[SIM-3187190]

I'm learning how a PHP RAT works so I can expand my knowledge. Does the client check a database every x seconds for a command or do they utilise websockets for nearly instantaneous response times? If someone could give a breakdown of how this process happens it would be appreciated, thanks.

[SIM-3187190]

Thanks for the fast response. How often do they usually check the database if you don't mind me asking?

[SIM-3187190]

Depends..

There isn't a set time. Most do something like 5 minutes.

Any good developer would be able to make it dynamic based on load though.

Thankyou for the help.

[Vuln]

WebSocket (e.g. Ratchet or Socket.IO) RATs are relatively uncommon, but they do definitely exist. How they communicate is entirely up to you.

[SIM-3187190]

WebSocket (e.g. Ratchet or Socket.IO) RATs are relatively uncommon, but they do definitely exist. How they communicate is entirely up to you.

I thought they were fairly common but then again, I only know a few communication methods. Thanks.

[SysAdmin]

I thought they were fairly common but then again, I only know a few communication methods. Thanks.

Instead of a PHP RAT, which is seemingly rare, you can use a PHP Reverse Shell

http://pentestmonkey.net/tools/web-shell...erse-shell

[SIM-3187190]

Instead of a PHP RAT, which is seemingly rare, you can use a PHP Reverse Shell

http://pentestmonkey.net/tools/web-shell...erse-shell

I'm going to have to check this out, it looks quite interesting. Thanks.

[SysAdmin]

I'm going to have to check this out, it looks quite interesting. Thanks.

Well, it will require you to have access to a root directory's .php file, in turn, you'll need an admin account, which is essentially easy to get after some SQL Injection or other forms of attack. From the Reverse Shell you can then try to Escalate Privilages on the web server if you haven't done so yet.

[SIM-3187190]

Well, it will require you to have access to a root directory's .php file, in turn, you'll need an admin account, which is essentially easy to get after some SQL Injection or other forms of attack. From the Reverse Shell you can then try to Escalate Privilages on the web server if you haven't done so yet.

At the moment I am trying to break into my own website to patch loopholes and expand knowledge on security. No SQL injection I am capable of performing worked but I found an exploit in my image uploader. With this I uploaded my shell (I used metasploit instead of netcat) and got a way in. Thanks for the help. My host removed the file within a few minutes, so I guess that is good. I'm sure there will be more vulnerabilities but they shall be found in the near future (hopefully). Thanks again.