IsraelTorres icon

bdienst.sh

IsraelTorres | PRO | 05/07/11 01:31:05 PM UTC | 0 ⭐ | 672 👁️ | Never ⏰ | []
Bash |

800 B

|

None

|

0 👍

/

0 👎

#!/bin/bash
#./bdienst.sh
# Israel Torres
# malware research
# observation analyzed stripped and extrapolated to work via bash for intelligible input
url="http://ludihumor.com/wp-admin/solar-energy&page=7"
log="malware-log.txt"
while [ 1 ] 
    do 
        logstamp=$(date +%s)
        echo "timestamp:$logstamp">>$log
        curl -s --referer http://www.google.com "$url" >> $log
        echo -e "\n" >>$log
        # update filter inside loop using backslash for readablity
        cat malware-log.txt \
        | tr -d '\n' \
        | sed "s/<\/script>/\\`echo -e '\n\r'`/g" \
        | cut -d '?' -f 1 \
        | sed 's/<script>var url = \"//g' \
        | sed "s/http:/\\`echo -e '\t'`http:/g" \
        | sed 's/\/in.cgi//g' \
        | cut -d ':' -f 2,3 \
        | uniq -f 1
        #
        sleep 900
    done
#output using filters is 
# unixtimestampe tab poisoned_url   
# EOF

Comments

  •  icon
    01/01/70 12:00:00 AM UTC
    Plain Text |

    0 B

    |

    👍

    /

    👎