Login or Register to Ask a Question and Join Our Community


OS X (Apple)

I have a backdoor in my OS X? This is what I found in my bash history

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Operating Systems OS X (Apple) I have a backdoor in my OS X? This is what I found in my bash history
# 1  
Old 04-18-2015
I have a backdoor in my OS X? This is what I found in my bash history
That's what appears at the beginning of my bash history (when you type "open .bash_history" in terminal)
Code:
sudo -k
export PS1="";sudo echo AUTHENTICATED;echo RETRY
exit
export PS1=""
sudo echo AUTHENTICATED ; sudo -k ; echo AUTHENTIKILL ; echo PROCESSEDAUTHENTICATION
sudo ls;sudo -k;exit;echo DONEXT
export PS1=""
sudo echo AUTHENTICATED ; sudo -k ; echo AUTHENTIKILL ; echo PROCESSEDAUTHENTICATION
sudo nice -n -10 $'/\101\160\160\154\151\143\141\164\151\157\156\163/\106\151\154\145\123\141\154\166\141\147\145\56\141\160\160/\103\157\156\164\145\156\164\163/\122\145\163\157\165\162\143\145\163'/SFileParse;exit;echo DONEXT
export PS1=""
sudo echo AUTHENTICATED ; sudo -k ; echo AUTHENTIKILL ; echo PROCESSEDAUTHENTICATION
sudo ls;sudo -k;exit;echo DONEXT
export PS1=""
sudo echo AUTHENTICATED ; sudo -k ; echo AUTHENTIKILL ; echo PROCESSEDAUTHENTICATION
sudo nice -n -10 $'/\101\160\160\154\151\143\141\164\151\157\156\163/\106\151\154\145\123\141\154\166\141\147\145\56\141\160\160/\103\157\156\164\145\156\164\163/\122\145\163\157\165\162\143\145\163'/SFileParse;exit;echo DONEXT
export PS1=""
sudo echo AUTHENTICATED ; sudo -k ; echo AUTHENTIKILL ; echo PROCESSEDAUTHENTICATION
sudo nice -n -10 $'/\101\160\160\154\151\143\141\164\151\157\156\163/\106\151\154\145\123\141\154\166\141\147\145\56\141\160\160/\103\157\156\164\145\156\164\163/\122\145\163\157\165\162\143\145\163'/SFileParse;exit;echo DONEXT
export PS1=""
sudo echo AUTHENTICATED ; sudo -k ; echo AUTHENTIKILL ; echo PROCESSEDAUTHENTICATION
sudo nice -n -10 $'/\101\160\160\154\151\143\141\164\151\157\156\163/\106\151\154\145\123\141\154\166\141\147\145\56\141\160\160/\103\157\156\164\145\156\164\163/\122\145\163\157\165\162\143\145\163'/SFileParse;exit;echo DONEXT
export PS1=""
sudo echo AUTHENTICATED ; sudo -k ; echo AUTHENTIKILL ; echo PROCESSEDAUTHENTICATION
sudo nice -n -10 $'/\101\160\160\154\151\143\141\164\151\157\156\163/\106\151\154\145\123\141\154\166\141\147\145\56\141\160\160/\103\157\156\164\145\156\164\163/\122\145\163\157\165\162\143\145\163'/SFileParse;exit;echo DONEXT
export PS1=""
sudo echo AUTHENTICATED ; sudo -k ; echo AUTHENTIKILL ; echo PROCESSEDAUTHENTICATION
sudo nice -n -10 $'/\101\160\160\154\151\143\141\164\151\157\156\163/\106\151\154\145\123\141\154\166\141\147\145\56\141\160\160/\103\157\156\164\145\156\164\163/\122\145\163\157\165\162\143\145\163'/SFileParse;exit;echo DONEXT
export PS1=""
sudo echo AUTHENTICATED ; sudo -k ; echo AUTHENTIKILL ; echo PROCESSEDAUTHENTICATION
sudo nice -n -10 $'/\101\160\160\154\151\143\141\164\151\157\156\163/\106\151\154\145\123\141\154\166\141\147\145\56\141\160\160/\103\157\156\164\145\156\164\163/\122\145\163\157\165\162\143\145\163'/SFileParse;exit;echo DONEXT
export PS1=""
sudo echo AUTHENTICATED ; sudo -k ; echo AUTHENTIKILL ; echo PROCESSEDAUTHENTICATION
sudo nice -n -10 $'/\101\160\160\154\151\143\141\164\151\157\156\163/\106\151\154\145\123\141\154\166\141\147\145\56\141\160\160/\103\157\156\164\145\156\164\163/\122\145\163\157\165\162\143\145\163'/SHarvest;exit;echo DONEXT

