NginRAT is Linux Malware that targets the Nginx web server using an LD_PRELOAD library. NginRAT is often found in conjunction with CronRAT.
A writeup by Sansec researchers can be found here: https://sansec.io/research/nginrat
NginRAT
0001-01-01
NginRAT is Linux Malware that targets the Nginx web server using an LD_PRELOAD library. NginRAT is often found in conjunction with CronRAT.
A writeup by Sansec researchers can be found here: https://sansec.io/research/nginrat
Linux Persistence: Startup Scripts
2024-11-10 DFIR CTF linux persistence systemd SysV init startup script
Linux Persistence: Cron
2024-11-10 DFIR CTF linux persistence cron