Possibly linux ( possiblylinux127@lemmy.zip ) to Linux@lemmy.mlEnglish · 3 years agoXZ backdoor in a nutshelllemmy.zipimagemessage-square54linkfedilinkarrow-up1711 cross-posted to: linux@lemmy.eco.br
arrow-up1711imageXZ backdoor in a nutshelllemmy.zipPossibly linux ( possiblylinux127@lemmy.zip ) to Linux@lemmy.mlEnglish · 3 years agomessage-square54linkfedilink cross-posted to: linux@lemmy.eco.br
minus-squareThe Doctor ( drwho@beehaw.org ) linkfedilinkEnglisharrow-up8·3 years agoSomebody wrote a PoC for it: https://github.com/amlweems/xzbot#backdoor-demo Basically, if you have a patched SSH client with the right ED448 key you can have the gigged sshd on the other side run whatever commands you want. The demo just does id > /tmp/.xz but it could be whatever command you want.
Somebody wrote a PoC for it: https://github.com/amlweems/xzbot#backdoor-demo
Basically, if you have a patched SSH client with the right ED448 key you can have the gigged sshd on the other side run whatever commands you want. The demo just does
id > /tmp/.xzbut it could be whatever command you want.