AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)
SANS Stormcast Tuesday Mar 18th 2025: Analyzing GUID Encoded Shellcode; Node.js SAML Vuln; Tomcat RCE in the Wild; CSS e-mail obfuscation
Mar 18, 2025
Dive into the world of cyber threats as they decode GUID-encoded shellcode linked to malware, revealing insights into Cobalt Strike. Explore a critical authentication bypass vulnerability found in Node.js libraries, prompting urgent fixes. Discover a new deserialization flaw in Tomcat that's already under attack, raising alarms about its Java similarities. Lastly, learn how attackers exploit CSS for stealthy user tracking and detection evasion, showcasing the ever-evolving landscape of cyber security.
07:03
AI Summary
AI Chapters
Episode notes
Podcast summary created with Snipd AI
Quick takeaways
- The enhancement of the Python script 1768.py simplifies the extraction of Cobalt Strike configuration from GUID encoded shellcode, aiding malware analysis.
- Recent vulnerabilities in Node.js and Tomcat expose critical security risks, highlighting the need for immediate patching and improved security protocols.
Deep dives
Decoding Cobalt Strike Beacons
A new enhancement in the Python script 1768.py allows for decoding Cobalt Strike beacons encoded as UUIDs, streamlining the process of extracting valuable information such as serial numbers from malware. This adjustment not only aids in attribution but also validates that the specific instance is indeed Cobalt Strike. The significance of this improvement lies in its simplicity, enabling researchers to utilize a straightforward script to decode these beacons effectively. The script's name, derived from the melting point of cobalt in Kelvin, reflects a unique connection to the tool's purpose and the material itself.
Get the Snipd
podcast app
Unlock the knowledge in podcasts with the podcast player of the future.
AI-powered
Discover
highlights
Listen to the best highlights from the podcasts you love and dive into the full episode
Save any
moment
Hear something you like? Tap your headphones to save it with AI-generated key takeaways
Share
& Export
Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more
AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
Discover
highlights
Listen to the best highlights from the podcasts you love and dive into the full episode