Expert launched Malvuln, a project to report flaws in malware

guest · Jan 16, 2021

Expert launched Malvuln, a project to report flaws in malware
The researcher John Page launched malvuln.com, the first website exclusively dedicated to the research of security flaws in malware codes.
January 15, 2021
https://securityaffairs.co/wordpress/113468/hacking/malvuln-project.html

The security expert John Page (aka hyp3rlinx) launched malvuln.com, the first platform exclusively dedicated to the research of security flaws in malware codes.

The news was first announced by SecurityWeek, the researcher explained that Malvuln is the first website dedicated to research and analysis of vulnerabilities in malware samples.

“malvuln.com is the first website exclusively dedicated to the research of security vulnerabilities within Malware itself.” wrote the expert. “There are many websites already offering information about Malware like Hashes, IOC, Reversing etc. However, none dedicated to research and analysis of vulnerabilities within Malware samples… until now. Long Live MALVULN.”
Click to expand...

Sharing the knowledge of vulnerabilities affecting malware could allow incident response teams to neutralize the threat in case of infections, but could also help vxers to address them end improve their malware. For this reason, it is likely that Page will regulate the vulnerability disclosure process in the future.

Clearly, the initiative is born for educational and research purposes only.
Click to expand...

guest · Jun 29, 2021

Malvuln Project Catalogues 260 Vulnerabilities Found in Malware
June 29, 2021
https://www.securityweek.com/malvuln-project-catalogues-260-vulnerabilities-found-malware

Malvuln, an interesting project of security researcher John Page (aka hyp3rlinx), catalogues vulnerabilities discovered in malware and provides information on how those vulnerabilities can be exploited.
Since launching the project in early January 2021, Page has discovered more than 260 vulnerabilities across an estimated 105 individual malware families, including trojans, worms, backdoors, droppers, and ransomware.

The vulnerabilities include issues related to memory corruption, insecure permissions, hardcoded credentials, authentication bypass, directory traversal, and information disclosure. Some of the flaws can be exploited for DoS attacks (i.e. to cause the malware to crash), while others allow unauthenticated “attackers” to remotely execute arbitrary commands — either OS commands on the already-infected system or commands made available by the malware.
Click to expand...

All the vulnerabilities catalogued to date were found by Page himself. In the past, he suggested that he could at one point start accepting third-party contributions, but right now he says he doesn’t want to “deal with anyone.”
Click to expand...

Log in or Sign up

Expert launched Malvuln, a project to report flaws in malware

guest Guest

guest Guest

Log in or Sign up

Expert launched Malvuln, a project to report flaws in malware

guest Guest

guest Guest

Useful Searches