xzutils_backdoor_obfuscation

xzutilsbackdoorobfuscation 이 스크립트는 XZ utils 공격CVE-2024-3094에 사용된 난독화 기법을 재현합니다. xzutils v5.6.0에서만 테스트되었습니다. ⚠️ 이 코드는 교육 목적으로만 제공되며 악의적인 활동에 사용되어서는 안 됩니다. 사용에 따른 책임은 본인에게 있습니다. ⚠️ 사전 요구사항 작업 폴더에 xzutils 5.6.0의 원본 good-largecompressed.lzma 파일이 있어야 합니다. 사용법 다음을 실행하세요. ./obfuscatepayload.sh yourpayload...

CVE-2024-3094_xz_check

CVE-2024-3094 xz 확인 스크립트 이 저장소에는 시스템이 CVE-2024-3094에 명시된 대로 취약한 버전의 "xz" 유틸리티를 실행 중인지 확인하는 Bash 스크립트와 한 줄 명령이 포함되어 있습니다. 아래는 RedHat https://access.redhat.com/security/cve/CVE-2024-3094 를 통해 제공되는 정보의 설명 및 영향 설명입니다: "5.6.0 버전부터 "xz"의 업스트림 타르볼에서 악성 코드가 식별되었습니다. 이 코드는 liblzma의 빌드 프로세스가 소스 코드 내의 위장된 테...

Symlink Attack

Overview flash-attention is a Flash Attention2 operator on Huawei Ascend 910A. Affected versions of this package are vulnerable to Symlink Attack via the downloadandcopy function in hopper/setup.py when extracting archives without validating symlinks or filtering tar members. An attacker can...

PT-2026-43231

Name of the Vulnerable Software and Affected Versions Collectric CMU version 1.0 Description An issue exists where unauthenticated attackers can manipulate database queries during authentication. This is achieved by injecting SQL code through the lang parameter in login requests, allowing the...

Web Intellectual Property at Risk: Preventing Unauthorized Real-Time Retrieval by Large Language Models

The protection of cyber Intellectual Property IP such as web content is an increasingly critical concern. The rise of large language models LLMs with online retrieval capabilities enables convenient access to information but often undermines the rights of original content creators. As users...

C2-Hunter - Extract C2 Traffic

C2-Hunter C2-Hunter is a program designed for malware analysts to extract Command and Control C2 traffic from malwares in real-time. The program uses a unique approach by hooking into win32 connections APIs. With C2-Hunter, malware analysts can now intercept and analyze communication in real-time...

Commit Stream - OSINT Tool For Finding Github Repositories By Extracting Commit Logs In Real Time From The Github Event API

commit-stream drinks commit logs from the Github event firehose exposing the author details name and email address associated with Github repositories in real time. OSINT / Recon uses for Redteamers / Bug bounty hunters: Uncover repositories which employees of a target company is commiting code...

Universal Man in the Browser Attacks

Researchers have discovered a new type of Man-in-the-Browser MItB attack that is Website independent, and does not target specific Websites, but instead collects data submitted to all sites. Trusteer have discovered a new Man in the Browser MitB scam that can collects data submitted to all websit...