Full Disclosure mailing list archives

[tool] ModSecurity backdoor

From: Jozef Sudolsky <jozef () sudolsky sk>
Date: Sun, 01 Jan 2023 13:12:46 +0100

Announcing a backdoor tool running inside of ModSecurity WAF andallowing remote command execution with privileges of the web server.


https://github.com/azurit/modsecurity-backdoor


_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/

Current thread:

[tool] ModSecurity backdoor Jozef Sudolsky (Jan 02)