{"id":17383351,"url":"https://github.com/byt3n33dl3/dockermacexec","last_synced_at":"2025-07-10T17:06:18.443Z","repository":{"id":245800923,"uuid":"773751204","full_name":"byt3n33dl3/DockerMacExec","owner":"byt3n33dl3","description":"Payloads DLR's for Trojan infections through Azure.","archived":false,"fork":false,"pushed_at":"2024-06-24T07:28:15.000Z","size":64,"stargazers_count":6,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-06-30T20:43:16.697Z","etag":null,"topics":["backdoor","docker","shellcode","trojan"],"latest_commit_sha":null,"homepage":"","language":"Dockerfile","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"wtfpl","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/byt3n33dl3.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-03-18T10:35:05.000Z","updated_at":"2025-05-18T17:17:41.000Z","dependencies_parsed_at":"2024-06-24T08:56:54.948Z","dependency_job_id":null,"html_url":"https://github.com/byt3n33dl3/DockerMacExec","commit_stats":null,"previous_names":["pxcs/rubella","pxcs/menaces","pxcs/saboteurs_7r0j4n","byt3n33dl3/dockermacexec"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/byt3n33dl3/DockerMacExec","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/byt3n33dl3%2FDockerMacExec","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/byt3n33dl3%2FDockerMacExec/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/byt3n33dl3%2FDockerMacExec/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/byt3n33dl3%2FDockerMacExec/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/byt3n33dl3","download_url":"https://codeload.github.com/byt3n33dl3/DockerMacExec/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/byt3n33dl3%2FDockerMacExec/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":264614699,"owners_count":23637634,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["backdoor","docker","shellcode","trojan"],"created_at":"2024-10-16T07:41:21.790Z","updated_at":"2025-07-10T17:06:18.420Z","avatar_url":"https://github.com/byt3n33dl3.png","language":"Dockerfile","funding_links":[],"categories":[],"sub_categories":[],"readme":"[![Build Status](https://dev.azure.com/GreaterFire/Trojan-GFW/_apis/build/status/trojan-gfw.trojan?branchName=master)](https://dev.azure.com/GreaterFire/Trojan-GFW/_build/latest?definitionId=5\u0026branchName=master)\n[![Artifact Hub](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/malware-cryptominer-container)](https://artifacthub.io/packages/search?repo=malware-cryptominer-container)\n\n## MALDEV\n\n- [Container image with malware and crypto miner for testing purposes](#container-image-with-malware-and-crypto-miner-for-testing-purposes)\n  - [Deployment of the vulnerable image](#deployment-of-the-vulnerable-image)\n    - [CloudFormation - EC2 instance](#cloudformation---ec2-instance)\n    - [Amazon ECS](#amazon-ecs)\n    - [Amazon EKS](#amazon-eks)\n  - [Scanner tests](#scanner-tests)\n    - [Aqua Scanner](#aqua-scanner)\n    - [Trivy Scanner](#trivy-scanner)\n    - [Prisma Cloud Scanner](#prisma-cloud-scanner)\n    - [Wiz.io Scanner](#wizio-scanner)\n    - [Anchore - Grype Scanner](#anchore---grype-scanner)\n    - [Snyk Scanner](#snyk-scanner)\n    - [ClamAV](#clamav)\n  - [Verify image integrity](#verify-image-integrity)\n  - [Local tests](#local-tests)\n\nLive worker hosted at [@](https://spamchannel.haxxx.workers.dev)\n\n**UPDATE ( Aug 13 2023 ): Two days after my DEFCON 31 talk, MailChannels silently decided to require a [Domain Lockdown Record](https://support.mailchannels.com/hc/en-us/articles/16918954360845) in order to send emails from Cloudflare Workers meaning this code doesn't work anymore. However, because they just addressed a \"symptom\" and not the underlying issue (lack of sender idenitity verification) anyone can still signup on their website (80$) and use their \"normal\" SMTP relay to spoof all of their customer domains 🤷🏻‍♂️**\n\n## What is this\n\nAs of writing, This allows you to spoof emails from any of the +2 Million domains using MailChannels. It also gives you a slightly higher chance of landing a spoofed emails from any domain that doesn't have an SPF \u0026 DMARC due to [ARC](https://www.rfc-editor.org/rfc/rfc8617.html#) adoption.\n\nIt was released at the Defcon 31 talk [SpamChannel: Spoofing Emails From 2 Million+ Domains and Virtually Becoming Satan](https://forum.defcon.org/node/245722). Slides for the talk are [here](https://github.com/byt3bl33d3r/Slides/blob/master/Defcon31_SpamChannel_Spoofing_Emails_from_2M_Domains.pdf)\n\n## Defcon Talk\n\nSee [CONTRIBUTING.md](CONTRIBUTING.md).\n\n## Dependencies\n\n- [CMake](https://cmake.org/) \n- [Boost](http://www.boost.org/)\n- [OpenSSL](https://www.openssl.org/)\n- [libmysqlclient](https://dev.mysql.com/downloads/connector/c)\n- [EMailSpam]()\n\n## License\n\n[GPLv3](LICENSE)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbyt3n33dl3%2Fdockermacexec","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fbyt3n33dl3%2Fdockermacexec","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbyt3n33dl3%2Fdockermacexec/lists"}