UPDATE: Infection Monkey 1.6.1

PenTestIT RSS Feed I'm sure you must have read my previous post title the List of Adversary Emulation Tools. In that post, I briefly mentioned about the Guardicore Infection Monkey. Good news now is that it has been updated! We now have Infection Monkey 1.6.1. An important change about this versi...

sssd security, bug fix, and enhancement update

1.16.2-13 - Resolves: rhbz1593756 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing 1.16.2-12 - Resolves: rhbz1610667 - sssdssh leaks file descriptors when more than one certificate is converted into an SSH key - Resolves: rhbz1583360 - The IPA...

Eaton Xpert Meter 13.4.0.10 - SSH Private Key Disclosure

Eaton Xpert Meter 13.4.0.10 - SSH Private Key Disclosure Exploit Title: Eaton Xpert Meter 13.4.0.10 - SSH Private Key Disclosure Date: 2018-07-16 WebPage: https://CTRLu.net/ Vendor Homepage: http://www.eaton.com/ Vendor Advisory:...

coffe-script is malware

The coffe-script package is a piece of malware that steals sensitive data such as a user's private SSH key and bash history, sending them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation If you have found coffe-script installed in your...

Inteno IOPSYS - (Authenticated) Local Privilege Escalation Exploit

Exploit for linux platform in category local exploits !/usr/bin/python import json import sys import subprocess import socket import os from websocket import createconnection def ubusAuthhost, username, password: ws = createconnection"ws://" + host, header = "Sec-WebSocket-Protocol: ubus-json" re...

Inteno’s IOPSYS - (Authenticated) Local Privilege Escalation

!/usr/bin/python import json import sys import subprocess import socket import os from websocket import createconnection def ubusAuthhost, username, password: ws = createconnection"ws://" + host, header = "Sec-WebSocket-Protocol: ubus-json" req = json.dumps"jsonrpc":"2.0","method":"call",...

Malicious Typo-Squatting

coffescript is a maliciously typo-squatting package. During the installation of these packages, the user’s private SSH key and bash history are set to a third party server...

Malicious Typo-Squatting

cofeescript is a maliciously typo-squatting package. During the installation of these packages, the user’s private SSH key and bash history are set to a third party server...

Malicious Typo-Squatting

cofee-script is a maliciously typo-squatting package. During the installation of these packages, the user's private SSH key and bash history are set to a third party server...

Malicious Typo-Squatting

coffe-script is a maliciously typo-squatting package. During the installation of these packages, the user's private SSH key and bash history are set to a third party server...

CVE-2017-16205

The coffescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...

Information disclosure

The cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...

CVE-2017-16203

The coffe-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...

CVE-2017-16206

The cofee-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...

CVE-2017-16202

The cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...

CVE-2017-16206: Exposure of Sensitive Information to an Unauthorized Actor

The cofee-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...

CVE-2017-16204: Embedded Malicious Code

The jquey module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...

CVE-2017-16202: Embedded Malicious Code

The cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...

CVE-2017-16205: Embedded Malicious Code

The coffescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...

PT-2018-6231

Name of the Vulnerable Software and Affected Versions: jquey versions affected versions not specified Description: The jquey module is malware that attempts to discover and exfiltrate sensitive data, including a user's private SSH key and bash history, sending them to attacker-controlled location...