Questions tagged [backdoor]

A backdoor is a method of bypassing normal authentication, securing illegal remote access to a computer while attempting to remain undetected.

Filter by
Sorted by
Tagged with
1
vote
2answers
289 views

Encryption software trustworthy?

If you are downloading and using an encryption software, e. g. Veracrypt or Diskcryptor, how do you know if this software is not a fake one? Backdoored or other security holes? Assuming that such ...
1
vote
1answer
251 views

Malware, RAT's and backdoors

Is there any kind of malware or RAT that cannot be gotten rid of by a thorough wipe with DBAN, flashing the BIOS and re-installing OS? More importantly, if you've been ratted and did all these things, ...
1
vote
1answer
550 views

backdoor php trojan still dangerous on my local machine?

I recently removed and fixed a lot of backdoor trojans in some files in one of my servers, and I copied those files to my local computer. But the issue is that now that I run the virus scanner on my ...
1
vote
2answers
2k views

Running tails on a corporate computer

Is it safe to run TAILS on a corporate computer? I mean a corporate computer that has hardware cryptography and probably some backdoors; and, by safe, I mean that nobody will be able to recover what ...
1
vote
3answers
403 views

In a company is it good to have a back door account?

Having a backdoor account (that is a username/password that can login in to an administrative account on all machines) can be very useful for IT staff. However, some believe it's a security breach. ...
1
vote
1answer
269 views

Is there a “no-spy, no-backdoors standard” for telecom hardware manufacturing?

The BBC News article Huawei says willing to sign 'no-spy' agreements reports the following: Huawei has also said it is independent from the Chinese government, but some countries have blocked it ...
1
vote
1answer
274 views

Can malware attach itself to user files?

Recently my AV has been detecting Trojan backdoors, Rootkits and Worms quite often. Some go unnoticed (I've checked suspicious files in VirusTotal a few times and they indeed turned out to be malware ...
1
vote
1answer
70 views

Rightscorp Scaleable Copyright - How would they avoid making this a massive security risk?

I recently read an article about a new copyright protection system that RightsCorp America is trying to get ISPs to help implement. From the Article: “Single notices can be read and bypassed ...
1
vote
1answer
144 views

Could the FBI dump the drive contents of an iOS device, and then somehow run Virtual CPU's with different keys?

This seems like the most logical answer that would prevent wiping the data. Dump Contents of Drive. SetUp Virtual CPU with different keys. Use existing firmware and hardware for ios x Profit Is ...
1
vote
1answer
744 views

ShadowHammer: Limited to Windows?

I've been reading about ShadowHammer over the last couple of days: Kaspersky researchers estimated half a million Windows machines received the malicious backdoor via ASUS' update server. But the ...
1
vote
1answer
114 views

Where can I report a program to be reviewed for security vulnerabilities and privacy issues?

After looking for software to store information, I found a program that caught my attention instantly. I purchased a license but after a while, I realized that the program had a big vulnerability. On ...
1
vote
1answer
144 views

U2F devices: backdoors possible?

Following the recent post at ZDNet on Google Titan devices designed and manufactured by a Chinese vendor and potentially prone to built-in backdoors: is it even theoretically possible to inject a ...
1
vote
1answer
545 views

Possible to backdoor a Netcat Listener?

I have been getting into backdooring computers and servers using either specialized software or some malicious command that spawns a backdoor on the target machine, then pipes the terminal to my ...
1
vote
1answer
435 views

is it possible to avoid hardware backdoors? [closed]

Hi I have recently started to learn about data protection. After the snowden events it seems pretty certain that intelligence agency may have planted backdoors in hardware. I have got a few questions ...
1
vote
1answer
5k views

What kind of backdoor can be made after hacking wi-fi? [closed]

I'm interested to know if A hacks B's wifi password, what can A do to gain persistent access to the router even after B changes the wifi password? Secondly, how can we detect the backdoor and patch it?...
1
vote
1answer
1k views

Execute a remote PHP shell which is inside a file I dont have permission to access

Hi need some help here. I am trying to exploit an unsanitized file upload with a PHP backdoor. Basically the file uploads successfully and I can see my backdoor inside the web applications /images/ ...
1
vote
1answer
571 views

Metasploit: Executables are not working after Reverse Shell

I tried connecting to a windows box and create a reverse shell back to my Kali Linux machine. Reverse shell is created and I get the meterpreter prompt. Commands Used: Payload: windows/shell/...
1
vote
2answers
630 views

Outgoing traffic block - Best policy

I'm concerned that in my network some background applications / virus can use my internet connection as malicious backdoor, and then I'm in trouble (i.e. authorities can think that one of my pc has ...
1
vote
1answer
439 views

Firmware backdoor in external hard drive without a specific driver possible?

