EILMELDUNGEN LIVE
YouTube Security VideosMicrosoft Developer: Stop wiring infrastructure, start building agents(29.10.2026 um 17:45 Uhr)
•
Linux Tipps & HardeningDistribution Release: Linux Lite 8.2(31.10.2026 um 21:32 Uhr)
•
Sichere ProgrammierungThe Ghost Doesn't Need the Cloud: Building a Local AI Music Curator with Gemma 3(31.10.2026 um 21:45 Uhr)
•
Sichere ProgrammierungGoogle Disables Discover AI Source-Tap Test After Confirming a Bug(31.10.2026 um 21:45 Uhr)
•
Sichere ProgrammierungHow do you know if your coding agent's instructions are getting better?(31.10.2026 um 21:45 Uhr)
•
Sichere ProgrammierungModel Context Protocol (MCP) with InterSystems IRIS - From Zero to Hero(31.10.2026 um 21:45 Uhr)
•
Sichere Programmierung"Keys of the Departed": Ghost Account Hunter - Uncovering the Dead Identities Still Haunting Our Systems(31.10.2026 um 21:46 Uhr)
•
Sichere ProgrammierungMy haunted mirror possesses your reflection with open-weight AI. A player’s idea made it hunt you in the dark(31.10.2026 um 21:47 Uhr)
•
Sichere ProgrammierungWhy Did My Coding Agent Say That? Tracing an Answer Back to the Memory and Session It Came From(31.10.2026 um 21:47 Uhr)
•
Sichere ProgrammierungWhy a local SMTP catcher is not an email integration test(31.10.2026 um 21:47 Uhr)
•
YouTube Security VideosMicrosoft Developer: Stop wiring infrastructure, start building agents(29.10.2026 um 17:45 Uhr)
•
Linux Tipps & HardeningDistribution Release: Linux Lite 8.2(31.10.2026 um 21:32 Uhr)
•
Sichere ProgrammierungThe Ghost Doesn't Need the Cloud: Building a Local AI Music Curator with Gemma 3(31.10.2026 um 21:45 Uhr)
•
Sichere ProgrammierungGoogle Disables Discover AI Source-Tap Test After Confirming a Bug(31.10.2026 um 21:45 Uhr)
•
Sichere ProgrammierungHow do you know if your coding agent's instructions are getting better?(31.10.2026 um 21:45 Uhr)
•
Sichere ProgrammierungModel Context Protocol (MCP) with InterSystems IRIS - From Zero to Hero(31.10.2026 um 21:45 Uhr)
•
Sichere Programmierung"Keys of the Departed": Ghost Account Hunter - Uncovering the Dead Identities Still Haunting Our Systems(31.10.2026 um 21:46 Uhr)
•
Sichere ProgrammierungMy haunted mirror possesses your reflection with open-weight AI. A player’s idea made it hunt you in the dark(31.10.2026 um 21:47 Uhr)
•
Sichere ProgrammierungWhy Did My Coding Agent Say That? Tracing an Answer Back to the Memory and Session It Came From(31.10.2026 um 21:47 Uhr)
•
Sichere ProgrammierungWhy a local SMTP catcher is not an email integration test(31.10.2026 um 21:47 Uhr)
•
Intelligence View
⚡ tsecurity.de Intelligence

php2shell open-dir toolkit: a cloned PoC, staged webshells, and a ranked target list

We pulled the tooling operators staged in open directories after the php2shell leak. One workspace held a cloned php2shell PoC alongside ready-to-drop PHP…

Malware / Trojaner / Viren Post malware and hostile servers for others to analyze 1 Min. Lesezeit TA0011 · T1505
Beitrag
0
Seite
0
↗ Quelle (Post malware and hostile servers for others to analyze)
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!

We pulled the tooling operators staged in open directories after the php2shell leak. One workspace held a cloned php2shell PoC alongside ready-to-drop PHP backdoors: shell.php pulling a payload from maste.mangsud[.]org, autologin_fd.php, and a set of tebaran_* CMS deployers. No php2shell victim was recorded on that host. A separate operator built... Weiterlesen: php2shell open-dir toolkit: a cloned PoC, staged webshells, and a ran…

🔍 CTI & Forensik

Cyber Threat Intelligence & Forensik

ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
1 belegte Technik
T1505TA0011 · Command and Control
Server Software Component
Mitigation: M1018 User Account Management
Quelle: Kontext-Klassifikation des Artikeltextes
YARALOKIphp-malware-finder
Command and Control
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
3 Knoten · 2 Relationen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken
Intelligence Digest gratis Dagelijks het belangrijkste beveiligingsnieuws · kan op elk moment worden opgehaald
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
Nog geen recensies van lezers
Was deze pagina nuttig?
0
Jetzt Bewertung abgeben
🟢 Niedrig (1-3.9) 🟡 Mittel (4.0-6.9) 🔴 Hoch (7.0-8.9) Kritisch (9.0-10.0)
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken

Verwant Story Cluster & Sources (vector AI)

21 Bronnen
CVE-2026-63874 | Linux Kernel up to 6.18.35/7.0.12 MCTP USB ndo_stop improper synchronization
20 andere bronnen
VulDB Updates2 uur geledenCVE-2026-63873 | Linux Kernel up to 6.18.35/7.0.12 amdxdna amdxdna_aie2_v.c aie2_populate_range memory leak VulDB Updates2 uur geledenCVE-2026-63853 | Linux Kernel up to 6.18.32/7.0.9 Vcn encoder drm/amdgpu/vcn Local Privilege Escalation VulDB Updates2 uur geledenCVE-2026-63856 | Linux Kernel up to 6.6.140/6.12.90/6.18.32/7.0.9 Vcn Encoder Decoder drm/amdgpu/vcn privilege escalation VulDB Updates2 uur geledenCVE-2026-63878 | Linux Kernel up to 6.18.34/7.0.11 amdgpu amdgpu_gem.c kvzalloc allocation of resources VulDB Updates2 uur geledenCVE-2026-63880 | Linux Kernel up to 6.18.34/7.0.11 Amdgpu amdgpu_gem_op_ioctl num_entries denial of service VulDB Updates2 uur geledenCVE-2026-63877 | Linux Kernel up to 6.6.142/6.12.92/6.18.34/7.0.11 Dz serial_base_ctrl_add null pointer dereference
+14

Mehr aus dieser Kategorie

Illegales IPTV: 3,9 Millionen Deutsche nutzen Piraten-Streams
31.10.2026
IT Security News Hourly Summary 2026-10-31 16h : 6 posts
31.10.2026
Malware Yoba tarnt sich als ChatGPT- und Claude-App - it-daily.net
31.10.2026
Supply Chain Management Software Development: Handling Late and Duplicate Shipment Events Without Corrupting Inventory
31.10.2026
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
Trek om te vernieuwen
TTS Reader • tsecurity.de Voice
Nächster Beitrag