+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: WSO2 shell | Educational Purposes (/showthread.php?tid=4415456)
WSO2 shell | Educational Purposes - Light Yagami - Aug 26, 2014
Removed for security purpose
Hope you all enjoy ^^
* - Th3PonyWizard - Aug 26, 2014
I'd recommend everybody to always review manually any PHP shells they're using. Nothing is more difficult than spotting a backdoor in these codes :\
* - Light Yagami - Aug 26, 2014
(Aug 26, 2014 06:57 AM)Sonder Wrote: I'd recommend everybody to always review manually any PHP shells they're using. Nothing is more difficult than spotting a backdoor in these codes :\
I will also check these files, thanks for writing this!
* - hoer- - Aug 26, 2014
File is corrupted! (I wanted to fined teh backdoor)
I can see the start and they have used
Code
\x65\x76\x61\x6C\x28\x67\x7A\x69\x6E\x66\x6C\x61\x74\x65\x28\x62\x61\x73\x65\x36\x34\x5F\x64\x65\x63\x6F\x64\x65\x28Code
eval(gzinflate(base64_decode(Any attempt to hide code so much would suggest it's backdoor'd.
* - Light Yagami - Aug 26, 2014
(Aug 26, 2014 08:30 AM)hoer- Wrote: File is corrupted! (I wanted to fined teh backdoor)
I can see the start and they have used
which isCode\x65\x76\x61\x6C\x28\x67\x7A\x69\x6E\x66\x6C\x61\x74\x65\x28\x62\x61\x73\x65\x36\x34\x5F\x64\x65\x63\x6F\x64\x65\x28
Codeeval(gzinflate(base64_decode(
Any attempt to hide code so much would suggest it's backdoor'd.
I am sorry, I will remove this post