Zum Hauptinhalt springen
tsecurity.de LIVE
Echtzeit-Radar & Feeds
Alle RSS Feeds
👥 Community & Social
YouTube Security VideosMicrosoft Developer: Skill up on Copilot Studio Oct 8th!(24.09.2026 um 01:01 Uhr)
Sichere Programmierung🦄 Sharing DEV Followers Count on Github Profile 🦄(24.09.2026 um 00:42 Uhr)
Sichere ProgrammierungHow I Would Build a Private AI Coding Workstation in 2026(24.09.2026 um 00:46 Uhr)
Sichere ProgrammierungBuilding a TWAP Distance-Based Polymarket Trading Strategy(24.09.2026 um 00:50 Uhr)
Sichere ProgrammierungMy factual-recall tasks were scoring format, not facts(24.09.2026 um 01:15 Uhr)
YouTube Security VideosMicrosoft Developer: Skill up on Copilot Studio Oct 8th!(24.09.2026 um 01:01 Uhr)
Sichere Programmierung🦄 Sharing DEV Followers Count on Github Profile 🦄(24.09.2026 um 00:42 Uhr)
Sichere ProgrammierungHow I Would Build a Private AI Coding Workstation in 2026(24.09.2026 um 00:46 Uhr)
Sichere ProgrammierungBuilding a TWAP Distance-Based Polymarket Trading Strategy(24.09.2026 um 00:50 Uhr)
Sichere ProgrammierungMy factual-recall tasks were scoring format, not facts(24.09.2026 um 01:15 Uhr)
Intelligence View
⚡ tsecurity.de Intelligence

bridge41

package comet.agent; import net.bytebuddy.agent.builder.AgentBuilder; import net.bytebuddy.asm.Advice; import net.bytebuddy.description.type.TypeDescription; import net.bytebuddy.dynamic.DynamicType; import…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

package comet.agent;

import net.bytebuddy.agent.builder.AgentBuilder;
import net.bytebuddy.asm.Advice;
import net.bytebuddy.description.type.TypeDescription;
import net.bytebuddy.dynamic.DynamicType;
import net.bytebuddy.matcher.ElementMatchers;
import net.bytebuddy.utility.JavaModule;
import java.lang.instrument.Instrumentation;
import java.io.*;
import java.nio.file.*;
import java.util.*;
import java.util.concurrent.*;
import java.util.concurrent.atomic.LongAdder;
import java.text.SimpleDateFormat;
import java.util.jar.JarFile;

public class ProfilerAgent {
// MUST BE PUBLIC: To be seen by instrumented classes
public static final ConcurrentHashMap<String, Stats> metrics = new ConcurrentHashMap<>();
private static final SimpleDateFormat sdf = new SimpleDateFormat("yyyy-MM-dd HH:mm:ss");

public static void agentmain(String agentArgs, Instrumentation inst) {
try {
File agentJar = new File(ProfilerAgent.class.getProtectionDomain()
.getCodeSource().getLocation().toURI());
if (agentJar.exists()) {
inst.appendToBootstrapClassLoaderSearch(new JarFile(agentJar));
}
} catch (Exception e) {
System.err.println("PROFILER: Bootstrap injection failed: " + e.getMessage());
}
premain(agentArgs, inst);
}

public static void premain(String agentArgs, Instrumentation inst) {
List<String> targetClasses = loadClasses("profiler_targets.txt");
startReporter(60, ".");

new AgentBuilder.Default()
.with(AgentBuilder.RedefinitionStrategy.RETRANSFORMATION)
// Manual Circularity Lock to avoid the "Symbol Not Found" error
.with(new AgentBuilder.CircularityLock() {
private final ThreadLocal<Boolean> lock = new ThreadLocal<Boolean>() {
@Override protected Boolean initialValue() { return false; }
};
@Override public boolean acquire() { if (lock.get()) return false; lock.set(true); return true; }
@Override public void release() { lock.set(false); }
})
.ignore(ElementMatchers.none())
.type(builder -> {
String name = builder.getName();
if (name.startsWith("comet.agent.") || name.startsWith("net.bytebuddy.")) return false;
return targetClasses.contains(name);
})
.transform((builder, typeDescription, classLoader, module) ->
builder.method(ElementMatchers.any()
.and(ElementMatchers.not(ElementMatchers.isAbstract()))
.and(ElementMatchers.not(ElementMatchers.isNative())))
.intercept(Advice.to(ProfilerAdvice.class))
)
.installOn(inst);
}

