ehang-io / nps

一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发,可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面,内网dns解析、内网socks5代理等等……,并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal.
https://ehang.io/nps/documents
GNU General Public License v3.0
29.73k stars 5.37k forks source link

【风险报告】Trojan Report 出现木马 #1203

Open wzm2256 opened 1 year ago

wzm2256 commented 1 year ago

---------------中文 内网环境中出现木马 疑似nps导致。

!!!!!!该软件已经有四年未更新,在软件更新修复漏洞前请谨慎使用!!!! 木马位置: /usr/local/games/.cache 行为: 门罗币挖矿

---------------English I found a trojan in my PC, which I doubt is related to NPS.

!!NPS has not been updated for four years! Consider carefully before you decide to use it !!

Location: /usr/local/games/.cache Behavior: mining xmr

相关问题 Related issues: https://github.com/ehang-io/nps/issues/1200 https://github.com/ehang-io/nps/issues/1198 https://github.com/ehang-io/nps/issues/1197 https://github.com/ehang-io/nps/issues/1196