hijacking point. In ...
1
vote
0answers
159 views

Flash Descriptor write-protection defaults

According to Intel in this article, to exploit Intel SA 00086 an attacker needs physical access if Flash Descriptor write protections are enabled. I assembled my computer myself, and it doesn't look ...
1
vote
0answers
78 views

Secure deployment of xpdf on production

I have an application, which needs the functionality of converting PDF documents to text documents, and then parse them to retrieve information. I am using xpdf utility pdftotext to achieve that. I ...
1
vote
0answers
288 views

Using .data segment for Code Execution with DEP Enable

Sorry if this seems like a silly question. I am working on practicing backdooring applications for a cert I am working on, and one of the methods is to use existing code caves. The issue is, these ...
1
vote
0answers
402 views

Was double pulsar's source code ever released?

Double Pulsar I can only see a binary at this address: https://github.com/x0rz/EQGRP_Lost_in_Translation News articles seem to not discriminate between the source code and the binary
1
vote
0answers
62 views

Does DSR or L3DSR allow for a secret back channel between hosts? How can it be stopped?

This Serverfault question describes how a load balancer can embed data that will be round-tripped back to the originating node. Traditionally DSR can't exceed the boundaries of a broadcast domain. ...
1
vote
0answers
550 views

How to know if I have been infected with trojan horse through Fritz Box exploit?

This is my first post on here, and the first time I put serious thoughts into network security. I think I have an serious security issue in my network. It seems like someone somehow injected a ...
1
vote
0answers
84 views

Local lan drive by download

Basically, I'm testing a local network, on which I'm able to use ARP spoofing. I now want to try and infect one of the Windows boxes on the network with a backdoor. I could inject an iframe into their ...
0
votes
0answers
94 views

How to add session cookie in weevely?

I am pentesting a website and I was successful in uploading a php backdoor and finding the path of the backdoor. The only issue is that in order to gain access to the uploaded file I need to be logged ...
0
votes
0answers
213 views

msfvenom: backdoored apk

I am using msfvenom to backdoor an Android apk. It is supposed that msfvenom adds extra permissions to original AndroidManifest: [*] Poisoning the manifest with meterpreter permissions.. [*] Adding &...
0
votes
0answers
1k views

How to make metasploit backdoor persistent in Android?

I created a payload with msfvenom and installed it on Android smartphone, but after a reboot or long time without use, it stops working, because the OS kills the process. Is there any way to ...
0
votes
0answers
3k views

Meterpreter is failing to load any extension except the core commands

[*] Starting persistent handler(s)... msf5 > use exploit/multi/handler msf5 exploit(multi/handler) > set PAYLOAD windows/meterpreter/reverse_https PAYLOAD => windows/meterpreter/reverse_https ...
0
votes
1answer
1k views

Injecting meterpreter/reverse_tcp into apache2 with msfvenom results in seg fault of apache2

I've been trying to use msfvenom with the linux/x86/meterpreter/reverse_tcp payload and an apache2 binary. My intent is to create a tainted version of apache2 to establish a persistent backdoor on the ...
-1
votes
1answer
688 views

How to find out which application runs behind port 31337?

I found an open port on a "Kartina Quattro" (https://www.kartina.tv/article/247-kartina-quattro). It's a device for watching russian TV channels. The port number is 31337 and the Service is called ...