#!/bin/bash #./bdienst.sh # Israel Torres # malware research # observation analyzed stripped and extrapolated to work via bash for intelligible input url="http://ludihumor.com/wp-admin/solar-energy&page=7" log="malware-log.txt" while [ 1 ] do logstamp=$(date +%s) echo "timestamp:$logstamp">>$log curl -s --referer http://www.google.com "$url" >> $log echo -e "\n" >>$log # update filter inside loop using backslash for readablity cat malware-log.txt \ | tr -d '\n' \ | sed "s/<\/script>/\\`echo -e '\n\r'`/g" \ | cut -d '?' -f 1 \ | sed 's/<script>var url = \"//g' \ | sed "s/http:/\\`echo -e '\t'`http:/g" \ | sed 's/\/in.cgi//g' \ | cut -d ':' -f 2,3 \ | uniq -f 1 # sleep 900 done #output using filters is # unixtimestampe tab poisoned_url # EOF
Comments
0 B
|👍
/👎