47 matches found
zeek-spicy-wireguard
zeek-spicy-wireguard This package provides a Spicy based Wireguard protocol analyzer for Zeek. You must install Spicy to use this package. This is a straightforward implementation following https://www.wireguard.com/protocol/ Wireguard Wireguard Logs separator \x09 setseparator , emptyfield empty...
zeek-spicy-ospf
zeek-spicy-ospf This is a Spicy based OSPF v2 & v3 packet analyzer for Zeek. You must install Spicy to use this package. Links: Original logic imported from https://github.com/s-wells/spicyparsers/tree/main/ospf, with author's permission. https://datatracker.ietf.org/doc/html/rfc2328...
zeek-spicy-ipsec
IPSec This is a Zeek protocol analyzer that detects IPSec VPN based on Spicy. You must install Spicy to use this package. A blog detailing the development of this analyzer: https://zeek.org/2021/04/20/zeeks-ipsec-protocol-analyzer/ RFCs: https://tools.ietf.org/html/rfc2406 ESP...
zeek-spicy-openvpn
zeek-spicy-openvpn This is a protocol analyzer that detects OpenVPN traffic. You must install Spicy to use this package. Blogs and webinars detailing the development of this protocol analyzer: https://zeek.org/2021/03/16/a-zeek-openvpn-protocol-analyzer/...
zeek-strrat-detector
A Zeek Based STRRAT Malware Detector This is a Zeek Spicy based STRRAT malware detector. PCAP https://app.any.run/tasks/4423258f-59bc-4a88-bfec-d8ac08c88538/ Example Output % zeek -Cr strrat-4423258f-59bc-4a88-bfec-d8ac08c88538.pcap zeek-strrat-detector % cat notice.log separator \x09 setseparato...
zeek-spicy-openvpn
zeek-spicy-openvpn OpenVPN 트래픽을 탐지하는 프로토콜 분석기입니다. 이 패키지를 사용하려면 Spicy를 설치해야 합니다. 이 프로토콜 분석기의 개발 과정을 다루는 블로그와 웨비나: https://zeek.org/2021/03/16/a-zeek-openvpn-protocol-analyzer/ https://zeek.org/2021/04/08/a-zeek-openvpn-protocol-analyzer-in-spicy/ https://event.webinarjam.com/replay/16/405xvaqawfzf...
zeek-spicy-stun
STUN Session Traversal Utilities for NAT STUN Se trata de un analizador de protocolo de Zeek que detecta STUN basado en Spicy. Debe instalar Spicy para usar este paquete. Este paquete creará dos logs: stun.log - Este log contiene todos los mensajes STUN. stunnat.log - Este log contiene las...
zeek-spicy-facefish
FacefishRootkit This Zeek+Spicy analyzer will detect the Facefish Linux rootkit C2 as described in: https://blog.netlab.360.com/sshstealerfacefishen/ https://blogs.juniper.net/en-us/threat-research/linux-servers-hijacked-to-implant-ssh-backdoor...
Regulators around the world are scrutinizing Grok over sexual deepfakes
Grok’s failure to block sexualized images of minors has turned a single “isolated lapse” into a global regulatory stress test for xAI’s ambitions. The response from lawmakers and regulators suggests this will not be solved with a quick apology and a hotfix. Last week we reported on Grok's apology...
EUVD-2025-94944
Malicious code in spicycephalopodz3n npm...
Malicious code in spicy_turkey_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6001ec14416892e42685654c67b3b5d8d813a3a3ae2ef3e1d90b7ed3ed8b26c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-117193 Malicious code in spicy_buzzard_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60570ff2093da23d0f35a2fddc33dc193cd314a1657346b7c5443cdd18854965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-88693
Malicious code in spicyangelfishz3n npm...
Malicious code in spicy_antlion_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f73e8889836e36e0440beed4d93f065bcf7bc7b5ad68d2f607fa6da6976995e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-74209
Malicious code in spicybasilisksilver-49 npm...
EUVD-2025-75567
Malicious code in spicystarfish-apptea npm...
Malicious code in spicy_starfish-apptea (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 837d85ce5c80df119c97ef475db40361389c46ac1b292a5bcda0af2856cfdcfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-75568
Malicious code in spicyspider-appteadev npm...
MAL-2025-109012 Malicious code in spicy_starfish-apptea (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 837d85ce5c80df119c97ef475db40361389c46ac1b292a5bcda0af2856cfdcfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...