Untitled attachment

Notices where this attachment appears

1. Embed this notice
   Kevin Beaumont (gossithedog@cyberplace.social)'s status on Tuesday, 02-Apr-2024 06:05:09 JST Kevin Beaumont

   in reply to

   .@amlw wrote a great proof of concept for #XZ to allow code execution via ssh.

   Very important note: it doesn’t work in the wild as you need the private key, which only the threat actor(s) have. But you can create your own for exploiting your own servers.

   https://github.com/amlweems/xzbot