I heard that researchers found some external hard drive with embedded backdoor (into the firmware). I don't know if an external hard drive backdoor can be executed only by using a generic driver. ...
1
vote
2answers
1k views

Msfpayload: Exe within an exe?

So you can use msfpayload or msfvenom to add a payload to an existing exe, most people online seem to use reverse shell. But I was wondering if you could include a custom exe of your own design as a ...
1
vote
1answer
74 views

Backdooring PE binary compiled with ASLR

I'm practicing backdooring PE binary compiled with ASLR in a WOW64 environment. The approach is pretty straightforward and basically is something like this: Find code cave and a hijacking point. In ...
1
vote
1answer
73 views

What guidelines can I follow to know if I can trust a software editor? [closed]

At work or at home, I often find some useful piece of software. Sometimes I may find it on a forum, mentioned on a video, or by talking to a colleague. But how do I know if the editor of the software ...
1
vote
1answer
114 views

Sending a executable that use LD_PRELOAD to modify fopen and create a backdoor

I follow the article Hooking libc using Go shared libraries to create the following code: package main import ( "C" "bufio" "log" "net" "net/textproto" "os/exec" "...
1
vote
0answers
138 views

Flash Descriptor write-protection defaults

According to Intel in this article, to exploit Intel SA 00086 an attacker needs physical access if Flash Descriptor write protections are enabled. I assembled my computer myself, and it doesn't look ...
1
vote
0answers
55 views

Secure deployment of xpdf on production

I have an application, which needs the functionality of converting PDF documents to text documents, and then parse them to retrieve information. I am using xpdf utility pdftotext to achieve that. I ...
1
vote
0answers
1k views

Is there a list of new laptops without Intel Management Engine built in? [closed]

Is there a list of new laptops without Intel Management Engine built in? I'm reading about Intel Management Engine as being a secret backdoor for hackers. (See, https://www.eff.org/deeplinks/2017/05/...
1
vote
0answers
217 views

Using .data segment for Code Execution with DEP Enable

Sorry if this seems like a silly question. I am working on practicing backdooring applications for a cert I am working on, and one of the methods is to use existing code caves. The issue is, these ...
1
vote
0answers
336 views

Was double pulsar's source code ever released?

Double Pulsar I can only see a binary at this address: https://github.com/x0rz/EQGRP_Lost_in_Translation News articles seem to not discriminate between the source code and the binary
1
vote
1answer
968 views

Unable to execute PHP shell

I have uploaded a simple PHP shell onto a server, but I get one of the following error messages when I am trying to execute a code: Warning: shell_exec() Unable to execute 'ls' in .... on line 2 ...
1
vote
0answers
59 views

Does DSR or L3DSR allow for a secret back channel between hosts? How can it be stopped?

This Serverfault question describes how a load balancer can embed data that will be round-tripped back to the originating node. Traditionally DSR can't exceed the boundaries of a broadcast domain. ...
1
vote
0answers
458 views

How to know if I have been infected with trojan horse through Fritz Box exploit?

This is my first post on here, and the first time I put serious thoughts into network security. I think I have an serious security issue in my network. It seems like someone somehow injected a ...
1
vote
0answers
738 views

from weevely shell to root? OSCP [closed]

I'm doing OSCP, and have been on this problem for a while. I need some guidance on this. I manage to get a weevely shell to a lab machine via SQL injection. The OS is CentOS 5.4 The user is "apache"...
1
vote
0answers
82 views

Local lan drive by download

Basically, I'm testing a local network, on which I'm able to use ARP spoofing. I now want to try and infect one of the Windows boxes on the network with a backdoor. I could inject an iframe into their ...
1
vote
4answers
364 views

How to approach ruling out that past developers are backdooring my website?