I also would love to use an open source Operational System, but I'm really not skilled at it... Smilie So have to use OS X, which is by itself is full of NSA backdoors Smilie
# 2  
Old 04-18-2015
How do you reckon that could be a backdoor? Because of the strange looking string?
Code:
echo $'/\101\160\160\154\151\143\141\164\151\157\156\163/\106\151\154\145\123\141\154\166\141\147\145\56\141\160\160/\103\157\156\164\145\156\164\163/\122\145\163\157\165\162\143\145\163'
/Applications/FileSalvage.app/Contents/Resources

This User Gave Thanks to Scrutinizer For This Post:
jim mcnamara
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

Im new to bash scriping and i found this expression on a bash script what does this mean.

# check host value regex='^(||1|2|25)(\.(||1|2|25)){3}$' if ')" != "" ]; then if ]; then echo host $host not found exit 4 fi elif ]; then echo $host is an invalid host address exit 5 fi espeacailly the top regex part? ---------- Post updated at 06:58 PM ---------- Previous update was... (1 Reply)
Discussion started by: kevin298
1 Replies

2. Shell Programming and Scripting

Increase bash history size

Hi I am trying to increase the number of commands recorded in my .bash_history file. I followed what is indicated and have add to my .bashrc export HISTCONTROL=ignoreboth export HISTSIZE=1000000 export HISTFILESIZE=1000000 export HISTIGNORE='ls'but the .bash_history only contains 690... (5 Replies)
Discussion started by: louisJ
5 Replies

3. Shell Programming and Scripting

export bash history to file

Hi, I want to export bash history to a file, I used the following command history > /home/administrator/bashHistory But the exported file only contains commands with line number from 996 to the last one, How to export all the commands including commands before line 996? Thanks a lot.... (2 Replies)
Discussion started by: Roy987
2 Replies

4. Shell Programming and Scripting

bash history buffer cache

Moderators, Please excuse if I am in the wrong section. I have a question that someone may know the answer to. We know that a current bash shell keeps a record of all commands in a buffer. When the shell is terminated this buffer is written out to ~/.bash_history for the user. I know... (2 Replies)
Discussion started by: jaysunn
2 Replies

5. UNIX for Dummies Questions & Answers

AIX bash history recall

Is it possible to use the keyboard UP ARROW in place of k to recall history? If so, how/what do I need to do change terminal emulation, etc.? TIA, George (7 Replies)
Discussion started by: gwfay
7 Replies

6. UNIX for Dummies Questions & Answers

bash history - each session in different file

Hello How to configure, or where to have each session history in different file Example: someone is connecting as root and at this time is creating file in which we have history of executed command to server is connecting another user and is created another file with command executed by... (1 Reply)
Discussion started by: vikus
1 Replies

7. UNIX for Dummies Questions & Answers

bash history and command line wrapping

By default, we use ksh (88) as our shell. I prefer bash, so I added this line to my .profile: exec bash -o viI also added this to my .bashrc?: #*********************************************** #These are important tweaks specific to BASH: #***********************************************... (1 Reply)
Discussion started by: mrwatkin
1 Replies

8. Programming

Unix shell with history features like in bash

hii to all i am developing a simple unix shell in c i want to add history feature in that how could i do that plz help if there is any tutorial or website plz put it here history feature should be like that in bash, when press up key show the previous command typed in console plz be... (1 Reply)
Discussion started by: vipin_jss
1 Replies

9. Shell Programming and Scripting

History for custom BASH function

Hello all, I have a bash function that opens Safari (I'm on OS X) with a specified argument. Here it is : function safari { #Safari bash function TLDS=( "http://www." ".com" ".org" ".net" ".gov" ".edu" ) if ; then open -a Safari ${TLDS}$2${TLDS} elif ; then open -a Safari... (0 Replies)
Discussion started by: inquen
0 Replies

10. Shell Programming and Scripting

Mimic bash history behavior

Does anyone know of a way to mimic the up arrow/down arrow type bash behavior within a shell script? Say I have a scripted menu, and would like to be able to up arrow to bring up the last X number of lines of user input? Thanks to anybody with a suggestion. :) (0 Replies)
Discussion started by: sysera
0 Replies
Login or Register to Ask a Question