BruteRatel-DetectionTools

BruteRatel-DetectionTools 一个用于解码 Brute Ratel C4 badger 的工具和规则集合 所有工具和规则均基于 PaloAlto 在其报告 https://unit42.paloaltonetworks.com/brute-ratel-c4-tool/ 中识别的样本 Yara 规则 该 Yara 规则已针对 Unit42 报告中包含的样本以及由该规则识别出的其他样本进行了测试 root@kitploit: ❯ yara rule.yar BruteRatel ./hacker.exe BruteRatel ./badgerx64.exe...

badger-builder

badger-builder badger-builder 是一个用于生成动态 Brute Ratel C4 配置文件的 AI 辅助工具。只需为 badger-builder 提供一个你所需配置文件的 风格（flavor） ，它就会向 OpenAI 提示以获取合适的配置。 由 AI 生成的监听器/载荷配置文件： C2 URI 请求/响应 HTTP 头部 附加在 C2 请求/响应之前和之后的 HTTP 正文数据 服务器的 空响应 HTTP 正文 HTTP 正文数据可以以 XML、JSON 或 JavaScript 生成（并且请求格式可以与响应格式不同）。 我始终建议检查 OpenAI...

privacybadger

プライバシーバッジャー Privacy Badgerは、隠れたトラッカーを自動的に学習してブロックするブラウザ拡張機能です。Privacy Badgerは、主要なデジタル権利非営利団体であるEFFによって作られ、企業があなたをスパイするのを防ぎます。 Privacy Badgerは、データ共有と販売をオプトアウトするためにGlobal Privacy Controlシグナルを送信し、企業にあなたを追跡しないように伝えるためにDo Not Trackシグナルを送信します。トラッカーがこれらのシグナルを無視した場合、Privacy Badgerはそれらをブロックすることを学習します。...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to the lack of authentication or authorization on the public gRPC port :9080 for the external snapshot import process. An attacker can overwrite and replace the database contents by sendi...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to the lack of authentication or authorization on the public gRPC port :9080 for the external snapshot import process. An attacker can overwrite and replace the database contents by sendi...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to the lack of authentication or authorization on the public gRPC port :9080 for the external snapshot import process. An attacker can overwrite and replace the database contents by sendi...

MAL-2026-3399 Malicious code in money-badger-open-rpc-test-bugbount (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35c3ecacb08f3cfb0b165eadaafd3a0d6acfffc34898a6149370c8cc9ba3843e The package money-badger-open-rpc-test-bugbount was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in money-badger-open-rpc-test-bugbount (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35c3ecacb08f3cfb0b165eadaafd3a0d6acfffc34898a6149370c8cc9ba3843e The package money-badger-open-rpc-test-bugbount was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in money-badger-open-rpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9d70a5231934ee14ab33334a3de0db40d5520fb4ef092a5a24cbdffff9751e The package money-badger-open-rpc was found to contain malicious code. Source: ghsa-malware...

MAL-2026-3353 Malicious code in money-badger-open-rpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9d70a5231934ee14ab33334a3de0db40d5520fb4ef092a5a24cbdffff9751e The package money-badger-open-rpc was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-102143

Malicious code in slowbadgerz3n npm...

EUVD-2025-101860

Malicious code in thoughtlessbadgerz3n npm...

EUVD-2025-102134

Malicious code in solebadgerz3n npm...

EUVD-2025-102088

Malicious code in stablebadgerz3n npm...

Malicious code in stable_badger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73330b901f9f071b56af1c93cf538fd1fe8b6edc5476db0781648efe8e76e7e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-100231

Malicious code in conventionalbadgerz3n npm...

Malicious code in sparkling_badger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb106169e5a9ee05da355d6958b8f2b7f5122c1d02d389b68bbbee8f1a6c832c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122509 Malicious code in philosophical_badger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758c37c85771c226cdaaf44cca0dc86081824795e79d49a07d8ec925f940686b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-92633

Malicious code in curlybadgerz3n npm...

MAL-2025-113251 Malicious code in curly_badger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e50ce55ac0c25beb451a1a1cff6e19d0127f88c1c06195b6eed058c4675c8e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...