My client says that one of his old developers found some code that allowed a past developer to access the site in certain ways. She wrote code to allow herself to log in to certain restricted areas ...
0
votes
2answers
228 views

Would one consider the breaking of Enigma in WWII to be an early example of a backdoor?

In a recent discussion re Tory Minister and British Home Secretary Amber Rudd's insistence that WhatsApp install a backdoor for government monitoring of encrypted data, I brought up Enigma as an early ...
0
votes
2answers
1k views

Password protection for NetCat shell?

As a pentester, I often use NetCat, and its encrypted counterpart CryptCat. However, even CryptCat only encrypts the traffic. I'm looking for a way to keep unauthorized users from gaining access to ...
0
votes
3answers
334 views

Can OS protect us from backdoored CPU? [closed]

I was wondering if O.S. can act in such a way to hide from CPU what it is doing? I know that everything is computed only in CPU, but O.S. decides what that is, and keeps track of file system, etc. For ...
0
votes
1answer
324 views

Do vendors put backdoors on network devices?

There are several articles that says that vendors plant backdoors on network devices intentionally, such as this one. They found backdoors that were made by the vendors. Also, I read somewhere else ...
0
votes
1answer
3k views

How secure (about spyware/backdoor in it) is LibreOffice? Should i start using OpenOffice?

I'm using LibreOffice now, and I'm encrypting files of LO Write with VeraCrypt that have very personal content and I want to keep it secret. But I read about LO send to his web SO MUCH information, ...
0
votes
1answer
294 views

Is ist possible to emed a backdoor in a picture? [duplicate]

Is it possible to infect a picture with a backdoor? And what can I google for that?
0
votes
2answers
767 views

can a backdoor executable be used on an occupied port?

Suppose I am doing a penetration test on a network that has a firewall that blocks all ports except 80, 110, and 443. I want to use a metasploit reverse-TCP backdoor executable written in msfpayload ...
0
votes
1answer
756 views

proftpd backdoor not backdoored

I wanted to practice exploiting system using proftpd backdoor. I use the exploit proftpd_133c_backdoor and the payload reverse_perl.I learned on how to exploit using this link, https://www.youtube.com/...
0
votes
2answers
1k views

Hardware / firmware backdoors : TPM as a security risk - How to turn it into security advantage?

--- Question: What are the exact risks of using TPM 2.0 or owning this integrated chip? In what circumstances? What are the solutions to minimize risks? Details: My primary goal was to try to find ...
0
votes
3answers
1k views

Reverse shell would expose attacker?

Could you guys help me understand reverse shells better? Would an attacker be exposed when using a reverse shell in a real attack? For example, if I have a reverse shell on a Linux VM that connects ...
0
votes
1answer
518 views

Find php file with certain word in it and disable php

I have multiple VPS with at least thousands of accounts in them. My clients' websites are hacked and sending spam emails. I checked the log and found out two types of scritps type1: <?php $d79="...
0
votes
1answer
750 views

Are there approaches/mechanism to detect hardware backdoors?

Background: A nice Chinese based manufacturer (AllWinner Technology Co.Ltd) produces very useful SoC used boards that often claim to be open source hardware. Question: If need be is there by way of ...
0
votes
1answer
296 views

Is INTEL-SA-00075 Detection and Mitigation Tool enough to mitigate IntelME attacks

Is that tool enough to mitigate/protect againts IntelME vulnerability? https://downloadcenter.intel.com/download/26755?v=t If it's not enough I more I can do to protect againts IntelME attacks ?
0
votes
1answer
365 views

PHP Backdoor on live server [duplicate]

Suddenly one of our Wordpress websites started sending spam emails and it was blacklisted on MXToolBox. So with the server support I scaned the files and found a strange file called timer.php ...
0
votes
1answer
174 views

What is the meaning of back channel or backdoor in a program?

What is backdoor and why is it created in first place if it creates additional unnecessary risk? You might want to take up an example to explain it in detail.
0
votes
1answer
62 views

How to check if any host trying to connect back to the my executable(application)?

Last month i have downloaded some hacking tools!!! After that i'm having a strong feeling that some host trying to connect back to the application(don't know whether i'm been monitored or not). Is ...