private static List<String> loadClasses(String path) {
try { return Files.readAllLines(Paths.get(path)); }
catch (Exception e) { return Collections.emptyList(); }
}

public static class ProfilerAdvice {
// MUST BE PUBLIC: This was causing your "tried to access field" crash
public static final Set<String> seenMethods = Collections.newSetFromMap(new ConcurrentHashMap<String, Boolean>());

@Advice.OnMethodEnter
static long enter(@Advice.Origin("#t.#m") String methodName) {
// Use absolute path so the inlined code knows exactly where to look
if (comet.agent.ProfilerAgent.ProfilerAdvice.seenMethods.add(methodName)) {
System.out.println(">>> HEARTBEAT: First call in " + methodName);
System.out.flush();
}
return System.nanoTime();
}

@Advice.OnMethodExit(onThrowable = Throwable.class)
static void exit(@Advice.Enter long start, @Advice.Origin("#t.#m") String methodName) {
if (start == 0L) return;
long duration = System.nanoTime() - start;

// Use absolute paths for metrics and Stats
comet.agent.ProfilerAgent.Stats s = comet.agent.ProfilerAgent.metrics.get(methodName);
if (s == null) {
comet.agent.ProfilerAgent.metrics.putIfAbsent(methodName, new comet.agent.ProfilerAgent.Stats());
s = comet.agent.ProfilerAgent.metrics.get(methodName);
}
s.record(duration);
}
}

// MUST BE PUBLIC
public static class Stats {
public final LongAdder count = new LongAdder();
public final LongAdder totalTime = new LongAdder();
public void record(long nanos) {
count.increment();
totalTime.add(nanos);
}
}

private static void startReporter(int seconds, String outputDir) {
Executors.newSingleThreadScheduledExecutor().scheduleAtFixedRate(() -> {
String timestamp = sdf.format(new Date());
File csvFile = new File(outputDir, "profiler_report.csv");
try (PrintWriter pw = new PrintWriter(new BufferedWriter(new FileWriter(csvFile, true)))) {
metrics.forEach((method, stats) -> {
long c = stats.count.sumThenReset();
long t = stats.totalTime.sumThenReset();
if (c > 0) {
pw.printf("%s,%s,%d,%.4f,%.2f%n", timestamp, method, c, (t/(double)c)/1000000.0, t/1000000.0);
}
});
pw.flush();
System.out.println("PROFILER: Report flushed at " + timestamp);
System.out.flush();
} catch (Exception e) { e.printStackTrace(); }
}, seconds, seconds, TimeUnit.SECONDS);
}
}


IoC Intelligence (1 Indikatoren)
advice[.]to
CTI Threat Relationship Graph2 Knoten / 1 Relationen
CVE / Incident Software MITRE ATT&CK CWE Weakness IoC
IR-PLAYBOOK-RCE
HIGH
SOC Incident Playbook: Remote Code Execution (RCE) Defense
1-Click Detection Engineering: Sigma & YARA Rules
SOC Ready
title: Detect Exploitation - bridge41
id: ab874cec-10d5-462d-966a-3fd76221f7c6
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
  category: network_connection
  product: any
detection:
  selection:
      DestinationHostname:
        - 'advice.to'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-24"
        description = "YARA Signature for "
    strings:
        $str = "bridge41" ascii wide
    condition:
        any of them
}
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten bridge41

Thematisch verwandte Begriffe: bridge41 · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-96550 | A vulnerability was found in sfturing hosp_order up to 627f426331da8086c…
Advisory →
TTS Reader • tsecurity.de Voice
tsecurity.de Icon
tsecurity.de App
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
🔖 Gespeicherte Artikel
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel Rechts: nächster Artikel unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel TTP ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...

Zurück: vorheriger Vor: nächster
↗ Original-Quelle
Social Reaktionen Deine Reaktion zählt
Einstufung & Relevanz-Poll 0 Stimmen
In sozialen Netzwerken teilen 1-Klick