[H4ckN3ws]Microsoft Details Cookie-Controlled PHP Web Shells Persisting via Cron on Linux Servers

[ThaHaka 0]

This is the hidden content, please

• Sign In
• or
• Sign Up

Threat actors are increasingly using HTTP cookies as a control channel for PHP-based web shells on Linux servers and to achieve remote code execution, according to findings from the

This is the hidden content, please

• Sign In
• or
• Sign Up

Defender Security Research Team. "Instead of exposing command execution through URL parameters or request bodies, these web shells rely on threat actor-supplied cookie values to gate execution,

This is the hidden content, please

• Sign In
• or
• Sign Up