A back door is a malware type that negates normal authentication procedures to access the system as
a result.
Remote access is granted to various resources within an operating system within an application within
a database within a file server etc. thus giving perpetrator the ability to remotely issue commands
and even update the malware itself.
Backdoor installation is achieved by taking advantage of vulnerable components available on the remote
system.
The detection of these back doors is most of the times difficult.
Web server back doors are used for a number of malicious activities such as data theft server hijacking
Web site defacing even launching of distributed denial of service attack.
Also infecting the Web site's visitor and as well for Advanced Persistent Threat assaults.
The most prevalent backdoor installation method is our if I or remote file inclusions such as an attacker
can exploit the vulnerability within an application that dynamically references external scripts and
an RFI scenario the referencing function is tricked into downloading and bandwidth erosion from a remote
host.
Some of the Web sites as well they offer the function of uploading files such as your personal CV any
kind of file and they don't take into consideration blocking BHP or malicious files so you can easily
use that feature to upload your backdoor or there on the Web site.
So typically perpetrators identify these targets using scanners that can locate websites having patched
or outdated components that can enable such remote file inclusion.
Referring to our list here we have different backdoor tools such as power ploy which is a tool for Windows
machine mainly and it can be installed on the victim's machine and where this tool will help the attacker
to connect to the victim's machine through polished BD and crypt cat are tools that are similar to the
famous nat cat.
They are portable and can be easily installed on the victim's machine.
Whether it's Linux based or Microsoft machine they help connect the victims machine remotely anytime
by using a specific port in order to send remote comments.
The main difference between BD and Cat is that cat can allow you to have DCP and UDP encrypted connections.
What shells can be used to maintain access or even hack a website.
Most of them are detected by antivirus and the famous ones are C 99 and c hundred shells Waverly is
a BHP web shell that enables remote connection.
It's a very powerful tool that can be used as a stealth backdoor and it can be used as well to legitimately
manage websites HDTV Tomo is a tool that creates bi directional data stream tunneled it into H2 tribute
quests and the requests can be sent to an HDTV proxy if desired DNS to DCP is a tunnelling tool that
helps sparse DCP traffic through the NSA traffic meaning or port 53.
This is another important tool because most of the times this board is 53 is used to legitimately identify
services at the network and thus it's most of the time open if you know the antivirus application that
is running on the potential target system.
You might want to test your backdoor or Trojan Horse on virus Toto dot com.
This Web site will give you the deductibility of common antivirus application vendors against a file
that you upload.
This will help you execute a successful attack.