How a vulnerable website can lead to the botnet handler platform. Stay safe stay secure.

1. Nabin Kc
(CPTE)
Security
Consultant
@N_Cnew

2. Vulnerable website
for botnet network

3. Corporate Website are hackers’ easy target?
Why corporate don’t care about their website?
What hacker can user it for ?

4. Corporate Design

5. Corporatewebsiteareinlowpriority
• Most of
them don't
have
sensitive
data
• Site not in
corporate
network
Easytargetforanyattacker
• It is in DMZ
• Most of
them are
not
updated
• Lack basic
security
• New bugs
are
released in
matter of
second.
Whathackerdoes
• Steal the
database
• Host
malware
• Do other
attacks like
,phishing
etc.
• Many just
deface it
• What
further can
it be used
for?

6. Php Hopping

8. Benefits
Can target with RAT without VPS
This method solves problem with low
ram
Can get remote desktop just from ssh
server
Can help to get rid of firewall to some extend
because corporate allow their traffic between the
site and remote host.