Assessing Web Security in E-Learning Systems
Assessing Web Security in E-Learning Systems

Author(s): Denisa-Nicoleta MIHALACHE
Subject(s): Security and defense, ICT Information and Communications Technologies, Distance learning / e-learning
Published by: Asociatia Romana pentru Asigurarea Securitatii Informatiei
Keywords: cyber-attacks; penetration testing; malicious software; trojan; e-learning security
Summary/Abstract: The exponentially evolution of the internet and the increasing sophistication of cyber threats have made securing web servers and web applications a critical concern in today's digital landscape. This research explores the security vulnerabilities of e-learning platforms, particularly Moodle, and demonstrates practical exploitation methods to highlight the risks. A key focus is the development and deployment of a custom script to create a trojan virus leveraging the Right-to-Left Override (RLO) technique. This malware, disguised as a legitimate e-learning material, infiltrates the platform, lists system files, and injects malicious code into Python files, showcasing a high-impact threat vector.

• Details
• Contents