This is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is.
Post
Filippo Valsorda
filippo.abyssdomain.expert
did:plc:x2nsupeeo52oznrmplwapppl
To clarify, by “gated” I mean it takes the attacker’s private key to use the backdoor (it’s NOBUS); by “unreplayable” I mean that even if we observe an attack against one host, we can’t reuse it against another host (the attacker’s signature is bound to the host public key, but not to the command).
2024-03-31T11:46:37.847Z