
Security News
Follow-up and Clarification on Recent Malicious Ruby Gems Campaign
A clarification on our recent research investigating 60 malicious Ruby gems.
Embeddable runtime Pry-based REPL console for long-running programs.
Features:
Add this line to your application's Gemfile:
gem "mind_control"
To start console server:
require "mind_control"
MindControl.start
You can also set Pry target (something.pry
):
...
MindControl.start :target => something
Or Pry options:
...
MindControl.start :pry => { .. options for pry instance .. }
Or set program name (see "Connection"):
...
MindControl.start :name => "some name"
NB: HOME (or XDG_CACHE_HOME) environment variable MUST be set for host program!
Run in terminal:
$ bundle exec mind_control
You will be prompted with a list of currently running MindControlled processes.
Or, if you already know name or PID of process:
$ bundle exec mind_control name_or_pid
You can capture STDOUT/STDERR of host program. To do that execute capture-output
in REPL.
[1] pry(main)> capture-output --help
Usage: capture_output [ --no-stdout | --no-stderr ] [ -f, --filter <regexp> ]
Captures host program STDOUT and STDERR and prints it to user.
--no-stdout Do not capture STDOUT.
--no-stderr Do not capture STDERR.
-f, --filter Filter output with given regular expression.
-h, --help Show this message.
MindControl can be used with EventMachine. Just require file and set EventMachine
as target and
all commands will be evaluated in the context of running reactor.
require "mind_control"
require "mind_control/em"
MindControl.start :target => EventMachine
You can use capistrano to start SSH session:
task :mind_control, :roles => :app do
server = find_servers_for_task( current_task ).first
exec <<-SH
ssh #{server.user || user}@#{server.host} -p #{server.port || 22} -t "#{rvm_shell} -c 'cd #{current_path} && bundle exec mind_control'"
SH
end
FAQs
Unknown package
We found that mind_control demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.
Security News
ESLint now supports parallel linting with a new --concurrency flag, delivering major speed gains and closing a 10-year-old feature request.
Research
/Security News
A malicious Go module posing as an SSH brute forcer exfiltrates stolen credentials to a Telegram bot controlled by a Russian-speaking threat actor.