Anthony Weems (@amlweems) 's Twitter Profile
Anthony Weems

@amlweems

Cloud Vulnerability Research • The opinions stated here are my own, not those of my company.

ID: 14378227

linkhttp://amlw.dev calendar_today13-04-2008 21:43:53

178 Tweet

3,3K Takipçi

267 Takip Edilen

Anthony Weems (@amlweems) 's Twitter Profile Photo
Anthony Weems
@amlweems

a year ago

I've been reverse engineering the xz backdoor this weekend and have documented the payload format and written a proof-of-concept exploit for the RCE. The payloads are signed with an ED448 key, so I patched my own key into the backdoor for testing. :-) github.com/amlweems/xzbot

I've been reverse engineering the xz backdoor this weekend and have documented the payload format and written a proof-of-concept exploit for the RCE. The payloads are signed with an ED448 key, so I patched my own key into the backdoor for testing. :-) github.com/amlweems/xzbot