How to Find Backdoor?

22-07-2019, 09:30 PM

Loai Wrote: Well, in the .lua file you could find some things like _G variables meaning it is obfuscated, same thing the code is unreanable, just x and numbers. Some files will try to put extra codes with url links.

This is not all, i can configure payload in pdf,pif,scr,exe,bat .... the encryption still remain and is not directl accessible. The lua script is always obfuscated, but you can use some tool for found the real source. Hashing an algorithm is not obfuscate it

---

Probably the real answer is, trace all UDP and TCP port. Good luck xD