Post #1842694

2026-04-29 22:18 UTC

The Python script to check if you are vulnerable is extremely suspicious ans hard to decipher.

Replies (5)

@rabber@lemmy.ca 2026-04-29 22:21

I agree. This seems fishy to me. I am concerned about compressed code in a public disclosure like this. Also it seems like all the documentation was written by AI.

Open ##1842710
@treadful@lemmy.zip 2026-04-29 22:49

Very quick cursory review: The python script appears to decompress what might be an ELF from those compressed bytes. Then it opens a cryptography socket (AF_ALG) with the kernel and sends that whole thing. So the exploit is in the binary data and would likely take some skilled Linux engineers to decompile it and figure out the exploit. I’m not entirely sure why they would obfuscate it. Maybe they think it helps with responsible disclosure so people can’t make something more useful than the PoC?

Open ##1843174
@sun_is_ra@sh.itjust.works 2026-04-30 00:09

Here it is after improving readability a little pastebin.com/iW8BRrdX

Open ##1843615
@MonkderVierte@lemmy.zip 2026-04-30 09:52

pseud did that: lemmy.zip/comment/26186105

Open ##1845843
@JustTesting@lemmy.hogru.ch 2026-05-01 21:03

Someone over on lobste.rs has deobfuscated it, code can be found here

Open ##1859381