Thread: Web Backdoor Shell Detection on Servers

Detecting reverse HTTPS backdoors

Many organizations try to counter this by using web-proxies, which can inspect the HTTP traffic and block any malicious behavior. But TCP 443 cannot be inspected in this way since SSL relies on end-to-end encryption. By end-to-end encryption I mean that the session must be encrypted all the way from the server to the client without having any SSL proxies or MITM devices that break the encryption between the server and client. Inserting an SSL proxy would typically result in a certificate error in the client's web browser. TCP 443 is therefore left untouched on most organizations' Internet connections.

Read full article herehttp://www.netresec.com/?page=Blog&m...ttps-backdoors

Simple Kung Fu Grep for Finding Common Web Vulnerabilities & Backdoor Shells >> Simple Kung Fu Grep for Finding Common Web Vulnerabilities & Backdoor Shells | Pentest Laboratory | Online Training Courses – Learn Penetration Testing in Practice