3 ms·
They probably have logs for manual investigative activity, and took the site down when you kept re-running the payload. Also, please don't execute payloads on
by dannyw 4y ago
They probably have logs for manual investigative activity, and took the site down when you kept re-running the payload.
Also, please don't execute payloads on your laptop. That seems really stupid.
- CuckooExe 4y ago> Also, please don't execute payloads on your laptop. That seems really stupid. I would never execute a payload that I didn't manually vet on my computer :) That's why I didn't actually execute the full stage-two, but just pieces of it so it would decode what it was reaching out to. I also replaced the `eval` in the next stage to an `echo` to see what it was doing!
- PeterisP 4y agoExecuting (parts of) payloads is often an effective part of malware analysis, revealing things quicker than static analysis. You just need to do it in an isolated environment - it can be a virtual machine (while VM escapes exist, they are quite rare) or a separate laptop that doesn't have any personal data and will be wiped afterward.