From 61b6ad64e3f31a636b43532649d86f888fd8fff6 Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Wed, 10 Nov 2010 15:13:36 +0000 Subject: [PATCH] JSP backdoor revisited, and in PHP removed trailing spaces from a blank line --- shell/backdoor.jsp_ | Bin 426 -> 440 bytes shell/stager.php_ | Bin 488 -> 493 bytes 2 files changed, 0 insertions(+), 0 deletions(-) diff --git a/shell/backdoor.jsp_ b/shell/backdoor.jsp_ index e03df14d7c4d2fab023352360413c55ec006767f..60f80dabff1a4d09555f4b77a8743c9fd17b29a2 100644 GIT binary patch literal 440 zcmV;p0Z0BlB^O3cJ|k>4G5rcEnC=%K==RZKYqQNE}%7@q7`O* zFf2dOpnrcCexYnOw8|Es7t=nYUuAM~e1Ct?e`ZU6e`S7KHl)$&o~MLMo|=tvOVEFE zl!7`rGCX{fnNDV)a;TUIi$qurR&&BTcZD!*c-BaU_qN|RWgfSFK7;BoSXYT=tCHDe zX2d9tepWDRZA0uTf@Y3@Zpk&~GaOUDm|SUtI)hK#KkQ<`uK_EfBf`zR#Qo4~ zd*Ku4v*4`rR8hxCLyaFi66(^mpxY;-JY2VQB_^xY>+)j+g*86OnOl*kSY+oEyb1G4FrUvA|{1aYt=IZdiJ2cK*7l1ok8B$qSe2m78B`0JQJ#>|2%^IHb zf>RZ&sVBi%iwCv&IwNG3b45(H&g0d|Zct1cM?0o|-aV}Ds6Zs>{`A&)Q*B3M zF$1;_(hru&+vO-k?D4s3WSc23|&!TfUlHPKzL{q%J_Pdl=N z1XMF=N8tH#kq%&BOf@B14NYtzBURBBsf>T14P6B<%F@Blgf|O6GTdYkURy)z8&gO#~+BdXfktYH(*jP Ut`<98690?2U7S}pPujzve}1RKNB{r; diff --git a/shell/stager.php_ b/shell/stager.php_ index 13e75520eca57284961033c2826439248367e9e6..9b207ed98cbe878028c568aeca83c05e1bb48b76 100644 GIT binary patch literal 493 zcmVKU-+(!9E9d5)_Zk1%zZm}&KYq1U+dqR$zcS3iK6Sf-kqo|7BW5_?aLrjyhiO<{vFI!k31raw!6 ze-|4|e}8cniIZ83S$2u0eouEFjCa8CY-uq5^%x#^@3_hoKI9K{7a0>VD@t0%=#mEH;gj^jifh6suVZh<5cPr?36i(yE0}q jVw5UXf*YDOQ%`75RV7MF;DmC1r1xkII!7;%(hB@Zo5k)m literal 488 zcmVenu z5a^ZrzSM=+SxrHkZ{q1A9#b(_?}AS3Sa&#rsIWN_u}zsKeVG*(<91~#0SI$ql79~v zxky(f4XF4?YD*8pDoUc7#J3=Vqm&LAPU^i=xVjY%aQSJFTwsd2PTPpe~$QC9h9z4C5@exaI?l~G0ihJAXM9$BsL@$sxWOF ej&)NgbO%*7Z^qCME+bQ5#oUoGYg=PCnLEHk{NXbI