A massive backdoor exploit was found in the XZ Utils library, which is included with almost all Linux distributions, granting root access to an attacker just by logging in to a server via SSH. In this episode, we are covering the intricate workings of how the exploit works from building and including into the library itself, to actually exploiting. We are covering all of this and more on this episode of The Dark Assassins Podcast.

If you enjoyed this episode, please give it a rating, review, and subscribe if you haven’t already. Also, share it with a friend or family member who you think would enjoy it or benefit from it.

Do you have a question or topic you want answered in a future episode? Send me an email at [email protected] 

XZ Utils References:
Backdoor Timeline
General Info + Affected Distros
Brian Kerbs Response
Andres Freund Discovers the Vulnerability
How the Backdoor was Included
Using the Backdoor [DEMO]

Follow Us:
Facebook
LinkedIn

Ver todos los episodios