tinyshell

tinyshell 작은 PHP 셸, Python 클라이언트에 의해 제어되며 프로토콜 메서드를 통해 연결합니다 기능 리버스 연결 없이 직접 세션으로 연결 가능 비밀번호 보호 지원 파일 손상 없이 모든 파일에 바인딩 가능 오류 처리를 포함한 GET/POST 요청 사용 사용법 프로젝트는 두 개의 파일로 구성됩니다: Remote shell python file : 대상과 연결하기 위한 클라이언트로 간주됨 python remote shell.py url password php shell php file : PHP 백도어로 간주됨...

tsh-sctp

Tiny SHell - An open-source UNIX backdoor Before compiling Tiny SHell 1. First of all, you should setup your secret key, which is located in tsh.h; the key can be of any length use at least 12 characters for better security. 2. It is advised to change SERVERPORT, the port on which the server will...

Malware targeting SonicWall devices could survive firmware updates

Researchers at Mandiant have identified a malware campaign targeting SonicWall SMA 100 Series appliances, thought to be of Chinese origin. The malware was likely deployed in 2021, and was able to persist on the appliances tenaciously, even surviving firmware upgrades. The malware was able to stea...

China-linked Hackers Targeting Unpatched SonicWall SMA Devices with Malware

A suspecting China-linked hacking campaign has been observed targeting unpatched SonicWall Secure Mobile Access SMA 100 appliances to drop malware and establish long-term persistence. "The malware has functionality to steal user credentials, provide shell access, and persist through firmware...

LightBasin Hackers Breach at Least 13 Telecom Service Providers Since 2019

A highly sophisticated adversary named LightBasin has been identified as behind a string of attacks targeting the telecom sector with the goal of collecting "highly specific information" from mobile communication infrastructure, such as subscriber information and call metadata. "The nature of the...

tinyshell - Python Client with PHP Shell

python Client with php shell , allows to connect and send commands over current protocol using POST and GET Requests Features 1. connect with direct session with no need for reverse connection . 2. support password protection . 3. can be binded to any file with no damage . 4. using GET/POST reque...

Chinese Government targets Uyghur group by malware attack

An old vulnerability in Word for OS X is being used in increasing levels of attacks, probably government-sponsored hacking programs against Uyghur group, including Tibetans, NGOs and human rights organizations. A number of attacks have been seen directed at the World Uyghur Congress, a Munich-bas...