Please use this identifier to cite or link to this item: http://hdl.handle.net/10609/150285
Title: Análisis forense de un servidor
Other Titles: Análisis forense de un servidor Linux
Author: López Benítez, Eduardo
Tutor: Serra-Ruiz, Jordi  
Others: Blanquez Piquero, Manuel
Abstract: The forensic expert report was conducted at the request of Gangas SL due to suspected security incidents on their AWS-hosted web server, which occurred between December 2018 and January 2019. This server hosted the company's website, built with WordPress 4.9.9 and the Reflex Gallery 3.1.3 plugin, both with known security vulnerabilities. The purpose of this report is to determine the nature and extent of the incident, identify the compromised data, and the suspicious movements associated with the incident. The methodology used included reviewing images of the server's RAM and hard drive, along with their verification hashes. Forensic tools were used for analysis, ensuring that the integrity of the data was maintained throughout the forensic process. The findings disclosed the exploitation of known vulnerabilities, an attempt to inject malicious code through comments, and the upload of a PHP file that allowed a more severe attack, including the modification of key WordPress files and the insertion of a cryptocurrency mining script. The conclusions point to a significant compromise of the server's security, involving multiple IP addresses in the attacks. Gangas SL is advised to update their systems, conduct regular security audits, and strengthen their access control policies to prevent future incidents.
Keywords: análisis forense
perito informático
ISO 27037
Linux
Document type: info:eu-repo/semantics/masterThesis
Issue Date: 10-Jan-2024
Publication license: http://creativecommons.org/licenses/by-nc-sa/3.0/es/  
Appears in Collections:Trabajos finales de carrera, trabajos de investigación, etc.

Files in This Item:
File Description SizeFormat 
edlobezTFM0124memoria.pdfMemoria del TFG7,09 MBAdobe PDFThumbnail
View/Open
Share:
Export:
View statistics

This item is licensed under aCreative Commons License Creative Commons