IIS Raid – Backdooring IIS Using Native Modules
Feb 10th, 2020
Written by: Admin
All
Introduction Back in 2018, PaloAlto Unit42 publicly documented RGDoor, an IIS backdoor used by the APT34. The article highlighted some details which sparked my interest and inspired me to write…