Magento PolyShell upload in custom_options/quote by web process, aggregated

ills3c Intel&Coffee@Ills3C

•updated yesterday•1•0•3

Detects files written under Magento pub/media/custom_options/quote by a web server or PHP process, and flags when a subsequent process command line references the uploaded file, indicating potential web shell activity.