The whole thing is a backdoor. Backdoor in a backdoor? Surprise! Of course it's backdoors all the way down ;) But of course, script kiddies aren't particularly

The whole thing is a backdoor. Backdoor in a backdoor? Surprise! Of course it's backdoors all the way down ;) But of course, script kiddies aren't particularly good at securing the servers they pwned, are they? [1] A couple of months ago, I wrote QADE [2] for fun, a "quick and dirty" PHP-based text editor and webshell for editing files and running commands remotely. I deliberately failed to implement any authentication-related feature, because I didn't want to give an illusion of security. A secure webshell is an oxymoron. [1] https://blog.avast.com/2014/06/09/are-hackers-passwords-stronger-than-regular-passwords/ https://blog.avast.com/2014/06/09/are-hackers-passwords-stro... [2] https://github.com/kijin/qade https://github.com/kijin/qade