What is the modification date of the /etc/sudoers file? (Format: June 5 09:34)
What is the executable file downloaded by the attacker for creating a backdoor?
I need a help about these. I tried many way but I didn’t find correct answer.
@yorusec Can you help please.
hint for the modification date of the sudoers file , D** * **:**:**
you need to look for a bash history file in somewhere to find the downloaded backdoor @Minaitor
1 Like