Thursday, 9 June 2011

Detection shell backdoor on Web Server

1. Web Shell Detection Using NeoPI - A python Script
(https://github.com/Neohapsis/NeoPI)

2. PHP Shell Scanner - A perl Script

3. PHP script to find malicious code on a hacked server - A PHP Script
(http://25yearsofprogramming.com/blog/2010/20100315.htm)


Btw for a quick one, the following grep command can also be used:

Code:grep -RPl --include=*.{php,txt,asp} "(passthru|shell_exec|system|

No comments:

Post a Comment