traitor

Traitor 自動的に簡単な標的を悪用して root シェルを取得します。Linux の権限昇格を簡単にします！ Traitor は、root シェルを取得するために、ローカルの設定ミスや脆弱性を悪用する多数の手法をパッケージ化しています： ほぼすべての GTFOBins 書き込み可能な docker.sock CVE-2022-0847 Dirty pipe CVE-2021-4034 pwnkit CVE-2021-3560 GTFOBins に掲載されているほとんどの sudo 権限を悪用して root シェルを取得するほか、書き込み可能な docker.sock や最近の...

North Korean Hacker Group Andariel Strikes with New EarlyRat Malware

The North Korea-aligned threat actor known as Andariel leveraged a previously undocumented malware called EarlyRat in phishing attacks, adding another piece to the group's wide-ranging toolset. "Andariel infects machines by executing a Log4j exploit, which, in turn, downloads further malware from...

FBI Says North Korean Hackers Behind $100 Million Horizon Bridge Crypto Theft

The U.S. Federal Bureau of Investigation FBI on Monday confirmed that North Korean threat actors were responsible for the theft of $100 million in cryptocurrency assets from Harmony Horizon Bridge in June 2022. The law enforcement agency attributed the hack to the Lazarus Group and APT38 aka...