Skip To Main Content
Linux devices on Muck Rack

Linux devices

As seen in: CSDN
Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work. Claim your profile
Back to Linux devices’s profile

Articles by Linux devices

#StopRansomware: ALPHV Blackcat

|
By Linux devices, Design webpage, Mega sync, such as Plink
| vde.com
2023-12-19 15:31 (CET) US CERT SUMMARY Note: This joint Cybersecurity Advisory (CSA) is part of an ongoing #StopRansomware effort to publish advisories for network defenders that detail various ransomware variants and ransomware threat actors. These #StopRansomware advisories include recently and historically observed tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) to help organizations protect against ransomware.
Open in Who Shared View Duplicates (5) Issue with article?

C++实现pcap包解析，并提取指定特征帧_linux c++ pcap_阿D苦练挖洞的博客-CSDN博客

|
By Linux devices
| CSDN
目录 最近这几天观察到了一个木马的网络通信特征，于是就打算通过代码实现针对该木马的检测过滤。刚开始学长提供了python编写的代码。但是在实际的工作中，每天所捕获的pcap包的数据总量很大，通常在5到15个G左右。这种情况下，python的运行时间极长，且占用大量的系统运行内存，甚至会出现卡死情况。于是我尝试用C去实现木马的过滤，因为C是偏底层的编程语言，可以自定义通信协议，所以其运行效率会更高。 一、木马通信特征 1.流量结构 该木马拥有其自定义的通信协议，通信数据包具有一定的结构，数据在构造后会通过异或XOR加密（加密密钥是第二个字节），部分命令会有附加数据（如上传文件），附加数据部分会通过GZIP方式压缩。 2.类C结构 struct packet_format{ char dec_xor[2]; char unknow1[4]; char constant_l; char random_32[32]; char command_type[2]; char unknow2[4]; char error_status[2]; char payload_length[4];...
Open in Who Shared Issue with article?

FreakOut malware worms its way into vulnerable VMware servers

|
By Sophia Kingsbury, Linux devices, Sco OpenServer, Terra Master
| seclists.org
BreachExchange mailing list archives By Date By Thread FreakOut malware worms its way into vulnerable VMware servers From: Sophia Kingsbury <sophia.kingsbury () riskbasedsecurity com> Date: Fri, 4 Jun 2021 16:51:33 -0400 https://www.bleepingcomputer.com/news/security/freakout-malware-worms-its-way-into-vulnerable-vmware-servers/ A multi-platform Python-based malware targeting Windows and Linux devices has now been upgraded to worm its way into Internet-exposed VMware vCenter servers unpatched...
Open in Who Shared Issue with article?
Show More