Piyush Raj

#### Changes : - Added OSVDB-73573 (vsftpd v2.3.4 Backdoor Command Execution)

> Problem : Throws TypeError: ord() ``` $> py duck2spark.py -i raw.bin -l 1 -f 2000 -o sketch.ino Traceback (most recent call last): File "duck2spark.py", line 155, in main(sys.argv[1:]) File...

**Links** - https://jira.atlassian.com/browse/JRASERVER-69796 - https://nvd.nist.gov/vuln/detail/CVE-2019-8449 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8449 - https://www.cvedetails.com/cve/CVE-2019-8449/ - https://github.com/bcoles/jira_scan - https://gist.github.com/0x240x23elu/891371d46a1e270c7bdded0469d8e09c - https://github.com/random-robbie/Jira-Scan

Detecting the hosting platform

2

For targeted payloads on specific vendors. _(AWS, gcloud, ...)_ References — - https://www.coengoedegebure.com/how-i-got-access-to-local-aws-info-via-jira/ - https://medium.com/@Skylinearafat/how-outdated-jira-instances-suffers-from-multiple-security-vulnerabilities-6a88c45e9ec6 - https://blog.detectify.com/2019/01/29/hacking-isnt-an-exact-science/

Permission Denied on Heroku

20

**_bash: ./cron.daily.sh: Permission denied_** ``` $ heroku run ./cron.daily.sh Running ./cron.daily.sh on hacke2323uieu23r... starting, run.3251 (Free) Running ./cron.daily.sh on hacke2323uieu23r... connecting, run.3251 (Free) Running ./cron.daily.sh on hacke2323uieu23r... up, run.3251 (Free)...

# Current State : #### Almost all the summit websites are using 404 and 500 **ERROR** pages. # Ideal State : There should be **ERROR** Pages. :sparkles:

> Currently we have no formal **rules** :confounded: For Now, You're free to put your **baby Malware** in the `root_dir` too. #### Quick, Raise a Issue & Fire the PR,...

Look into `collection/genus//`, put your malware sample inside `` directory and form `src` and `bin` for putting in the source (optional) and the binaries.