Signature Detail
Short Name |
HTTP:PHP:PHPSPLOIT-POSTEXP |
|---|---|
Severity |
Critical |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
PHPSploit Post Exploitation Backdoor Access |
Release Date |
2016/01/12 |
Update Number |
2615 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: PHPSploit Post Exploitation Backdoor Access
This signature detects attempt to fingerprint a PHP based backdoor tool PhpSploit which is used for post-exploitation and being considered as a stealthy backdoor tool. A successful exploitation through the backdoor may result in arbitrary code execution and could lead to further attacks.
References