11 matches found
cve-2024-3094
How to detect the CVE-2024-3094 I'll walk through the step-by-step process of detecting CVE-2024-3094, commonly known as the XZ Backdoor, in containers using Trend Micro's Vision One TMAS CLI. This vulnerability presents significant risks to containerized environments, and with the right tools an...
xz-backdoor-github
xz-backdoor-github History of commits related to the xz backdoor Discovered On March 29, 2024: CVE-2024-3094. Currently GitHub has taken down the repos for ToS violations. The purpose of this is to faciliate security research of how this backdoor was snuck in over the course of 2 years of active...
ludus_xz_backdoor
Ansible Role: xz backdoor CVE-2024-3094 for Ludus An Ansible Role that installs the xz backdoor CVE-2024-3094 on a Debian host and optionally installs the xzbot tool. !WARNING This role deploys malware on purpose! Without exposing the host to the internet you should be safe, but it's still malwar...
ansible-CVE-2024-3094
ansible-CVE-2024-3094 Ansible playbooks designed to check and remediate CVE-2024-3094 XZ Backdoor. These were developed with guidance from https://jfrog.com/blog/xz-backdoor-attack-cve-2024-3094-all-you-need-to-know/. Background Running the checks to see if your Linux system is vulnerable is simp...
xz-backdoor-scan
Scan for files containing the signature from the xz backdoor CVE-2024-3094. Rapidly scans files and reports back with any files found to contain the signature used in the backdoor. WARNING: Do not trust this program to be correct or alert you about the presence of a backdoor. This is a proof of...
xz-backdoor-links
apocalypxze: xz backdoor 2024 AKA CVE-2024-3094 related links Yet another attempt at collecting links relevant to xz backdoor 2024 aka CVE-2024-3094. "Apocalypxze" term borrowed from Jonathan Corbet's toot. Raw version: https://github.com/przemoc/xz-backdoor-links/blob/main/index.mm.md HTML...
Exploit for Embedded Malicious Code in Tukaani Xz
XZ Backdoor Labs CVE-2024-3094 Safe, hands-on labs for...
Exploit for Embedded Malicious Code in Tukaani Xz
ansible-CVE-2024-3094 Ansible playbooks designed to check and...
The XZ Backdoor: Everything You Need to Know
Details are starting to emerge about a stunning supply chain attack that sent the open source software community reeling...