mrradio.kr GemForgeLabs Hack The Web HackMyVM

pwn.college PromptRiddle PyDéfis CryptoHack

sh4d0wp4ws plus frootgummi xen-ops

jexi Snauser VodkaVladi ali1

Guest(x10), andthewinneris

SignupHide Sidebar

Statistics

Top 10 Players

Last 20 Activities

Online within 1d

WeChall->Challenges->Challenge: Training: Warchall - The Beginning

I got a Backdoor instaled while in the server Go to the Training: Warchall - The Beginning challenge

Problems whit 2 and 3warchall chapter 1

1 2

__Unknown Country

Global Rank: 5968

Totalscore: 2574

Posts: 3

Thanks: 0

UpVotes: 0

Registered: 13y 361d

Last Seen: 13y 355d

The User is Offline

I got a Backdoor instaled while in the server
Nov 10, 2012 - 13:05:39 (13y 357d) Google/translate0Thank You!0Good Post!0Bad Post! link

I tried to play this challenge, logged in to the server, and suddenly my computer started having strange behaviour. I made a scan and it found a backdoor

Backdoor:Win32/Sdbot.gen

I demand an explanation.

Global Rank: 198

Totalscore: 110647

Posts: 1795

Thanks: 1390

UpVotes: 961

Registered: 18y 258d

Last Seen: 65d 23m

The User is Offline

Send EMail to gizmore

RE: I got a Backdoor instaled while in the server
Nov 10, 2012 - 13:38:39 (13y 357d) Google/translate0Thank You!0Good Post!0Bad Post! link

I highly doubt the sshd on the box is compromised and delivers exploits for putty (assuming you use putty).
I'd more guess your malware was already installed and got active when you connected.

I recommend you re-install your operating system.
If you like you can try to reproduce the infection.

Greetings
gizmore

The geeks shall inherit the properties and methods of object earth.

Global Rank: 198

Totalscore: 110647

Posts: 1795

Thanks: 1390

UpVotes: 961

Registered: 18y 258d

Last Seen: 65d 23m

The User is Offline

Send EMail to gizmore

RE: I got a Backdoor instaled while in the server
Nov 10, 2012 - 13:44:47 (13y 357d) Google/translate0Thank You!1Good Post!0Bad Post! link

Someone just recommended to check where you got your ssh client from.
Maybe that's the malware Smile

Smile

The geeks shall inherit the properties and methods of object earth.

Totalscore: 314983

Posts: 98

Thanks: 107

UpVotes: 106

Registered: 17y 106d

Last Seen: 305d 3h

The User is Offline

RE: I got a Backdoor instaled while in the server
Nov 10, 2012 - 13:45:57 (13y 357d) Google/translate1Thank You!4Good Post!0Bad Post! link

I feel the biggest problem here is use of windows

https://www.revolutionelite.co.uk/

__Unknown Country

Global Rank: 5968

Totalscore: 2574

Posts: 3

Thanks: 0

UpVotes: 0

Registered: 13y 361d

Last Seen: 13y 355d

The User is Offline

RE: I got a Backdoor instaled while in the server
Nov 10, 2012 - 13:49:21 (13y 357d) Google/translate0Thank You!0Good Post!0Bad Post! link

I was using SSH Secure Shell. And the malware was installed day 8, when I connected to the server.

__Unknown Country

Global Rank: 31417

Totalscore: 0

Posts: 275

Thanks: 250

UpVotes: 189

Registered: 26y 341d

Last Seen: 0s

The User is Online

RE: I got a Backdoor instaled while in the server
Nov 10, 2012 - 13:49:47 (13y 357d) Google/translate0Thank You!0Good Post!0Bad Post! link

Or dloser was at it...again Drool

Drool

__Unknown Country

Global Rank: 2

Totalscore: 747640

Posts: 441

Thanks: 501

UpVotes: 478

Registered: 17y 97d

The User is Offline

RE: I got a Backdoor instaled while in the server
Nov 10, 2012 - 13:55:11 (13y 357d) Google/translate0Thank You!0Good Post!0Bad Post! link

LOL! I just reversed the polarity of his connection such that I could upload to his computer. n00bs.

__Unknown Country

Global Rank: 5968

Totalscore: 2574

Posts: 3

Thanks: 0

UpVotes: 0

Registered: 13y 361d

Last Seen: 13y 355d

The User is Offline

RE: I got a Backdoor instaled while in the server
Nov 10, 2012 - 13:57:31 (13y 357d) Google/translate0Thank You!0Good Post!0Bad Post! link

Yeah. Perhaps you would be able to do that if the backdoor was still installed.

__Unknown Country

Global Rank: 2

Totalscore: 747640

Posts: 441

Thanks: 501

UpVotes: 478

Registered: 17y 97d

The User is Offline

RE: I got a Backdoor instaled while in the server
Nov 10, 2012 - 14:01:01 (13y 357d) Google/translate0Thank You!0Good Post!0Bad Post! link

Why install one if you can install two for the double the price?

__Unknown Country

Global Rank: 31417

Totalscore: 0

Posts: 275

Thanks: 250

UpVotes: 189

Registered: 26y 341d

Last Seen: 0s

The User is Online

RE: I got a Backdoor instaled while in the server
Nov 10, 2012 - 14:02:34 (13y 357d) Google/translate0Thank You!0Good Post!0Bad Post! link

Obviously the attacker is one of those above as he already removed the backdoor. Sad

Sad

1 2

Redknee, mihajatiana, silenttrack, n0tHappy, nonfungiblesecurity, quangntenemy, TheHiveMind, Z, balicocat, Ge0, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, fpombal, csuquvq have subscribed to this thread and receive emails on new posts.
1 people are watching the thread at the moment.
This thread has been viewed 18791 times.

PHP Fatal Error(1): Constant E_STRICT is deprecated since 8.4, the error level was removed in www/protected/config.php line 6
Backtrace starts in [unknown file] line ?.
GWF_Debug::shutdown_function() core/inc/util/GWF_Debug.php line 109.
GWF_Debug::error_handler().... core/inc/util/GWF_Debug.php line 180.