This Equation Group leak looks legit, fun (or someone had a *lot* of free time to fake it). C&C tool:pic.twitter.com/AU7KX57EWl
-
ELIGIBLEBACHELOR exploits whatever custom protocol this is (TCP port 4000) on Chinese TOPSEC firewalls.pic.twitter.com/7PbGczY0YJ
EGREGIOUSBLUNDER exploits an overflow in the authentication cookie on FortiGate firewalls.pic.twitter.com/eFc7Hw79Oy
-
-
How the hell a firewall vendor manages to screw up authentication cookie parsing is beyond me. That's PHP-Nuke level fail.
-
The sad thing is that all of these Equation Group exploits are totally boring, trivial stuff. None of it is particularly impressive.
- Show replies
New conversation -
-
-
isnt that for tunnelling with NOPEN? its a c2 type code that tunnels through firewalls...
-
NOPEN is their backdoor/RAT tool (noserver and noclient). The exploit eventually installs it on the target.
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.