can you buy expired hacking domains?
Source: YouTube · Low Level · published Jan 29, 2025 · 27:56
Security researchers discovered how to hijack hackers' backdoors by purchasing expired domains used in malware, gaining access to over 4,000 compromised systems 4:10-4:12.
Key Takeaways:
• Researchers bought expired domains used in backdoors to "backdoor the backdoors" and access systems others had compromised 0:00-0:16
• They discovered compromised government systems including Bangladesh, China, and Nigeria among the thousands of hijacked backdoors 4:50-4:55
• Many popular web shells contain built-in backdoors allowing their creators to access any system where they're deployed 10:19-10:26
• The C99 shell has an authentication bypass vulnerability allowing anyone with knowledge of the flaw to overwrite passwords and gain access 13:01-14:04
The research demonstrates how attackers often make mistakes like abandoning infrastructure, creating opportunities for defenders to level the playing field 26:18-26:26.
Sources:
- 0:00-0:16 Introduction to backdooring backdoors research
- 4:10-4:12 Discovery of 4,000+ compromised systems
- 4:50-4:55 Compromised government systems found
- 10:19-10:26 Web shells with built-in backdoors
- 13:01-14:04 C99 shell authentication bypass vulnerability
- 26:18-26:26 Responsible disclosure of domains to Shadow Server Foundation
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
someone sent me this article backdooring your back doors another $20 domain more governments we're going to go through this and read this I gave it a quick little scan before it seems like it is a research organization that bought domains and was able to use that to back door back doors let's give it a little a little read also if you're new here hi my name is Ed this is L TV a channel where I make videos about software security cyber security cves hacking all that cool stuff I'm actually a security engineer and offensive security specialist in my day job so if you're into that kind of stuff or want to hang out with me hit that sub button I really appreciate it thank you after the excitement of our Mobi research okay I'm guessing this organization did research on a previous TLD a top level…