基于DoH的无特征shellcode加载器实现
单文件分离免杀的另一个实现方式,提升静态查杀的对抗效果。相比传统文件分离马可实现单文件落地,且没有文件操作相关API的调用,消除可疑特征。针对仅有的可疑特征——内存分配相关的API调用,可使用动态加载+syscall的形式轻松隐藏
ChatGPT is vulnerable to data exfiltration via image markdown injections. This. is. pretty well known.
As more features are added to ChatGPT the exfiltration angle becomes more likely to be abused.
Recently OpenAI added Custom Instructions, which allow to have ChatGPT always automatically append instructions to every message exchange.
An adversary can abuse this feature to install a data exfiltration backdoor that depends on, and only works because of the image markdown injection vulnerability. The TTP is a similar to other post exploitation techniques adversaries are using, like enabling email forwarding rules.