Concerned About Your Business Cyber Security?

(877) 321--7374

Another webshell, another backdoor!, (Thu, Sep 14th)

I’m still busy to follow how webshells are evolving… I recently found another backdoor in another webshell called “cor0.id”. The best place to find webshells remind pastebin.com[1]. When I’m testing a webshell, I copy it in a VM located on a “wild Internet” VLAN in my home lab with, amongst other controls, full packet capture enabled. This way, I can spot immediately is the VM is trying to “phone home” to some external hosts. This was the case this time!

Ready For ASuperheroI.T. Solution?

Real Time Web Analytics