Linux Malicious Process Detection

Binary data linuxmalwarescan.nbin...

Mac OS X Malicious Process Detection

Binary data macosxmalwarescan.nbin...

Malicious Process Detection: User Defined Malware Running

Binary data wmimalwareusermd5s.nbin...

Malicious Process Detection: Malware Signed By Stolen Bit9 Certificate

Binary data wmibit9running.nbin...

Malicious Process Detection: APT1 Software Running

Binary data wmiapt1running.nbin...

Malicious Process Detection: Potentially Unwanted Software

Binary data wmiunwantedsoftware.nbin...

Malicious Process Detection

Binary data wmimalwarescan.nbin...

McAfee SaaS MyCioScan ShowReport Remote Command Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Mandiant First Response多个拒绝服务及代理劫持漏洞

Mandiant First Response是一款事件响应工具，用于收集所运行进程、系统服务之类的系统信息。 Mandiant First Response中存在多个安全漏洞，具体如下： 1 畸形客户端请求导致SSL代理拒绝服务 如果以守护程序模式运行的话，First Response代理（FRAgent.exe）会通过HTTP或修改过的HTTPS实现接受First Response控制台的远程连接。如果攻击者向启用了SSL的代理发送了一系列特制请求的话，就会强制代理出现异常，之后代理的套接字会陷入无限的CLOSEWAIT状态，所有之后的连接尝试也都会被拒绝，必须重启服务才能恢复连接。...

Sniffer Sniffer to get back on the machine lost QQ number-vulnerability warning-the black bar safety net

Hot long-awaited QQ communication tool, not only to the crawlers of communication brings convenience, but it also in the surf the Internet, play an integral role, it is a“Gabriel and no harm,”the communication software. That is why, for a hacker to“peg”wantonly on the user's machine, mad Pirates ...

CVE-2005-0964

Unknown vulnerability in Kerio Personal Firewall 4.1.2 and earlier allows local users to bypass firewall rules via a malicious process that impersonates a legitimate process that has fewer restrictions...

CVE-2005-0964

Kerio Personal Firewall 4.1.2 and earlier has a local bypass vulnerability where a malicious process impersonates a legitimate, less-restricted process to bypass firewall rules. This can allow local users to circumvent protections. The CVE entry notes a MEDIUM impact (base score 4.6); no specific...