Wikileaks OutlawCountry

[SCHISCHKA]

This tool makes hidden changes to linux firewalls.

This makes a good case to learn how to perform security audits.

Iv just finished reading the user manual.

I'm quite disappointed in the lack of a Warranty statement. Those are always comical in vault7 leaks.

Exploit only works on old RHEL 6 or CentOS, allegedly.

It needs shell access so don't shit your pants.

https://wikileaks.org/vault7/#OutlawCountry

From the user manual:

Quote

1.2

(U) Assumptions and Constraints

(S//NF) OutlawCountry v1.0 contains one kernel module for 64-bit CentOS/RHEL 6.x.

This module will only work with default kernels. Also, OutlawCountry v1.0 only

supports adding covert DNAT rules to the PREROUTING chain.

RHEL 6 uses kernel 2.6 which is pretty old. Most linux distributions have moved above kernel version 4, so again do not shit your pants.

User Manual was published in June 2015 which shows its not that long ago they were using or still are using it, if they are using it.

 

 

[ARikozuM]

8 minutes ago, SCHISCHKA said:

Exploit only works on old RHEL 6 or CentOS, allegedly.

It needs shell access so don't shit your pants.

@Electronics Wizardy might need a new pair... 

8 minutes ago, SCHISCHKA said:

Most linux distributions have moved above kernel version 4, so again do not shit your pants.

First warning didn't help him... Press F to pay respects...

[ARikozuM]

Also, since this isn't Windows or MacOS related, it'll see page 2 in a few weeks rather than 10 minutes from now... unless I start filling it with puns and bad yolks that are shell-compatible... 

Spoiler

I tried, dammit! 

 

[SCHISCHKA]

1 minute ago, ARikozuM said:

Also, since this isn't Windows or MacOS related, it'll see page 2 in a few weeks rather than 10 minutes from now... unless I start filling it with puns and bad yolks that are shell-compatible... 

  Hide contents

I tried, dammit! 

 

i intentionally put it here and not the news section so this would not occur.

[Not_Sean]