POJIA破甲
地图 / WannaCrypt “Killswitch”

WannaCrypt “Killswitch”

密码学缺陷 / Unlabeled / #228648

厂商
HackerOne
严重程度
未评级
赏金
—
弱点
Unlabeled
研究员
@malwaretech
披露日期
2017-05-13
资产
—
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(1191 字符中的一小部分)
WannaCrypt (a.k.a. WannaCry) is the name of a malware used in the May 2017 global ransomware attack targeting Microsoft Windows operating systems via known vulnerabilities leaked by The Shadow Brokers.

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 HackerOne 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @malwaretech · 版权归作者与 HackerOne 所有

同类报告

[Java] CWE-326: Query to detect weak encryption with an insufficient key sizeGitHub Security Lab · — · $4,500sign_multisig crashes monero-wallet-rpc on a malformed but decryptable multisig txsetMonero · 2026-09-17Use of Cryptographically Weak Pseudo-Random Number Generator in WebCrypto keygenInternet Bug Bounty · 2023-04-09 · $4,000Exposed Unencrypted Telnet EndpointStarbucks · 2017-02-08Android app does not clear end to end encryption keysNextcloud · 2021-06-16 · $100End to end encryption public key is not properly verified on Desktop and AndroidNextcloud · 2021-09-23 · $1,500