Traceback spammers using an obfuscation of their URL


 
Thread Tools Search this Thread
Top Forums Shell Programming and Scripting Traceback spammers using an obfuscation of their URL
# 1  
Old 08-10-2016
Traceback spammers using an obfuscation of their URL

I have on occasion been forced to divulge my address to the odd enterprise, here and there. Some time later I've mysteriously found myself on the receiving end of spam. I have a plan to copy said enterprise's domain or part thereof to a bash terminal and obfuscate it, then paste the obfuscated string in the usually optional second line of the requested address.

Then, when spam turns up, I can un-obfuscate it and see which nefarious bugger thought it was OK to sell my details on. My first thought was to just use ROT13 but a long URL would remain long and almost anyone can reverse the string trivially - that's not awful but I'd rather keep the details to myself (and any hacker who could be bothered) - I tried '
Code:
echo <URL> |  gpg2 -ec

' but it wanted recipients and it's not really going anywhere, so I tried '
Code:
echo <URL> | gpg2 -ec --default-recipient-self

'

I clearly don't understand the details sufficiently but any suggestions that allow me to pipe in a URL to gpg or another candidate, supply a passphrase and then copy and paste the resulting string back to the address field AND take the string and reverse it back to the URL, with the same passphrase would be very helpful.

---------- Post updated at 10:13 PM ---------- Previous update was at 07:33 PM ----------

Code:
echo "domain.com" | mcrypt | uuencode >

I was expecting echo to pipe the string to mcrypt which then pipes the encrypted binary encoded string to uuencode which pipes its ASCII encoded output to std out, but this isn't happening!

Last edited by nohspamjose; 08-10-2016 at 06:14 PM.. Reason: code tags
# 2  
Old 08-11-2016
I don' have mcrypt on my system, so I can't try it, but having a redirection operator at the end of a command with no output file specified is a syntax error. Did you try just using:
Code:
echo "domain.com" | mcrypt | uuencode

instead of using:
Code:
echo "domain.com" | mcrypt | uuencode >

# 3  
Old 08-11-2016
You could use openssl eg:


Code:
$ PASS=testing

$ export PASS

$ echo "domain.com" |  openssl enc -e -aes-128-cbc -a -salt -pass env:PASS
U2FsdGVkX1+kygeSl5GyH8pIO8PLS8w6BNLHsErJyoE=

$ echo "U2FsdGVkX1+kygeSl5GyH8pIO8PLS8w6BNLHsErJyoE=" | openssl enc -d -aes-128-cbc -a -salt -pass env:PASS
domain.com

Edit: .. Or if you are after something a little shorter, you could drop the random salt and padding:

Code:
$ PASS=testing

$ export PASS

$ echo "domain.com" | openssl enc -a -e -aes-128-ctr -nopad -nosalt -pass env:PASS
Piq5KE6PVJ59PDg=

$ echo "Piq5KE6PVJ59PDg=" | openssl enc -a -d -aes-128-ctr -nosalt -pass env:PASS
domain.com


Last edited by Chubler_XL; 08-11-2016 at 10:13 PM..
Login or Register to Ask a Question

Previous Thread | Next Thread

8 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

Obfuscation Part II.

Hi guys... This sure is gonna raise a few eyebrows. Further to my shell obfuscation ideas from a previous post this is a derivative with ideas that work. Firstly the file 'obfuscate_master.sh' is created and the access rights changed to the owner only. It is called in ths particular case... (0 Replies)
Discussion started by: wisecracker
0 Replies

2. Shell Programming and Scripting

Reading URL using Mechanize and dump all the contents of the URL to a file

Hello, Am very new to perl , please help me here !! I need help in reading a URL from command line using PERL:: Mechanize and needs all the contents from the URL to get into a file. below is the script which i have written so far , #!/usr/bin/perl use LWP::UserAgent; use... (2 Replies)
Discussion started by: scott_cog
2 Replies

3. UNIX for Dummies Questions & Answers

Awk: print all URL addresses between iframe tags without repeating an already printed URL

Here is what I have so far: find . -name "*php*" -or -name "*htm*" | xargs grep -i iframe | awk -F'"' '/<iframe*/{gsub(/.\*iframe>/,"\"");print $2}' Here is an example content of a PHP or HTM(HTML) file: <iframe src="http://ADDRESS_1/?click=5BBB08\" width=1 height=1... (18 Replies)
Discussion started by: striker4o
18 Replies

4. Web Development

Regex to rewrite URL to another URL based on HTTP_HOST?

I am trying to find a way to test some code, but I need to rewrite a specific URL only from a specific HTTP_HOST The call goes out to http://SUB.DOMAIN.COM/showAssignment/7bde10b45efdd7a97629ef2fe01f7303/jsmodule/Nevow.Athena The ID in the middle is always random due to the cookie. I... (5 Replies)
Discussion started by: EXT3FSCK
5 Replies

5. UNIX for Dummies Questions & Answers

ReDirecting a URL to another URL - Linux

Hello, I need to redirect an existing URL, how can i do that? There's a current web address to a GUI that I have to redirect to another webaddress. Does anyone know how to do this? This is on Unix boxes Linux. example: https://m45.testing.address.net/host.php make it so the... (3 Replies)
Discussion started by: SkySmart
3 Replies

6. Shell Programming and Scripting

url calling and parameter passing to url in script

Hi all, I need to write a unix script in which need to call a url. Then need to pass parameters to that url. please help. Regards, gander_ss (1 Reply)
Discussion started by: gander_ss
1 Replies

7. UNIX for Advanced & Expert Users

url calling and parameter passing to url in script

Hi all, I need to write a unix script in which need to call a url. Then need to pass parameters to that url. please help. Regards, gander_ss (1 Reply)
Discussion started by: gander_ss
1 Replies

8. Shell Programming and Scripting

String hash/obfuscation in ksh

I have a vendor that needs to install a set of scripts (written in korn) that will be run as root through crontab every day. This set of scripts will need to ssh as root to other servers without getting challenged for user name or password. So I have set up ssh key pairing and authorized_keys... (2 Replies)
Discussion started by: StHalcyon
2 Replies
Login or Register to Ask a Question