Beberapa hal unik di situs publik

I am a information security professional with interest mainly in defenses/ blue teaming. I enjoy leisure running 🏃♂️ and PC games.
Search for a command to run...

I am a information security professional with interest mainly in defenses/ blue teaming. I enjoy leisure running 🏃♂️ and PC games.
No comments yet. Be the first to comment.
Guide on setting up detection pipeline with Github Action

Indonesia leak, ransomware, and data breach monitoring

Leveraging AWS lambda and sigma for CloudTrail monitoring

Thoughts on starting cloud-centric detection assessment

This article is an excerpt from my piece originally published on cdef.id. You can read the full article here. Indicators of Compromise (IOCs) are simply evidence that a cyber intrusion has occurred. They are the digital breadcrumbs left behind by att...

Tulisan ini mendokumentasikan beberapa hal 'unik' yang kebetulan saya lihat bersarang di situs publik. Biasanya saya temukan ketika sedang iseng menjelajah internet.
sebuah mining script di root kemsos.go.id yang di host di drupalupdates.tk dan hasil analisis virustotal.
alamat backdoor (sudah dibersihkan) di sini
backdoornya di encode dengan: gzinflate dan base64_decode di sini password: avwillkillthis
menggunakan bahasa indonesia, sehingga ada kemungkinan ditulis oleh orang Indonesia,serta ada tulisan $version = 'R57'; jadi kemungkinan merupakan variasi webshell r57,