This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.
On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that
| [ | |
| { | |
| "server": "198.199.101.152", | |
| "server_port": 8388, | |
| "password": "u1rRWTssNv0p", | |
| "method": "aes-256-cfb", | |
| "remarks": "Example 1" | |
| }, | |
| { | |
| "server": "198.199.101.12", |
| Mute these words in your settings here: https://twitter.com/settings/muted_keywords | |
| ActivityTweet | |
| generic_activity_highlights | |
| generic_activity_momentsbreaking | |
| RankedOrganicTweet | |
| suggest_activity | |
| suggest_activity_feed | |
| suggest_activity_highlights | |
| suggest_activity_tweet |
| #encoding=utf-8 | |
| import requests | |
| from bs4 import BeautifulSoup | |
| import re | |
| import sys | |
| import datetime | |
| uid="11111" #用户名 | |
| pwd="11111" #密码 |
| @-moz-document domain("baidu.com") { | |
| body { | |
| display: none; | |
| } | |
| html { | |
| margin: 30px; | |
| } | |
| html::after { |
| #!/usr/bin/env python | |
| #-*- coding: utf-8 -*- | |
| import sys | |
| import logging | |
| import datetime | |
| import requests | |
| import BeautifulSoup | |
| from requests.adapters import HTTPAdapter |
| $ LD_PRELOAD=$PWD/sendmsg.so dig twitter.com @8.8.8.8 | |
| ;; Warning: Message parser reports malformed message packet. <-- malformed 因为把压缩指针当作域名一部分了 | |
| ;; Question section mismatch: got twitter.com/RESERVED0/CLASS256 | |
| ; <<>> DiG 9.9.5-3-Ubuntu <<>> twitter.com @8.8.8.8 | |
| ;; global options: +cmd | |
| ;; Got answer: | |
| ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 44722 | |
| ;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1 |
| # sniproxy example configuration file | |
| # lines that start with # are comments | |
| # lines with only white space are ignored | |
| user daemon | |
| # PID file | |
| pidfile /var/run/sniproxy.pid | |
| resolver { |
| # | |
| # /etc/sysctl.conf - Configuration file for setting system variables | |
| # See /etc/sysctl.d/ for additonal system variables | |
| # See sysctl.conf (5) for information. | |
| # | |
| #kernel.domainname = example.com | |
| # Uncomment the following to stop low-level messages on console | |
| #kernel.printk = 3 4 1 3 |
