Elektrine lite

← Feed

@cR0w@infosec.exchange

2026-09-30 03:41 UTC

Go hack some AI SOC shit. https://github.com/beenuar/AiSOC/security/advisories/GHSA-7q37-2wfw-xrx7 Three functions in services/actions build CrowdStrike Real-Time Response (RTR) command strings by string interpolation, with no escaping, from caller-supplied parameters. The resulting command string is sent to the CrowdStrike Falcon agent and executed on the target endpoint as the EDR agent's privilege (SYSTEM/root).

Replies (1)