Skip to content

Instantly share code, notes, and snippets.

@jpluimers
Created April 2, 2024 15:11
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save jpluimers/d6375d1dafb2acf4dfffb5b55e3c7bef to your computer and use it in GitHub Desktop.
Save jpluimers/d6375d1dafb2acf4dfffb5b55e3c7bef to your computer and use it in GitHub Desktop.
Screenshot https://pbs.twimg.com/media/GKEbYDjWcAA43cm.png from https://twitter.com/WhichbufferArda/status/1774729956834123876 Testing the XZ Utils backdoor kill switch (yolAbejyiejuvnup=Evjtgvsh5okmkAvj) this string stop the backdoor, so it won't hooking into RSA_public_decrypt() function.
detection@detection:~/Desktop$ time env -i LC_LANG=C LD_PRELOAD=/usr/lib/x86_64-linux-gnu/liblzma.so.5.6.1 /usr/sbin/sshd -h
option requires an argument -- h
OpenSSH_8.9p1 Ubuntu-3ubuntu0.6, OpenSSL 3.0.2 15 Mar 2022
usage: sshd [-46DdeiqTt] [-C connection_spec] [c host_cert_file]
[-E log file] [-f config_file] [-g login_grace_time]
[-h host_key_file] [-o option] [-p port] [-u len]
real 0m0,162s
user 0m0,161s
sys 0m0,000s
detection@detection:~/Desktop$ time env -i LC_LANG=C yolAbejyiejuvnup=Evjtgvsh5okmkAvj LD_PRELOAD=/usr/lib/x86_64-linux-gnu/liblzma.so.5.6.1 /usr/sbin/sshd -h
option requires an argument -- h
OpenSSH_8.9p1 Ubuntu-3ubuntu0.6, OpenSSL 3.0.2 15 Mar 2022
usage: sshd [-46DdelqTt] [-C connection_spec] [-c host_cert_file]
[-E log file] [-f config_file] [-g login_grace_time]
[-h host_key_file] [-o option] [-p port] [-u len]
real 0m0,006s
user 0m0,000s
sys 0m0,000s
detection@detection:~/Desktop$
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment