laanwj

Wladimir van der Laan 2016. This document is in the public domain.

BLATSTING reverse-engineering notes. Based on files from the EQGRP free dump,
more specifically in Firewall/BLATSTING/BLATSTING_201381/LP/lpconfig.

In https://musalbas.com/2016/08/16/equation-group-firewall-operations-catalogue.html,
BLATSTING is described as "A firewall software implant that is used with EGREGIOUSBLUNDER
(Fortigate) and ELIGIBLEBACHELOR (TOPSEC)".

If true, it's interesting how this implant can target both vendors. Presumably they both use the same Linux

AntoineAugusti

package main

import (
	"flag"
	"fmt"
	"time"
)

// Fake a long and difficult work.
func DoWork() {

sfarthin

// See http://stackoverflow.com/questions/21934831/nodejs-express-stream-stdout-instantly-to-the-client

var cp = require("child_process"),
	express = require("express"),
	app = express();

app.get('/', function(req, res){
	
	res.writeHead(200, { "Content-Type": "text/event-stream" });