Kudeta BY TRICKSIDE GANGS👊🏿💥🔫
前往频道在 Telegram
216
订阅者
无数据24 小时
无数据7 天
无数据30 天
帖子存档
Repost from SkynetC2 | Official
ALERT!!
Never use this file provided by the Black Leaks / Scam Exposing channel or files compiled from the username @bettercallmeris or @bettercallworker
because they embedded an exploit in the encoded file, from that code I managed to find the part of the code where they ran the exploit.
The explanation:
Explanation:
They Use curl to download something from 'https://2no.co/2OGvL2' and save it to
/dev/null (a place usually used to dump output).
Use grep to search for the string "clown11" in the /etc/passwd and /etc/shadow files. If the string is not found, it will add a new line to the file using sed setting the user information "clown11" and the password in particular.
Please note that this code appears to try to exploit or change user and password files on the system (/etc/passwd and /etc/shadow), which could be dangerous.
