3 ms·
He's joking mostly. He uploaded a webshell through the very poorly designed system that was in use. A webshell just runs whatever command it's given on a the ma
by strictnein 8y ago
He's joking mostly. He uploaded a webshell through the very poorly designed system that was in use. A webshell just runs whatever command it's given on a the machine its located and returns the results.
A nodejs based webshell is like 5 lines of code.
edit: imagine a URL like this:
http://yourtarget.example.com/webshell?cmd=whoami http://yourtarget.example.com/webshell?cmd=whoami
And that runs "whoami" on the target machine and returns the results.
- flyGuyOnTheSly 8y agoGotya... So why would anyone assume that these are state sponsored hacker servers that were infiltrated then?
- zoopark 8y agoRead the Kaspersky report. https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2018/05/03114450/ZooPark_for_public_final_edit.pdf https://media.kasperskycontenthub.com/wp-content/uploads/sit...