busybox-extras 1.38.0-r0
Telnet backdoor setupTelnet daemon for remote access
SHA-256600cdd8fbc093f4fe100a43a48dd65d605d73010c21d4e0ca36b57c64f0b517b
Evidence
0x14910000000000000000647072696e746600........dprintf.
0x14a1736574756964006368726f6f7400736fsetuid.chroot.so
0x14b1636b657400707574636861725f756e6ccket.putchar_unl
0x14c16f636b656400707574635f756e6c6f63ocked.putc_unloc
0x14d16b656400 ked.
0x14e87370656e64007661737072696e746600spend.vasprintf.
0x14f8676d74696d655f7200657865636c0072gmtime_r.execl.r
0x150865616464697200657865637600666f70eaddir.execv.fop
0x1518656e007374726e636d7000696e65745fen.strncmp.inet_
0x152861746f6e006f7074696e640073747272aton.optind.strr
0x153863687200706970650063666d616b6572chr.pipe.cfmaker
0x1548617700636f6e6e656374006765747077aw.connect.getpw
0x155875696400636c6f736564697200696e69uid.closedir.ini
0x15687467726f75707300696e65745f6e746ftgroups.inet_nto
0x157861006d6b6e6f64007369676e616c0073a.mknod.signal.s
0x158874726e6370790073696770726f636d61trncpy.sigprocma
0x1598736b005f5f737461636b5f63686b5f66sk.__stack_chk_f
0x15a861696c00756e6c696e6b006c69737465ail.unlink.liste
0x15b86e0066676574735f756e6c6f636b6564n.fgets_unlocked
0x15c80073656c656374006d6b646972007265.select.mkdir.re
0x15d8616c6c6f6300737464696e005f657869alloc.stdin._exi
0x15e874006d656d636872007374727062726bt.memchr.strpbrk
0x15f800676574706964006b696c6c00737472.getpid.kill.str
0x160873706e0073747264757000676574635fspn.strdup.getc_
0x1618756e6c6f636b656400696e65745f7074unlocked.inet_pt
0x16286f6e007374726674696d65006d6b7374on.strftime.mkst
0x1638656d70007365746a6d7000737472746femp.setjmp.strto
0x16486c00697361747479007374726368726el.isatty.strchrn
0x1658756c007379736c6f670073796d6c696eul.syslog.symlin
0x16686b0067657470776e616d007374726c65k.getpwnam.strle
0x16786e0073656e6400736967656d70747973n.send.sigemptys
0x16886574006f70656e6c6f67006765746164et.openlog.getad
0x16986472696e666f00737472737472007374drinfo.strstr.st
0x16a8726373706e00726d646972005f5f6572rcspn.rmdir.__er
0x16b8726e6f5f6c6f636174696f6e0062696erno_location.bin
0x16c864007463736574617474720063686469d.tcsetattr.chdi
0x16d872006d656d636d70006765746e616d65r.memcmp.getname
0x16e8696e666f007374726e64757000656e64info.strndup.end
0x16f86772656e7400676574736f636b6f7074grent.getsockopt
0x17080073657467726f757073006772616e74.setgroups.grant
0x17187074006d656d70637079006765746f70pt.mempcpy.getop
0x172874006475703200667374617400756e73t.dup2.fstat.uns
0x17386574656e76006c6f6e676a6d70007368etenv.longjmp.sh
0x17487574646f776e0076736e7072696e7466utdown.vsnprintf
0x175800706f6c6c0073696761646473657400.poll.sigaddset.
0x17686374696d650067657467726e616d0070ctime.getgrnam.p
0x17787574656e76007374646f757400726563utenv.stdout.rec
0x17887600667075747300737472746f6b5f72v.fputs.strtok_r
0x1798007374726e6c656e006c7365656b0066.strnlen.lseek.f
0x17a8636c6f73650074637365747067727000close.tcsetpgrp.
0x17b8737472746f756c00736574736f636b6fstrtoul.setsocko
0x17c87074006d616c6c6f6300737472636173pt.malloc.strcas
0x17d865636d70006c73746174007261697365ecmp.lstat.raise
0x16a482d747970653a2025730d0a005757572d-type: %s...WWW-
0x16a5841757468656e7469636174653a204261Authenticate: Ba
0x16a68736963207265616c6d3d22252e393939sic realm="%.999
0x16a7873220d0a004c6f636174696f6e3a2025s"...Location: %
0x16a88732f257325730d0a0043 s/%s%s...C
0x16d20436f6e74656e742d4c656e6774683a00Content-Length:.
0x16d30417574686f72697a6174696f6e3a0052Authorization:.R
0x16d40616e67653a0062797465733d00416363ange:.bytes=.Acc
⋯5 more rows
0x187cf20474d5400696e6465782e68746d6c00 GMT.index.html.
0x187df485454502f312e3120323030204f4b0dHTTP/1.1 200 OK.
0x187ef0a0068747470642e636f6e66002f6574..httpd.conf./et
0x187ff630073747265616d00646772616d0072c.stream.dgram.r
0x1880f646d007365717061636b657400726177dm.seqpacket.raw
0x1881f00 .
No evidence locations were recorded for this file. Raw result