Tenda Router AC11 - Remote Command Injection

Tenda Router AC11 is susceptible to remote command injection vulnerabilities in the web-based management interface that could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. id: CVE-2021-31755 info: name: Tenda Router AC11 - Remote Comman...

DDOS-RootSec

RootSec 아카이브 RootSec 아카이브 개요 RootSec 아카이브 에 오신 것을 환영합니다. DDOS 도구, 스캐너, 봇넷, 익스플로잇 등을 위한 최고의 리소스입니다. 저희 아카이브에는 다음이 포함됩니다: Mirai Edits: 비공개 및 공개 버전 QBot Edits: 비공개 및 공개 버전 기타 봇넷 변종: 다양한 컬렉션 및 맞춤형 빌드 익스플로잇 : 최신 취약점 스캐너 : QBot 및 Mirai 방법 : 레이어 4, 레이어 7, UDP 및 TCP 브루트포스 : 비밀번호 크래킹 도구 취약점 목록 : 업데이트되고 포괄...

public-research

Nokia Deepfield ERT — 공개 연구 Nokia Deepfield 긴급 대응 팀ERT의 위협 연구로, DDoS 봇넷 및 관련 인프라에 중점을 둡니다. 각 디렉토리는 봇넷 패밀리에 대한 간략한 요약과 기계 판독 가능한 침해 지표IoC를 포함합니다. 이 저장소는 기존 커뮤니티 연구와 Deepfield ERT의 자체 분석을 통합합니다. 참조 및 출처는 각 README를 참조하세요. 참고: 지표는 원시변조되지 않은 형태로 제공되므로 탐지 도구에서 직접 사용할 수 있습니다. URL 및 도메인을 처리할 때 주의하세요. 일부...

Mirai-Spray

Mirai-Spray Hydra를 사용하여 일반적인 Mirai 로더/호스트리스트 형식을 스캔합니다. 이 도구는 호스트 목록에 연결할 수 있는지 확인하는 데 사용할 수 있습니다. 설치 apt update -y && apt upgrade -y apt install tor git clone https://github.com/Skotizo/Mirai-Spray cd Mirai-spray g++ main.cpp -o spray ./spray 사용법 ./spray host.txt telnet crackedTelnet.txt 또는...

katana

katana Katana Botnet、Mirai Botnetをベースにしています。 ご注意ください：このソフトウェアは私が作成したものではありません！教育目的のみで、悪意なく共有しています。これを使用して引き起こされるいかなる損害や悪事についても、私は一切の責任を負いません！ StandWithUkraine...

CVE-2024-3912

이유? Mirai는 내 허니팟을 계속 건드리는 짜증나는 놈들이기 때문에 게시합니다. 당신은 내가 찾는 악성코드가 아닙니다. 제발 꺼져 주세요. 여기 그들의 짜증나는 악성코드 배포 IP와 기본 페이로드 스크립트가 있습니다. http://130.12.180.69/bins/kla.sh 설명 ASUS 라우터 임의 파일 쓰기 및 명령 실행 페이로드로, Mirai가 내 허니팟에 계속 보내는 것입니다. 이제 공개합니다. 이걸 처리하기 귀찮고, 인식 및 연구를 위해 공유하지 않는 것은 싫기 때문입니다...

backdoor.mirai.helloworld

Dasan GPON Router URL ? image 뒤에 문자열 추가시...

How Candidates Could Use AI for Good

This essay was written with Nathan E. Sanders, and originally appeared inThe Guardian. There are plenty of signs that AI will make all of our experiences of the US midterm elections worse. Voters have anxiety about AI's impacts on the country. Politicos are using AI deepfakes to spread lies. The...

D-Link DNS-320 - Unauthenticated Remote Code Execution

D-Link DNS-320 FW v2.06B01 Revision Ax is susceptible to a command injection vulnerability in a systemmgr.cgi component. The component does not successfully sanitize the value of the HTTP parameters fntpserver, which in turn leads to arbitrary command execution. id: CVE-2020-25506 info: name:...

CVE-2026-87827

Certain KGUARD DVR devices running vulnerable firmware expose a system command execution service on all network interfaces without requiring authentication. A remote unauthenticated attacker with network access to the affected service can execute arbitrary system commands on the device, potential...

CVE-2026-87827 KGUARD DVR unauthenticated remote command execution vulnerability

Certain KGUARD DVR devices running vulnerable firmware expose a system command execution service on all network interfaces without requiring authentication. A remote unauthenticated attacker with network access to the affected service can execute arbitrary system commands on the device, potential...

CVE-2026-87827

Certain KGUARD DVR devices running vulnerable firmware expose a system command execution service on all network interfaces without authentication. A remote unauthenticated attacker with network access can execute arbitrary system commands, potentially leading to a complete compromise of the DVR. ...

EUVD-2026-74805

Certain KGUARD DVR devices running vulnerable firmware expose a system command execution service on all network interfaces without requiring authentication. A remote unauthenticated attacker with network access to the affected service can execute arbitrary system commands on the device, potential...

CVE-2026-87827 KGUARD DVR unauthenticated remote command execution vulnerability

Certain KGUARD DVR devices running vulnerable firmware expose a system command execution service on all network interfaces without requiring authentication. A remote unauthenticated attacker with network access to the affected service can execute arbitrary system commands on the device, potential...

VulnCheck KEV: CVE-2026-87827

Certain KGUARD DVR devices running vulnerable firmware expose a system command execution service on all network interfaces without requiring authentication. A remote unauthenticated attacker with network access to the affected service can execute arbitrary system commands on the device, potential...

PT-2026-88938

Name of the Vulnerable Software and Affected Versions KGUARD DVR versions prior to 2017 Description Certain DVR devices expose a system command execution service on all network interfaces without requiring authentication. A remote unauthenticated attacker with network access to this service can...

Rewiring Democracy Series on The Renovator

Nathan E. Sanders and I are writing a series of essays on real-world examples of democratic technologies for The Renovator. I haven't been posting the full text on the blog because they're a bit long, but here are links. Part 1 is about the Japanese digital democracy party, Team Mirai. Part 2 is...

Tengu Botnet Reboots Compromised Linux Devices When Defenders Kill Its Process

A new Mirai-derived botnet called Tengu can use a compromised Linux device's hardware watchdog to trigger a reboot when defenders kill its main process. If that happens, Tengu's other persistence mechanisms get another chance to relaunch it. Nozomi Networks Labs observed the dropper reaching its...

NetNut botnet takes a hit. Don’t be part of the next one.

In a joint operation, Google, the FBI, and other partners have dealt a significant blow to the residential proxy ecosystem by disrupting the NetNut also tracked as Popa botnet. NetNut is a malicious service built on millions of hijacked consumer devices. NetNut marketed itself as a high-quality...

Malicious code in httpprobe (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb46b890b54f51f3a98c1935dbd50e143430757c5daf4080039d32865b04c1d5 The package advertises itself as an 'HTTP probing tool for security researchers' but contains no HTTP-probing functionality. Its only behavior is to...