ConfigServer Community Forum

Hello,

I dont know how to report code not detected by CXS, so this is my contribution:

I found this today: a process running on my server, mining bitcoin or something like this.

The process: https://pastebin.com/igXZ3L1e

The code I found on file: https://pastebin.com/K9qtMqTP

So, this code download a binary and run on the server.

Hope CXS team can add this to be detected, because the CXS 6.39 (running as daemon cxswatch) dont detected today.

Thank

If you want to submit an exploit to us for consideration (as explained in the documentation) then use the following: