Post #775 45 Feb 19, 2020, 16:03 UTC Backdooring IIShttps://www.mdsec.co.uk/2020/02/iis-raid-backdooring-iis-using-native-modules/ MDSec IIS Raid – Backdooring IIS Using Native Modules - MDSec Introduction Back in 2018, PaloAlto Unit42 publicly documented RGDoor, an IIS backdoor used by the APT34. The article highlighted some details which sparked my interest and inspired me to write...