full-disclosure - (no subject)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAA0BKn9uKnWEeCDU7Vx+IAQ8KAAAAQAAAAYF2gh5ZMXEub9REsigEAdgEAAAAA@online.gateway.strangled.net>
Date: Wed Sep 28 13:02:26 2005
From: aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh)
Subject: (no subject)

Recently 2 days ago I saw this in a compromised system. 


Both this file and cpshost.dll were deleted from C:\InetPub\scripts
This file was recovered but I was unable to recover cpshost.dll.... 


Anyone know what is this ? 






<% Response.Buffer = TRUE %>

	Version=1.5
<%
	PathToPA = "http://" + Request.ServerVariables("SERVER_NAME") +
"/scripts/cpshost.dll"


	PostingURL = PathToPA + "?PUBLISH"
		
	TargetURL = "http://" + Request.ServerVariables("SERVER_NAME")
%>

	[{8B14B770-748C-11D0-A309-00C04FD7CFC5}]
	PostingURL="<%= PostingURL %>"
	TargetURL="<%= TargetURL %>"
	ComponentInstall="yes"


________________________________________________________________________
Delivered using the Free Personal Edition of Mailtraq (www.mailtraq.com)