Top Tweets for #bashfuscation
I've been playing with some #bashfuscation recently... am currently writing a #bash #obfuscation framework. It isn’t quite ready for release yet, but here’s a sneak peak of the some of the spicy 🌶️ obfuscated payloads you’ll be able to generate: https://t.co/HwyS12PxXO
#linux #bash #obfuscation #bashfuscation
last but not least in this series
padding commands using and (||) or (&&) operators
false || date
true && cat really
#short_circuit
false && cat really will not print anything
cat really && (date || will not be executed) #mislead
#linux #bash #obfuscation #bashfuscation
padding commands with command substitution (`` or $()) + inline comment
`` echo test
`# something misleading` echo test
$() echo test
echo `# misleading` test
#linux #bash #obfuscation #bashfuscation
padding commands with piping true (: | or true |) or false (false |)
: | : | cat really
! ! : | : | date
true | date
false | true | false | date
#linux #bash #obfuscation #bashfuscation
padding commands with empty commands (: ;)
: -> true (do nothing)
; -> command separator
: : ; : ; cat really
! ! ! : : ; : ; cat really
#linux #bash #obfuscation #bashfuscation
using history expansion character -> !! (i.e. last command)
ca
!!t really
is equivalent to
cat really
(only 4 interactive shell)
#linux #bash #obfuscation #technique #bashfuscation
padding commands with history expansion characters (#exclamation mark (!))
! ! ! ! echo this is test
(removed the previous tweet as I revealed too much info !)
#linux #bash #obfuscation #technique #string
Using parameter expansion for #bashfuscation
${parameter/pattern/string}
command=cawdog
animal=dock
${command/w${animal/ck/g}/t} really
is
cat really
As I was porting @danielhbohannon's Special-Char-Only obfuscation method over to Bash, as one does, I discovered something interesting. This obfuscation technique does not work when Bash is in debug mode.... 😎 @DissectMalware #bash #obfuscation #bashfuscation
#bashfuscation using #printf #array #for loop
printf %x ${test[index]} --> decimal to hex
printf "\x65" --> hex number to char
* pay attention to ` `, which is command substitution in #bash (simply speaking the cmd inside ` ` is executed in subshell)
![DissectMalware's tweet photo. #bashfuscation using #printf #array #for loop
printf %x ${test[index]} --> decimal to hex
printf "\x65" --> hex number to char
* pay attention to ` `, which is command substitution in #bash (simply speaking the cmd inside ` ` is executed in subshell) https://t.co/Hrlt2TqkZU](https://pbs.twimg.com/media/Dkn31KqWsAApogi.jpg)
#linux #bash #obfuscation #technique #string
#bashfuscation using array and for loop in bash
* Similar approach is used by #malware instances to obfuscate #bat scripts (using #dosobfuscation by @danielhbohannon ?)
https://t.co/XN3VkeTQBR
Whoa, now this is a cool thread! It was only a matter of time until we started hearing about #bashfuscation techniques! Can’t wait to learn more
#linux #bash #obfuscation using octal vals
$'\143\141\164' really
https://t.co/jx3lHaVqZz
"Words of the form $'string' are treated specially. The word expands to string, with backslash-escaped characters replaced as specified by the ANSI C standard."
https://t.co/8iFW2u7ojI
#linux #bash #obfuscation using octal vals
$'\143\141\164' really
https://t.co/jx3lHaVqZz
"Words of the form $'string' are treated specially. The word expands to string, with backslash-escaped characters replaced as specified by the ANSI C standard."
https://t.co/8iFW2u7ojI
Last Seen Hashtags on Sotwe
มุกดาหารรับงาน
Seen from Thailand
ExcitingViews
Seen from United States
闘鶏の節句
Seen from Argentina
แพรกษา
Seen from Thailand
KayceDuttonVest
Seen from United States
paucabeçudo
Seen from Brazil
الأحياء
Seen from United States
荷蘭阿姆斯特丹
Seen from United States
أمواجvsالسكري
Seen from United States
뉴스펭귄
Seen from United States
Trends for you
Most Popular Users
Elon Musk 
@elonmusk
241.6M followers
Barack Obama
@barackobama
119M followers
Cristiano Ronaldo
@cristiano
114.2M followers
Donald J. Trump
@realdonaldtrump
111.8M followers
Narendra Modi
@narendramodi
107.2M followers
Rihanna
@rihanna
98.7M followers
NASA
@nasa
92.4M followers
Justin Bieber
@justinbieber
91.8M followers
KATY PERRY
@katyperry
89.9M followers
Taylor Swift
@taylorswift13
83.8M followers
Lady Gaga
@ladygaga
75.3M followers
Virat Kohli
@imvkohli
73.1M followers
Kim Kardashian
@kimkardashian
70.8M followers
YouTube
@youtube
68.8M followers
Neymar Jr
@neymarjr
66.2M followers
Bill Gates
@billgates
65M followers
Selena Gomez
@selenagomez
62.9M followers
The Ellen Show
@theellenshow
62.3M followers
CNN
@cnn
61.8M followers
X
@x
60.7M followers