49 matches found
zeek-spicy-ipsec
IPSec This is a Zeek protocol analyzer that detects IPSec VPN based on Spicy. You must install Spicy to use this package. A blog detailing the development of this analyzer: https://zeek.org/2021/04/20/zeeks-ipsec-protocol-analyzer/ RFCs: https://tools.ietf.org/html/rfc2406 ESP...
zeek-spicy-wireguard
zeek-spicy-wireguard This package provides a Spicy based Wireguard protocol analyzer for Zeek. You must install Spicy to use this package. This is a straightforward implementation following https://www.wireguard.com/protocol/ Wireguard Wireguard Logs separator \x09 setseparator , emptyfield empty...
zeek-spicy-openvpn
zeek-spicy-openvpn This is a protocol analyzer that detects OpenVPN traffic. You must install Spicy to use this package. Blogs and webinars detailing the development of this protocol analyzer: https://zeek.org/2021/03/16/a-zeek-openvpn-protocol-analyzer/...
zeek-strrat-detector
A Zeek Based STRRAT Malware Detector This is a Zeek Spicy based STRRAT malware detector. PCAP https://app.any.run/tasks/4423258f-59bc-4a88-bfec-d8ac08c88538/ Example Output % zeek -Cr strrat-4423258f-59bc-4a88-bfec-d8ac08c88538.pcap zeek-strrat-detector % cat notice.log separator \x09 setseparato...
zeek-spicy-ospf
zeek-spicy-ospf This is a Spicy based OSPF v2 & v3 packet analyzer for Zeek. You must install Spicy to use this package. Links: Original logic imported from https://github.com/s-wells/spicyparsers/tree/main/ospf, with author's permission. https://datatracker.ietf.org/doc/html/rfc2328...
zeek-spicy-facefish
FacefishRootkit This Zeek+Spicy analyzer will detect the Facefish Linux rootkit C2 as described in: https://blog.netlab.360.com/sshstealerfacefishen/ https://blogs.juniper.net/en-us/threat-research/linux-servers-hijacked-to-implant-ssh-backdoor...
zeek-spicy-openvpn
zeek-spicy-openvpn Questo è un analizzatore di protocollo che rileva il traffico OpenVPN. Per usare questo pacchetto è necessario installare Spicy. Blog e webinar che descrivono lo sviluppo di questo analizzatore di protocollo: https://zeek.org/2021/03/16/a-zeek-openvpn-protocol-analyzer/...
zeek-spicy-stun
STUN Session Traversal Utilities for NAT STUN Questo è un analizzatore di protocollo Zeek che rileva STUN basato su Spicy. Devi installare Spicy per usare questo pacchetto. Questo pacchetto creerà due log: stun.log - Questo log contiene ogni messaggio STUN. stunnat.log - Questo log contiene le...
Regulators around the world are scrutinizing Grok over sexual deepfakes
Grok’s failure to block sexualized images of minors has turned a single “isolated lapse” into a global regulatory stress test for xAI’s ambitions. The response from lawmakers and regulators suggests this will not be solved with a quick apology and a hotfix. Last week we reported on Grok's apology...
EUVD-2025-94944
Malicious code in spicycephalopodz3n npm...
Malicious code in spicy_turkey_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6001ec14416892e42685654c67b3b5d8d813a3a3ae2ef3e1d90b7ed3ed8b26c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-88693
Malicious code in spicyangelfishz3n npm...
MAL-2025-117193 Malicious code in spicy_buzzard_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60570ff2093da23d0f35a2fddc33dc193cd314a1657346b7c5443cdd18854965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in spicy_antlion_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f73e8889836e36e0440beed4d93f065bcf7bc7b5ad68d2f607fa6da6976995e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-74209
Malicious code in spicybasilisksilver-49 npm...
EUVD-2025-75567
Malicious code in spicystarfish-apptea npm...
MAL-2025-109012 Malicious code in spicy_starfish-apptea (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 837d85ce5c80df119c97ef475db40361389c46ac1b292a5bcda0af2856cfdcfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in spicy_starfish-apptea (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 837d85ce5c80df119c97ef475db40361389c46ac1b292a5bcda0af2856cfdcfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...