A massive backdoor exploit was found in the XZ Utils library, which is included with almost all Linux distributions, granting root access to an attacker just by logging in to a server via SSH. In this episode, we are covering the intricate workings of how the exploit works from building and including into the library itself, to actually exploiting. We are covering all of this and more on this episode of The Dark Assassins Podcast.

If you enjoyed this episode, please give it a rating, review, and subscribe if you haven’t already. Also, share it with a friend or family member who you think would enjoy it or benefit from it.

Do you have a question or topic you want answered in a future episode? Send me an email at [email protected] 

XZ Utils References:

Backdoor Timeline

General Info + Affected Distros

Brian Kerbs Response

Andres Freund Discovers the Vulnerability

How the Backdoor was Included

Using the Backdoor [DEMO]

Follow Us:

Facebook

LinkedIn