|
Name |
|
Date |
Size |
#Lines |
LOC |
| .. | | 03-May-2022 | - |
| common_m4/ | H | 03-May-2022 | - | 404 | 328 |
| etc/ | H | 23-Apr-2012 | - | 462 | 390 |
| m4/ | H | 23-Apr-2012 | - | 8,381 | 7,483 |
| src/ | H | 23-Apr-2012 | - | 1,768 | 1,431 |
| BUGS | H A D | 06-Mar-2011 | 0 | | |
| COPYING | H A D | 06-Mar-2011 | 22.4 KiB | 415 | 341 |
| INSTALL | H A D | 06-Mar-2011 | 0 | | |
| LICENSE | H A D | 08-Mar-2011 | 22.4 KiB | 415 | 341 |
| Makefile.am | H A D | 28-Jul-2011 | 159 | 11 | 4 |
| Makefile.in | H A D | 23-Apr-2012 | 23.2 KiB | 756 | 664 |
| README | H A D | 06-Jan-2012 | 705 | 34 | 19 |
| TODO | H A D | 06-Mar-2011 | 0 | | |
| aclocal.m4 | H A D | 23-Apr-2012 | 39.9 KiB | 1,132 | 1,017 |
| config.guess | H A D | 23-Apr-2012 | 43.9 KiB | 1,503 | 1,292 |
| config.h.in | H A D | 23-Apr-2012 | 7.5 KiB | 280 | 192 |
| config.sub | H A D | 23-Apr-2012 | 33.8 KiB | 1,715 | 1,566 |
| configure | H A D | 23-Apr-2012 | 433.5 KiB | 15,186 | 11,806 |
| configure.ac | H A D | 17-Feb-2012 | 1.4 KiB | 50 | 38 |
| depcomp | H A D | 23-Apr-2012 | 18.2 KiB | 631 | 407 |
| install-sh | H A D | 23-Apr-2012 | 13.3 KiB | 521 | 344 |
| ltmain.sh | H A D | 23-Apr-2012 | 237.8 KiB | 8,414 | 6,482 |
| missing | H A D | 23-Apr-2012 | 11.2 KiB | 377 | 281 |
README
1SWF Nugget
2----------
3
4-- Overview --
5
6SWF Nugget is a Razorback Detection Nugget that scans Flash files collected by
7Razorback Collector Nuggets. SWF Nugget decompresses (as necessary) and
8parses Flash files to detect attacks exploiting known vulnerabilities.
9
10The scan results are sent back to Razorback Dispatcher to correlate with other
11Razorback Nuggets.
12
13-- Status --
14
15Currently, it detects the following malicious Flash file that exploits the
16following CVEs:
17
18CVE-2005-2628
19CVE-2006-0323
20CVE-2007-0071
21
22-- Future Work --
23
24* Include more detections
25* Research ActionScript interpretation
26* Implement embedded data extraction such as JPEG, PNG, GIF and send back to
27 Razorback Dispatcher
28
29
30
31
32
33
34