Also if you look at the complexity of the code, you'll know something like port-knocking would have had no affect (probably just an extra line in the custom handler).

People that discover these these types of exploits each machine code for breakfast.