Malicious behaviors using binfmt_misc

Intro

Miscellaneous Binary Formats

binfmt_misc

trin

trin

toffan

PoC

Nmap scan report for 10.129.148.141
Host is up (0.018s latency).


Ejemplo custom rule

• https://github.com/NSAKEY/nsa-rules/blob/master/_NSAKEY.v2.dive.rule
• https://github.com/NotSoSecure/password_cracking_rules/blob/master/OneRuleToRuleThemAll.rule