How to find webshell using google dork

broken image
broken image

For example, some of the websites use the same words, phrases and layout. The question is, though, how can we find them so we can shut them down?ĭigging a bit deeper in some of the channels, and looking the websites people were talking about in these channels, I started to see patterns. This isn’t news – channels and IRC servers like this have been a hot media topic for the last five years. After lurking in these channels I noticed that most of them were all about controlling botnets, automated exploitation and credit card fraud. During my recent research into PHP backdoors, bots and shells, I came across a few IRC servers which looked pretty suspicious.

broken image