Fnord

Fnord Fnord 是一个用于混淆代码的模式提取器 描述 Fnord 有两个主要功能： 1. 提取字节序列并生成统计信息 2. 利用这些统计信息，结合序列长度、出现次数、相似性和关键词来创建 YARA 规则 1. 统计 Fnord 使用大小可变的滑动窗口处理文件，提取所有长度从 -m X（默认：4）到 -x X（默认：40）的序列。对于每个长度，Fnord 将以表格形式展示出现最频繁的序列 -t X（默认：3）。 表格中的每一行包含： 长度 出现次数 序列（字符串） 格式化（ASCII/宽/十六进制） 十六进制编码形式 熵 2. YARA 规则创建 Fnord 还会生成一条实验性的...

EUVD-2003-1548

Malware in sbrugna...

Fnord - Pattern Extractor For Obfuscated Code

Fnord is a pattern extractor for obfuscated code Description Fnord has two main functions: 1. Extract byte sequences and create some statistics 2. Use these statistics, combine length, number of occurrences, similarity and keywords to create a YARA rule 1. Statistics Fnord processes the file with...

CVE-2003-1558

Buffer overflow in httpd.c of fnord 1.6 allows remote attackers to create a denial of service crash and possibly execute arbitrary code via a long CGI request passed to the docgi function...

CVE-2003-1558

Vulnerability: CVE-2003-1558 affects fnord 1.6,×specifically the httpd.c do_cgi function. The issue is a buffer overflow caused by a long CGI request. Impact: Remote attackers can cause a denial of service (crash) and may potentially execute arbitrary code. Details: Described as a buffer overflow...

CVE-2003-1558: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in httpd.c of fnord 1.6 allows remote attackers to create a denial of service crash and possibly execute arbitrary code via a long CGI request passed to the docgi function...

CVE-2003-1558

Buffer overflow in httpd.c of fnord 1.6 allows remote attackers to create a denial of service crash and possibly execute arbitrary code via a long CGI request passed to the docgi function...