Re: Checking out backdoor shells

[Kai <kai () rhynn net>]

 Dear Mr. MustLive#2,

 hello and welcome to the full-disclosure mailing list.

 Faithfully yours


 On Fri, 18 May 2012 15:50:04 -0500, Adam Behnke wrote:
> A backdoor shell can be a PHP, ASP, JSP, etc. piece of code which can 
> be
> uploaded on a site to gain or retain access and some privileges on a
> website. Once uploaded, it allows the attacker to execute commands 
> through
> the shell_exec () function, upload/delete/modify/download files from 
> the web
> server, and many more. For defacers, it allows them to navigate 
> easily to
> the directory of the public_html or /var/www and modify the index of 
> the
> page.
 

-- 
 Cheers,

 Kai

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/