We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [backdoor]

A backdoor is a method of bypassing normal authentication, securing illegal remote access to a computer while attempting to remain undetected.

Filter by
Sorted by
Tagged with
3
votes
2answers
2k views

Would IT Security professionel people notice a backdoor in Windows 7 or SBS 2011 implemented by Microsoft? [closed]

I guess you have heard of Edward Snowden. Papers around the world published that the NSA invests much time, money and effort for a »full take« of the communication around the world. Given this, it ...
7
votes
3answers
9k views

backdoors in hardware (ie. intel/amd cpu) possible? [closed]

There are several reports about hardware based attacks on IT-security as for instance those here: http://wccftech.com/intel-possibly-amd-chips-permanent-backdoors-planted-nsa/ http://www.afr.com/p/...
2
votes
2answers
683 views

Can AES-256 encrypted data be changed?

I have a file that supposedly contains AES-256 encrypted data. The file was created using a proprietary program that claims to use AES-256. I have tested decrypting the file with an open source ...
2
votes
1answer
7k views

How to check if your computer has a backdoor installed on it? [closed]

Just some time ago I had this unusual popup from Malwarebytes Anti-Malware (MBAM): I did a quick Google of the IP address and found this thread where the OP is complaining of MBAM blocking svchost....
2
votes
2answers
134 views

Virus Removal Boot Disks — a few questions

I'm new to working with and using a backdoor/virus with a boot disk. Can they be mounted to a USB drive? What options are out there and what should I look for in one? Are they practical? Do they ...
6
votes
2answers
2k views

Backdoors after SQL injection?

I just found an injection vulnerability on a live site of a client. It looks like this: $sql = "SELECT * FROM users_dl WHERE Username = '" . $Uname . "' AND Password = '" . $Pword . "'"; I ...
4
votes
2answers
918 views

How can I find the malicious/backdoor codes without knowing the last modified date?

Last night my website got hacked and attacker edited the main index.php. I was wondering even he edited that file, the last modified date did not change. so I just worry if he would put the backdoor ...
-11
votes
1answer
615 views

Hacker problems - They stole my backups [closed]

I am facing an issue where hackers are seeking to compromise two of my servers. They succeeded in wiping out both and stealing my backups. I had off-site backups and I am back online. Nonetheless, I ...
13
votes
5answers
39k views

How can I detect backdoors?

I have a machine running Mac OS X and I suspect there may be a backdoor installed. I know that I could take it to a professional security firm for analysis, or nuke it from orbit, but I'm interested ...
2
votes
2answers
308 views

How to find injected code in SQL?

Recently one of my sites was hacked. The hacker used SQL injection to compromise the security. After getting SQL access he injected code in many places in the database. I cleaned up many of them. But ...
1
vote
5answers
2k views

Site backdoor & eval()

I'm running a Joomla 1.7 site which was hacked today. Below script did the hack. eval((base64_decode("...
91
votes
7answers
5k views

How do I know a piece of software only does what the author claims?

Without being a programmer or a computer expert, how can I know if a particular program or any piece of software in general doesn't have hidden unwanted functions compromising privacy and security?
4
votes
2answers
2k views

I found what, I believe, is a backdoor in my home router, what should I do?

My country doesn't have any laws regarding this subject (Brazil). And I don't want to disclose it to the police, it's more likely they will just keep it to themselves. What should I do?
0
votes
2answers
771 views

can a backdoor executable be used on an occupied port?

Suppose I am doing a penetration test on a network that has a firewall that blocks all ports except 80, 110, and 443. I want to use a metasploit reverse-TCP backdoor executable written in msfpayload ...
5
votes
6answers
1k views

Could a computer program be used to automate testing for trapdoors?

Could a computer program given the source or object version of another program be used to automate testing for trapdoors/backdoors?
3
votes
1answer
902 views

Backdoor.ASP.Ace.C keeps showing up and being removed by f-secure

Backdoor.ASP.Ace.C is being found and removed from: C:\Users[username]\AppData\Local\Temp[randomstring] We have recently found some malicious aspx files on our IIS server that we have studied and ...
3
votes
3answers
4k views

Disable Perl for some/most Linux users?

One of my server's web accounts got hacked a couple of times. Each time someone downloaded a Perl script via some phpBB forum and used the Perl script to do whatever they wanted to do (mostly connect ...
3
votes
2answers
718 views

How do hard-wired backdoors work?

How can a vulnerability be hardwired? Just read this article, which got me thinking. Is there simply vulnerable software running on a piece of hardware that is read/write only or..?
353
votes
22answers
300k views

I found that the company I work for is putting a backdoor into mobile phones

I have found out recently that the remote assistant software that we put in a smartphone we sell can be activated by us without user approval. We are not using this option, and it is probably there ...