A web shell is a malicious script used by an attacker with the intent to escalate and maintain persistent access on an already compromised web application. A web shell itself cannot attack or exploit a remote vulnerability, so it is always the second step of an attack (this stage is also referred to as post-exploitation). […]
In part 1 of this series, we looked at what a web shell is and why an attacker would seek to use one. In part 2 of this series, we’ll be looking at some specific examples of web shells developed using the PHP programming language. Web shells exist for almost every web programming language you […]
In part 2 of this series, we looked at specific examples of web shells in the PHP programming language. In part 3 of this series, we’ll be looking at some techniques that attackers use to keep web shells hidden. Commands can be sent to the web shell using various methods with HTTP POST request being […]
Back in 2007, the partner event registration page of the Microsoft UK events website has been defaced by a hacker who managed to discover and exploit a web application vulnerability in one of the parameters used by the form on the website. Read more in this article about how an SQL injection vulnerability, server-side enabled […]
Acunetix reveals latest statistics based on one year of conducting web application scans Kirkland, Washington – February 12, 2007 – Businesses and non-commercial entities have much to consider when it comes to securing their web applications and the data they keep on customers and patrons. Acunetix, a leading vendor of web application security solutions, today […]
Acunetix WVS protects the loss of sensitive personal data due to XSS attacks London, UK – 05 July, 2006 –A 16 year old Dutch student, Adriaan Graas, interested in Internet security and web development discovered a hack for the popular Hotmail free email service via a Cross Site Scripting attack. Microsoft, is reported to have […]
We hate spam, we obviously will not spam you!
Copyright © TSP 2024. All rights reserved. Designed by Enovate LLC
