{"uuid": "060298b7-a38c-42e3-bbdf-487d635739c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-16941", "type": "seen", "source": "https://gist.github.com/linkerlin/be26e88a54ac8d95fc758089718d7c20", "content": "\n\n\ntext{font-family:PingFang SC, Hiragino Sans GB, Microsoft YaHei, sans-serif}\n.ent{animation-name:ent;animation-duration:.9s;animation-timing-function:cubic-bezier(.2,.7,.3,1);animation-fill-mode:both}\n@keyframes ent{from{transform:translateY(12px)}to{transform:translateY(0)}}\n.tw{animation-name:tw;animation-duration:7s;animation-timing-function:ease-in-out;animation-iteration-count:infinite}\n@keyframes tw{0%,100%{opacity:.20}50%{opacity:.92}}\n\n.flow{animation-name:flF;animation-duration:13s;animation-timing-function:linear;animation-iteration-count:infinite}\n@keyframes flF{from{stroke-dashoffset:100}to{stroke-dashoffset:0}}\n.gear{animation-name:gr;animation-duration:17s;animation-timing-function:linear;animation-iteration-count:infinite}\n@keyframes gr{from{transform:rotate(0deg)}to{transform:rotate(360deg)}}\n.scan{animation-name:scF;animation-duration:11s;animation-timing-function:ease-in-out;animation-iteration-count:infinite}\n@keyframes scF{0%,100%{transform:translateY(0)}50%{transform:translateY(64px)}}\n\n\n\n\n\n\n\n\u9006\u5411\u5de5\u5177\u514d\u8d39\u4e03\u5e74\uff0c\u7d20\u6750\u8fd8\u5728\u8bf4\u5185\u90e8\u4e13\u7528\nNSA Ghidra \u00b7 2019-03-05 RSA \u8bb2\u53f0\u53d1\u5e03 \u2192 Apache 2.0 \u00b7 Sleigh \u89c4\u683c\u5f15\u64ce\n\n\n\n\n\n\n\u673a\u5668\u7801\n10100101\n01010010\n00101001\n10010100\n01001010\n10100101\n01010010\n00101001\n10010100\n\u65e0\u7b26\u53f7\u56fa\u4ef6 / \u6728\u9a6c\n\n\n\n\n\n\n\n\n\n\n\n\nSleigh\n39 \u4e2a\u5b98\u65b9\u5904\u7406\u5668\u6a21\u5757\n\nC \u4f2a\u4ee3\u7801\nif (buf[0] == 0x4D) {\n  inject_thread(hProc);\n} else {\n  decode_payload();\n}\n\n\n\n\n\n\u8c03\u7528\u5173\u7cfb\u56fe \u00b7 Headless \u53ef\u6279\u5904\u7406\n\n\n\n\nagent\n\n\n\n\n\n\n\n\n\n81,126 \u2605 \u00b7 12.1.4\n\nGhidraMCP 10,571 \u2605 \u00b7 \u505c\u66f4 25-06\n\n\n\u673a\u5668\u7801 \u2192 \u6c47\u7f16 \u2192 C \u4ee3\u7801 \u2192 agent\n\nHeadless \u662f\u4f0f\u7b14\uff1a\u53cd\u7f16\u8bd1\u6d41\u7a0b\u53d8\u6210 agent \u53ef\u8c03\u7684\u6d41\u6c34\u7ebf\n\n\u6865\u5efa\u5b8c\u5c31\u6ca1\u584c\u8fc7\uff1a\u5206\u6790 API \u9762\u592a\u7a33\u5b9a\uff0c471 \u5929\u96f6\u63d0\u4ea4\n\n\u5f00\u6e90\u5f53\u5e74 9 \u6708\u5c31\u88ab\u6316\u51fa CVE-2019-16941\uff0cCVSS 9.8\n\nToy \u6559\u5b66\u6a21\u5757\uff1a\u5de5\u5177\u514d\u8d39\u4e86\uff0c\u5199\u89c4\u683c\u7684\u4eba\u529b\u6ca1\u6709\u514d\u8d39\n\n\u4e03\u5e74\u6ca1\u51cf\u901f\uff1a404 \u540d\u8d21\u732e\u8005 \u00b7 \u7d2f\u8ba1\u5206\u53d1 504 \u4e07\u6b21 \u00b7 33 \u6761\u516c\u544a\n\n\u9006\u5411\u5de5\u5177\u4e5f\u4f1a\u88ab\u9006\u5411\u3002\nzhichai.net | \u667a\u67f4\u7f51\n", "creation_timestamp": "2026-10-07T01:36:05.000000Z"}