Tool
tun.sh
- First Reported
- Nov 5, 2026
- Latest Reported
- Nov 5, 2026
Reported Context (1)
- bridge between the compromised firewall's internal network and the operator's VPS. The script tun.sh establishes persistent reverse SSH tunnels that map eight internal network services to localhost ports on Researchers Trace PHP2Shell PAN-OS Exploitation From Reconnaissance to Enterprise Access
CVE (4)
MITRE ATT&CK (15)
Vendors (1)
Products (6)
Tools (9)
Industries (1)
Countries (4)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.