CVE-2024-3094

This repository does not have a README...

ludus_xz_backdoor

Ansible Role: xz backdoor CVE-2024-3094 for Ludus An Ansible Role that installs the xz backdoor CVE-2024-3094 on a Debian host and optionally installs the xzbot tool. !WARNING This role deploys malware on purpose! Without exposing the host to the internet you should be safe, but it's still malwar...

cve-2024-3094

How to detect the CVE-2024-3094 I'll walk through the step-by-step process of detecting CVE-2024-3094, commonly known as the XZ Backdoor, in containers using Trend Micro's Vision One TMAS CLI. This vulnerability presents significant risks to containerized environments, and with the right tools an...

CVE-2024-3094-Vulnerability-Checker-Fixer

!Open Source Lovehttps://assets.kitploit.com/production/public/read...

revisaxzutils

revisaxzutils Bash script to check if you have the CVE-2024-3094 vulnerability. Installation Quick installation for Ubuntu, Kali Linux, Parrot git clone https://github.com/hackingetico21/revisaxzutils.git cd revisaxzutils chmod +x ./revisaxzutils.sh...

CVE-2024-3094

CVE-2024-3094 CVE-2024-3094 - Checker From here 1. Quickest way to check just run the following. curl -Ls https://raw.githubusercontent.com/pentestfunctions/CVE-2024-3094/main/checker.sh | sh...

lab_xz_backdoor

XZ Backdoor Labs CVE-2024-3094 Safe, hands-on labs for understanding the xz-utils supply-chain backdoor — built for defenders, students, and blue-teamers. !WARNING This project handles real, in-the-wild malware the xz 5.6.0 / 5.6.1 backdoor. It is provided strictly for defensive education and...

sec_review_cve-2024-3094

A full security review of the open-source vulnerability CVE-2024-3094 was conducted. Based on the obtained data, the following were prepared: 1. Report «ThreatModel + SecurityReview» – detailed description of threats, exploitation paths, risk assessment, and recommendations for reducing the attac...

cve-2024-3094-tools

CVE-2024-3094 XZ Backdoor Tools This repository contains tools for the XZ Backdoor vulnerability, also known as CVE-2024-3094. About CVE-2024-3094 CVE-2024-3094, also known as the XZ Backdoor, is a critical vulnerability discovered in the XZ data compression library. For more information about th...

Detectar-Backdoor-en-liblzma-de-XZ-utils-CVE-2024-3094-

Detect-Backdoor-in-liblzma-of-XZ-utils-CVE-2024-3094- The following YARA rule helps detect the presence of the backdoor in the compromised liblzma library on systems using versions 5.6.0 and 5.6.1 of the XZ compression tool. This provides a mechanism to identify vulnerable systems that could be...

cve-2024-3094-analysis

This repository does not have a README...

CVE-2024-3094-XZ-Utils-Check

JB-Network - check-xz.sh Utility to check if you have a vulnerable version according to CVE-2024-3094. Installation To use it, open your terminal and run: cd;mkdir git;git clone https://github.com/jbnetwork-git/linux-tools.git chmod +x /git/check-xz.sh How to run? cd /git ./check-xz.sh License. M...

xz_cve-2024-3094_detection

xzcve-2024-3094detection Script to detect CVE-2024-3094. Credit goes to: https://github.com/cyclone-github/scripts/blob/main/xzcve-2024-3094-detect.sh...

writeup-CVE-2024-3094

writeup-CVE-2024-3094...

CVE-2024-3094

This repository does not have a README...

CVE-2024-3094-patcher

Ansible Playbook for Patching xz-Utils Vulnerability CVE-2024-3094 This document details an Ansible playbook designed to address the critical vulnerability CVE-2024-3094 identified in xz-Utils versions 5.6.0 and 5.6.1. This vulnerability, classified as a backdoor, grants attackers unauthorized...

detectar_cve-2024-3094

Detectarcve-2024-3094...

xz-vulnerable-honeypot

xz-vulnerable-honeypot An ssh honeypot with the XZ backdoor. CVE-2024-3094 TODO : hook the backdoor and/or sshd. log rsa keys for decryption. notes: https://gist.github.com/smx-smx/a6112d54777845d389bd7126d6e9f504 https://gist.github.com/q3k/af3d93b6a1f399de28fe194add452d01...

CVE-2024-3094

CVE-2024-3094 Credit: https://gist.github.com/Sn0w3y This script detects if it's likely that the ssh binary on a system is vulnerable to CVE-2024-3094. Unlike the detection script originally written by Vegard Nossum, this one doesn't use hexdump as it needs to be installed separately on most dist...

xz-backdoor-github

xz-backdoor-github History of commits related to the xz backdoor Discovered On March 29, 2024: CVE-2024-3094. Currently GitHub has taken down the repos for ToS violations. The purpose of this is to faciliate security research of how this backdoor was snuck in over the course of 2 years of active...