41554 blogs · 4,417,066 posts Claim your blog

Record · corpus.blog/posts/01a08780-8d57-71aa-b21d-d6daf83d2ad1

Analyzing a Wordpress PHP malware campaign and reverse engineering C2 communications

hacked.codes · published 28 December 2022

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at hacked.codes Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 14
Words captured: 23,221

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://www.virustotal.com/gui/collection/9b8304f062e3ce294a50deb00512a8c40dc3cd24f9256c1c65ffc73f59adddbc

virustotal.com

https://hacked.codes/2022/

hacked.codes

https://github.co/hiddenchars

github.co

https://github.com/TheBinitGhimire/Web-Shells/blob/master/PHP/mini.php

github.com

https://www.php.net/manual/en/function.eval.php

php.net

https://www.php.net/manual/en/function.curl-init.php

php.net

https://www.php.net/manual/en/function.fsockopen.php

php.net

https://www.php.net/manual/en/function.pfsockopen.php

php.net

https://www.php.net/manual/en/function.stream-socket-client.php

php.net

https://www.php.net/manual/en/function.socket-create.php

php.net

https://www.php.net/manual/en/reserved.variables.globals.php

php.net

https://developers.google.com/search/docs/crawling-indexing/sitemaps/build-sitemap

developers.google.com

https://github.com/su18/Stitch

github.com

https://www.baeldung.com/linux/ld_preload-trick-what-is

baeldung.com