CS50FinalProject

CS50 Intro to Cybersecurity – Final Project Case Study: XZ Utils Backdoor CVE-2024-3094 This repository supports my 7-10 minute presentation on the XZ Utils backdoor, including a recap of the backdoor, the mechanism for the backdoor via release tarballs, and relevant supply-chain mitigations...

xz-backdoor-vulnerability

This repository does not have a README...

xzbot

xzbot Esplorazione della backdoor xz CVE-2024-3094. Include quanto segue: honeypot: falso server vulnerabile per rilevare i tentativi di exploit patch ED448: patch di liblzma.so per usare la nostra chiave pubblica ED448 formato della backdoor: formato del payload della backdoor demo della backdoo...

xz-backdoor-scan

Scan for files containing the signature from the xz backdoor CVE-2024-3094. Rapidly scans files and reports back with any files found to contain the signature used in the backdoor. WARNING: Do not trust this program to be correct or alert you about the presence of a backdoor. This is a proof of...

CVE-2026-14266

CVE-2026-14266 PoC: 7-Zip XZ Heap-Buffer-Overflow-PoC-Generator Proof-of-Concept-Generator zur Reproduktion der XZ-Heap-Buffer-Overflow-Schwachstelle in 7-Zip. Das Skript erstellt ein speziell präpariertes .xz-Archiv, das dazu dient, die Absturzbedingung im verwundbaren multithreaded...

-CVE-2024-3094-Vulnerability-Checker-Fixer-Public

Show Your Support If you find this script useful and it has helped you safeguard your systems against CVE-2024-3094, please consider giving it a star ⭐ . Starring this repository not only shows your support but also helps more people discover and benefit from our collective effort to improve...

cve-2024-3094-detect

CVE-2024-3094-detect XZ Utils Vulnerability Check and Downgrade Script This script is designed to check the version of XZ Utils installed on your Linux system and downgrade it to a safe version if necessary. It also detects the Linux distribution and the package manager used. Features Checks the...

CVE-2024-3094-Checker

CVE-2024-3094 Checker The CVE-2024-3094 Checker is a powerful Bash script designed for Linux systems. It identifies vulnerability to CVE-2024-3094, related to XZ/LZMA utilities. This script is essential for system administrators and security professionals to quickly assess and mitigate potential...

CVE-2024-3094-One-Liner

CVE-2024-3094 One Liner Vulnerability Checker This repository provides simple yet powerful one-liner scripts designed to help you quickly determine if your server is vulnerable to CVE-2024-3094, a critical security vulnerability found in certain versions of the xz utility. Additionally, we offer ...

CVE-2024-3094-XZ-Backdoor-Detector

Description Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific...

xz-utils-vuln-checker

/ / / / | |/// / / / / / / / / / / / / / / //// // / / / / / / / //|| // ,/ / // // // Hare Krishna Rai 0xblurr3d / / / / / / | | / / / / / / / / / \ / / / \ / \ / / / /// / \ / / | |/ / / // / / / / / / //// / / / / // // / / , / / / / |/ ,/ // // // / // // / / //|| / // CVE-2024-3094 +...

CVE-2024-3094-check

CVE-2024-3094 vul check tools This vulnerability allows an attacker to log into the server and execute arbitrary code without passing SSH authentication. For details, please see: https://www.openwall.com/lists/oss-security/2024/03/29/4 use curl -fsSL...

xz-backdoor-CVE-2024-3094-Check

xz-backdoor-CVE-2024-3094-Check Verify if your installed version of xz-utils is vulnerable to CVE-2024-3094 backdoor. This check is for Kali Linux or other Debian based installs. Usage git https://github.com/Bella-Bc/xz-backdoor-CVE-2024-3094-Check.git cd xz-backdoor-CVE-2024-3094-Check chmod +x...

CVE-2024-3094-checker

CVE-2024-3094 checker xz Utils versions 5.6.0 and 5.6.1 appear to be compromised. XZ Utils is data compression software and may be present in Linux distributions. The malicious code may allow unauthorized access to affected systems. Sources: https://vulners.com/cve/CVE-2024-3094...

threat-intel-cve-2024-3094

Threat Intelligence Report: CVE-2024-3094 – XZ Utils Backdoor This repository contains a threat intelligence report analyzing CVE-2024-3094 , a high-profile backdoor vulnerability discovered in the xz-utils compression tool in 2024. CVE-2024-3094 is a severe supply chain compromise where a...

xzk8s

xzk8s Dockerfile e manifest Kubernetes per riprodurre CVE-2024-3094 Crea l'immagine Usiamo la versione Debian delle utilità xz vulnerabili come immagine di base. Dobbiamo anche patchare la libreria. La versione patchata della libreria liblzma è presa dal repository xzbot. FROM...

CVE-2026-41567

CVE-2026-41567 1day One day for Docker Escape CVE-2026-41567. It is a demonstration of docker escape using trojanized xz / unpigz. It can be easily modified to be used remotely i.e. just modify the docker default IP with a remote C2. More information on the exploit here PoC Run a netcat listening...

cs50-cybersecurity-final-project

Technical Analysis of CVE-2024-3094: XZ Utils Supply Chain Backdoor Video Demo: https://youtu.be/3xBtabSkusE?si=ChN3nBgybK4nqNLz Description: An in-depth technical and architectural breakdown of CVE-2024-3094 CVSS 10.0 Critical, the historic open-source supply chain backdoor embedded into xz-util...

xz-backdoor-links

apocalypxze: xz backdoor 2024 AKA CVE-2024-3094 related links Yet another attempt at collecting links relevant to xz backdoor 2024 aka CVE-2024-3094. "Apocalypxze" term borrowed from Jonathan Corbet's toot. Raw version: https://github.com/przemoc/xz-backdoor-links/blob/main/index.mm.md HTML...

CVE-2024-3094

Security Review & Threat Model: CVE-2024-3094 xz-utils / OpenSSH This repository contains the results of analyzing the critical vulnerability CVE-2024-3094 backdoor in the liblzma library of the xz-utils package, leading to RCE via the OpenSSH process. As part of the project, an isolated test...