How botnets are created with hijacked Worpess, fake Flash downloads and Node.js

Re:How botnets are created with hijacked Worpess, fake Flash... by SHIT_TALKER on Monday November 23, 2015 @07:12PM (#10618273)

Doesn't that break admin-ajax.php access? It sits behind /wp-admin/. WordPress recommends allowing access when using IP whitelists.

Apache:

  # Allow access to wp-admin/admin-ajax.php
  <Files admin-ajax.php>
      Order allow,deny
      Allow from all
      Satisfy any
  </Files>

Nginx:

  location /wp-admin/admin-ajax.php {
    allow all;
  }

[ Parent | on HN ]

Re:How botnets are created with hijacked Worpess, fake Flash... by jakejake on Tuesday November 24, 2015 @12:58AM (#10619350)

Ah, interesting. I guess their theme didn't use any ajax features. But, to be safe I updated my gist to exclude that file.

[ Parent | on HN ]