Re: [Full-disclosure] Klueless Klowns Team PHP shell

From: Andrew Farmer <andfarm_at_nospam>
Date: Mon Aug 18 2008 - 00:23:40 GMT
To: sec-community@thegoodhacker.com

On 17 Aug 08, at 15:59, William McAfee wrote:
> For those of us who do not enjoy deciphering code with next to no
> comments, would you mind describing what exactly that code is supposed
> to do, how it does it, and why?

It's a PHP shell, often used on exploited systems. Doesn't appear to be significantly different from other versions in the wild, besides a few modified credits and the removal of certain automatic-update functions.

Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/

This message: [ Message body ]
Next message: William McAfee: "Re: [Full-disclosure] [funsec] Internet attacks against Georgian web s ites"
Previous message: n3td3v: "Re: [Full-disclosure] [funsec] Internet attacks against Georgian web s ites"
In reply to: William McAfee: "Re: [Full-disclosure] Klueless Klowns Team PHP shell"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ]