full-disclosure-uk August 2008 archive
Main Archive Page > Month Archives  > full-disclosure-uk archives
full-disclosure-uk: Re: [Full-disclosure] Klueless Klowns Team P

Re: [Full-disclosure] Klueless Klowns Team PHP shell

From: Andrew Farmer <andfarm_at_nospam>
Date: Mon Aug 18 2008 - 00:23:40 GMT
To: sec-community@thegoodhacker.com

On 17 Aug 08, at 15:59, William McAfee wrote:
> For those of us who do not enjoy deciphering code with next to no
> comments, would you mind describing what exactly that code is supposed
> to do, how it does it, and why?

It's a PHP shell, often used on exploited systems. Doesn't appear to be significantly different from other versions in the wild, besides a few modified credits and the removal of certain automatic-update functions.

Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/