An analysis on shc
-produced binaries, ARC4 encryption and the GPL-violating "KoolShare" custom firmware for ASUSWRT devices.
See prior art here: https://github.com/yanncam/UnSHc
So I've got a few ASUS routers with Broadcom chips. It ships with ancient kernel (2.6.36) and a messy userland.
Seemed KoolShare's members found a reliable way to run background daemons on those cursed™ devices, but they didn't want to public it and obfuscated the scripts with shc
.