堆栈
Kanalga Telegram’da o‘tish
Just a Resource Site 正如我们享受他人带来的巨大便利一样,我们也应该乐于有机会让自己为他人服务,而且我们应该免费并慷慨地这么做 最后编辑于2019年1月29日 (星期二) 02:57
Ko'proq ko'rsatish601
Obunachilar
Ma'lumot yo'q24 soatlar
Ma'lumot yo'q7 kun
Ma'lumot yo'q30 kun
Postlar arxiv
601
sshd_后门
该项目基于 BlackHat USA 2021 和 Defcon 29。
关于使用 ebpf 技术,在 sshd 服务期间劫持进程获取 ~/.ssh/authorized_keys 以授权用户登录并注入我们的公钥使我们的登录成功。
make help
|=======================================================================================================
|usage:
| build: build full sshd_backdoor cli tool. But full sshd_backdoor is just supoorted the demo only
| generate: Generate the ebpf prog in kernel with clang.
| if you need you can set the CFLAGS to append
| test_ebpf: if you editing the ebpf-c c files and header files
| to test the ebpf can be compiled and pass ebpf verifier when load
| tool_unload: bpftool unload progs.
| tool_load: bpftool load progs.
| bpftrace_keylogging: logging sshd keys.Also it can catch the passwords when logging
https://github.com/Esonhugh/sshd_backdoor
601
Repost from TG信息安全共享频道
🔥sshd_backdoor is based on BlackHat USA 2021 and Defcon 29.
About Using ebpf technique, hijacking the process during sshd service getting the
~/.ssh/authorized_keys to authorize user logging and injecting our public key make our login successful.
Main Process in ebpf program:
💾Hook OpenAt syscall enter: check if the sshd process call this, log the pid of sshd.
💾Hook OpenAt Syscall exit: check the pid logged. logging the fd of pid, map pid➡️fd.
💾Hook Read Syscall enter: check the pid logged. logging the user_space_char_buffer of pid.
💾Hook Read Syscall exit: check the pid logged. find the buffer and change the buffer into our Key. Then delete pid in map to avoid blocking administrators' keys be read.
📺Demo601
复制脑瘫csdn内容
f12打开控制台,输入
javascript:document.body.contentEditable='true';document.designMode='on'; void 0601
关于RealTool
RealTool是一款获取直播源链接的软件,支持获取【斗鱼】【虎牙】【B站】【抖音】【YY】【酷我】【酷狗】【一直播】的直播源链接,并且支持录制等功能!
推荐用MPV播放器
PotPlayer播放器看久了会停止,MPV播放器则没有这个问题
MPV播放器官网
关于开源
本软件的获取链接是基于
获取直播源开源链接wbt5:https://github.com/wbt5/real-url
m3u8录制开源链接nilaoda:https://github.com/nilaoda/N_m3u8DL-RE
感谢两位大佬的开源项目
RealTool开源项目链接:https://github.com/s282730788/RealTool
601
ShareX功能多到夸张内建有萤幕撷图的功能,还支援圆角方形、椭圆形、三角形、多边形等等的撷取范围,也还有萤幕录影的功能,能将图片输出成动态的 GIF 档案。在萤幕撷图之后有各种动作的设定,有浮水印、边框、注解、复制到剪贴簿、列印图片、存档、另存新档与上传图片,这些功能老实说颇实在的,能有比较广泛的应用。
