Security News > 2015 > March > The hacker first uploaded a file, class.php .. The database credentials WERE in a non-www accessible directory, however, anyone smart enough can find the include lines .. Then, he uploaded adminer.php a web based database management tool . I (Reddit)
2015-03-24 20:38
News URL
http://www.reddit.com/r/netsec/comments/3064el/the_hacker_first_uploaded_a_file_classphp_the/
Related news
- Hackers spoof Microsoft ADFS login pages to steal credentials (source)
- XE Hacker Group Exploits VeraCore Zero-Day to Deploy Persistent Web Shells (source)
- Hackers pose as employers to steal crypto, login credentials (source)
- Hackers Exploit Severe PHP Flaw to Deploy Quasar RAT and XMRig Miners (source)
- Hackers Using E-Crime Tool Atlantis AIO for Credential Stuffing on 140+ Platforms (source)