Username: 
Password: 
Restrict session to IP 

I got a Backdoor instaled while in the server  Go to the Training: Warchall - The Beginning challenge

1 2
Global Rank: 5670
Totalscore: 2581
Posts: 3
Thanks: 0
UpVotes: 0
Registered: 12y 70d
Last Seen: 12y 64d
The User is Offline
I got a Backdoor instaled while in the server
Google/translate0Thank You!0Good Post!0Bad Post! link
I tried to play this challenge, logged in to the server, and suddenly my computer started having strange behaviour. I made a scan and it found a backdoor

Backdoor:Win32/Sdbot.gen

I demand an explanation.
Global Rank: 228
Totalscore: 94481
Posts: 1689
Thanks: 1363
UpVotes: 925
Registered: 16y 333d




Last Seen: 7d 10h
The User is Offline
RE: I got a Backdoor instaled while in the server
Google/translate0Thank You!0Good Post!0Bad Post! link
I highly doubt the sshd on the box is compromised and delivers exploits for putty (assuming you use putty).
I'd more guess your malware was already installed and got active when you connected.

I recommend you re-install your operating system.
If you like you can try to reproduce the infection.

Greetings
gizmore
The geeks shall inherit the properties and methods of object earth.
Global Rank: 228
Totalscore: 94481
Posts: 1689
Thanks: 1363
UpVotes: 925
Registered: 16y 333d




Last Seen: 7d 10h
The User is Offline
RE: I got a Backdoor instaled while in the server
Google/translate0Thank You!1Good Post!0Bad Post! link
Someone just recommended to check where you got your ssh client from.
Maybe that's the malware Smile
The geeks shall inherit the properties and methods of object earth.
Totalscore: 316916
Posts: 98
Thanks: 106
UpVotes: 105
Registered: 15y 181d







Last Seen: 115d 17h
The User is Offline
RE: I got a Backdoor instaled while in the server
Google/translate1Thank You!4Good Post!0Bad Post! link
I feel the biggest problem here is use of windows
https://www.revolutionelite.co.uk/
Global Rank: 5670
Totalscore: 2581
Posts: 3
Thanks: 0
UpVotes: 0
Registered: 12y 70d
Last Seen: 12y 64d
The User is Offline
RE: I got a Backdoor instaled while in the server
Google/translate0Thank You!0Good Post!0Bad Post! link
I was using SSH Secure Shell. And the malware was installed day 8, when I connected to the server.
Global Rank: 30101
Totalscore: 0
Posts: 265
Thanks: 245
UpVotes: 182
Registered: 25y 51d
Last Seen: 0s
The User is Online
RE: I got a Backdoor instaled while in the server
Google/translate0Thank You!0Good Post!0Bad Post! link
Or dloser was at it...again Drool
Global Rank: 1
Totalscore: 758693
Posts: 437
Thanks: 497
UpVotes: 470
Registered: 15y 171d












The User is Offline
RE: I got a Backdoor instaled while in the server
Google/translate0Thank You!0Good Post!0Bad Post! link
LOL! I just reversed the polarity of his connection such that I could upload to his computer. n00bs.
Global Rank: 5670
Totalscore: 2581
Posts: 3
Thanks: 0
UpVotes: 0
Registered: 12y 70d
Last Seen: 12y 64d
The User is Offline
RE: I got a Backdoor instaled while in the server
Google/translate0Thank You!0Good Post!0Bad Post! link
Yeah. Perhaps you would be able to do that if the backdoor was still installed.
Global Rank: 1
Totalscore: 758693
Posts: 437
Thanks: 497
UpVotes: 470
Registered: 15y 171d












The User is Offline
RE: I got a Backdoor instaled while in the server
Google/translate0Thank You!0Good Post!0Bad Post! link
Why install one if you can install two for the double the price?
Global Rank: 30101
Totalscore: 0
Posts: 265
Thanks: 245
UpVotes: 182
Registered: 25y 51d
Last Seen: 1s
The User is Online
RE: I got a Backdoor instaled while in the server
Google/translate0Thank You!0Good Post!0Bad Post! link
Obviously the attacker is one of those above as he already removed the backdoor. Sad
1 2
Redknee, mihajatiana, tunelko, silenttrack, n0tHappy, nonfungiblesecurity, quangntenemy, TheHiveMind, Z, balicocat, Ge0, samuraiblanco, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, SwolloW, dangarbri, csuquvq have subscribed to this thread and receive emails on new posts.
1 people are watching the thread at the moment.
This thread has been viewed 17824 times.