Benign go Download

catinello.eu/wgd v0.0.0-20260531144445-1319a73fb153

Legitimate Go web server code

golang.org/x/crypto module import pathCalls Go HTTP redirect response

SHA-256ac1656008b1e1cc64c5d31b538db76ece58b8c248d2dcdae58719e5dcedea517

URLhttps://proxy.golang.org/catinello.eu/wgd/@v/v0.0.0-20260531144445-1319a73fb153.zip

Evidence

Go source imports the net/http standard package logging.go · lines 1–14

⋯6 lines
7	"log"
8	"net"
9	"net/http"
10)
11
12// http access logger
13func logging(h http.Handler, logger *log.Logger) http.Handler {
14	return http.HandlerFunc(func(w http …

password/passwd key with inline value user-credentials.sh · lines 1–14

1#!/bin/sh
2
3# User: $(whoami)
4# Password: test
5pass="test"
6
7main() {
8  # random generated salt value
9  local RAGE="$(cat /dev/urandom | tr -dc 'a-z0-9' | fold -w 32 | head -n1)"
10
11  local PASS="$(echo -n ${pass} | argon2 ${RAGE} -i -r -t 3 -k $((32*1024)) -p 4 -l 32 | tr -d '\n' | base91 -w 100)"
12  local SALT="$(echo -n ${RAGE} | base91)"
13
14  echo "${USER}×${SALT}� …

golang.org/x/crypto module import path http.go · lines 29–41

29:28… ps"
30	"catinello.eu/wgd/git"
31
32	"github.com/fsnotify/fsnotify"
33
34	"golang.org/x/crypto/acme"
35	"golang.org/x/crypto/acme/autocert"
36	"golang.org/x/crypto/argon2"
⋯5 lines

strings.Fields tokenizer http.go · lines 135–147

77… ], err)
				continue
			}
138
			if len(s) == 3 {
				p := strings.Fields(s[2])
				ua[s[0]] = append(p, "_static")
			} else {
⋯5 lines

Go decodes a hexadecimal string http.go · lines 156–161

11… (h) > 2 {
			s := base91.Decode([]byte(h[1]))
158
			p, err := hex.DecodeString(string(base91.Decode([]byte(h[2]))))
			if err != nil {
				m.E().Printf("User %v skipped, credentials failed to parse: %v\ …

No evidence locations were recorded for this file. Raw result