Lmst

Настройка SSH для коммитов в репозиторий

Итак вам надо клонировать репозиторий с компанейского репозитория и git просит какие-то непонятные пароли. Знакома ситуация? В этой заметке я написал как настроить ssh ключи.

https://habr.com/ru/articles/746810/

#ssh #putty #GitLab #git #PuTTYgen #pageant #plink #Рassphrase #GIT_SSH

Recently I wanted to test #backrest on a Windoze machine using #plink (part of #PuTTY) to connect backup repository on a Linux server. Turns out: you can't do this. While it is working using #restic from the command line with somethng like

restic -o sftp.command="'./plink.exe' -s backupserver sftp" -r sftp:backupserver:path/to/repository <restic command>

it is failing if you are using that sftp.command part as a flag in #backrest repository configuration.

1/3

#plink manual, I hate you.

"🚨 Lazarus Group Unleashes CollectionRAT in Sophisticated Campaigns 🚨"

Lazarus Group, a North Korean state-sponsored actor, has been utilizing infrastructure reuse to launch sophisticated cyber attacks. Their latest campaign exploits CVE-2022-47966, a vulnerability in ManageEngine ServiceDesk, to deploy multiple threats including a new malware, CollectionRAT. This RAT showcases capabilities such as executing arbitrary commands and managing files on infected systems. Intriguingly, Lazarus Group is increasingly leveraging open-source tools like the DeimosC2 framework, marking a strategic shift in their attack methodologies. CollectionRAT, along with other tools like the malicious PuTTY Link (Plink), indicates a refined approach in their cyber warfare tactics.

Details: Cisco Talos Blog

Authors: Asheer Malhotra, Vitor Ventura, Jungsoo An

Tags: #Cybersecurity #LazarusGroup #APT #CollectionRAT #DeimosC2 #CVE202247966 #ManageEngine #Plink #NorthKorea #StateSponsoredCyberAttacks 💻🌍🔐