They're not even that stealthy. The code is bullshit, gitignore folder is super suspicious and malware is just a binary within the zip file. Clearly meant for script kiddies.

With all of the embarrassing command injections they keep getting, Fortinet should assess their SOC and incident preparedness and find compromises that may lie hidden by calling their own Security Advisory Services.

Yep, noticed that too. @jerry should file a bug report. Is this issue present on other instances or just infosec.pub?

There is PR dealing with scheduled tasks which might be related: https://github.com/LemmyNet/lemmy/pull/3090 , but someone needs to check server logs to figure it out.

I do not speak for all r/netsec mods, but as a mod on r/netsec I have no idea where that info came from.

I played around with WebSockets and wrote a new tool: https://github.com/doyensec/wsrepl

It's an interactive REPL interface like websocat, but it's meant specifically for pentesting, not debugging, and it's easily extensible in Python (while still retaining REPL interface). In future releases I'd like to expand the extensibility by adding declarative style configuration (the ultimate feature would be something like what Burp's Autorize plugin does, but for websockets).