Hacker News new | ask | show | jobs
by rosenjon 4309 days ago
Looks like this program itself is designed to root your machine. If it has proper permissions, the exeCmd method is designed to be able to execute arbitrary commands on your machine. It's probably a command and control type situation (looks like they even dropped in a javascript file browser), which is kind of odd though if this is part of a botnet. If this script is actually runnable, it would be hard to know what's been done to your machine.
1 comments

Unfortunately the Tomcat log files don't contain any other information. I still have to check and see what exactly gets logged when the script is used. As of now I don't see any other calls logged, so my hope is that the timeouts prevented worse from happening.