Lựa chọn nhanh brute FTP sẽ làm việc để phá vỡ các mật khẩu trên trang web. Một khi vỏ này được đưa vào, có thể thông qua một con ngựa Trojan, các "chủ nhân" của vỏ có thể phá vỡ mật khẩu và đăng nhập bình thường, như vậy tránh được bất kỳ nastiness với các tập tin đăng nhập hiển thị giao thông kỳ lạ. | This material is copyright and is licensed for the sole use by Thomas Rosenblum on 4th December 2008 1010 SW High Ave. Topeka 66604 Chapter 6 Zooming in on the tool bar we see that the shell has several options listed under it Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout Selecting the FTP Quick brute will work to break the passwords on the site. Once this shell is inserted possibly through a Trojan horse the owner of the shell can break passwords and log in normally thus avoiding any nastiness with log files showing weird traffic. Though he or she could easily wipe out the log files with this tool Ftp Quick brute Read fi rst 100 Users only with shell Lo g g i n g D Logging to file Logging to e-mail Brute Next you can learn all about the server what hardware is running and what the OS build version and patch levels are. One note You will see that Open Base Dir is OFF not secure . This is one way an attacker could enter the site. Remember our PHP settings Here is an example where the shell is reporting the server security information. This information was obtained with one of the scanning scripts that report information about your environment Server security information Open base dir Get etc passwd Sysloq configuration Hosts OS Version - Linux version mockbuild@ gcc version 20060404 Red Hat 1 Kernel version - 0 0 .force_mld_version 0 0 .force_igmp_version 0 0 net. ipv4. conf. 0 0 1 Fri Distrib name - CentOS release Final Kernel r on an m CPU - processor 0 vendor_id .
