APT 2015 [SAMPLE] [FAMILY/UA + MORE INFO]

ADDED	TYPE	FAMILY	METHOD	URI	SAMPLE	PCAP	UA + MORE INFO
2/8/2015	APT	DarkKomet		8EA4AB05FA7E D573BA5A4EFFC3FB629308will vary - encrypted keep alive or other data	Sample	pcap	LibrarySsheet
2/8/2015	APT	PlugX / Korplug / Gulpix	POST	/update?id=	Sample Sample2	pcap	LibrarySsheet
2/7/2015	APT	Windata		XYZ/WinData.DLL?HELO-STX-1*10.0.0.15*RemotePC*[MAC:00-55-28-11-21-23 XYZ/WinData.DLL?HELO-STX-1*1[IPAddress]*[ComputerName]*0605[MAC:[MacAddress]]$	Sample		LibrarySsheet
2/4/2015	APT	Pingbed	GET	/default.htm

PHP web shell list

• P.A.S. v.3.0.10 by profexer (копия 3.0.10, копия 3.0.4b)
• WSO 2.5.1 shell by Orb (копия 2.5.1, копия 2.5 )
• D.K Shell v1.0 by b47chguru & Lnx Root for ICF (копия 1.0)
• b374k-shell Jayalah Indonesiaku (копия 2.8)
• Antichat shell
• c99 shell
• CIH.[ms] webshell
• Loader’z WEB shell
• r57shell
• rgod`s webshell
• phpRemoteView
• Perl Web Shell by RST GHC rootvn

waidps - Wireless Auditing , Intrusion Detection & Prevention System [ WIFI IDS IPS ]

git clone https://github.com/SYWorks/waidps



Part 1 http://syworks.blogspot.com/2014/04/waidps-wireless-auditing-intrusion.html
Part 2 http://syworks.blogspot.com/2014/04/waidps-wireless-auditing-intrusion_24.html
Part 3 http://syworks.blogspot.com/2014/04/waidps-wireless-auditing-intrusion_25.html

Wireless Auditing, Intrusion Detection & Prevention System

puppet [start]

1. Server:
sudo apt-get install -y puppetmaster

2. Client:
sudo apt-get install -y puppet

3. Client config /etc/puppet/puppet.conf:
[agent] server = mysuperserver node_name = cert certname = nameofworkstation 

mysuperserver - domain name (DNS server/ hosts file)

4. Test on client station:

puppet agent --test

5. Accept cert request:
puppet cert sign nameofworkstation

puppet cert --list (server cert request list)

6. on client run:
puppet agent --enable

puppet agent --test