protocol.be

User Tools

Site Tools

Trace:
proxmox

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
proxmox [2026/08/31 17:08] – protocolproxmox [2026/08/31 23:49] (current) – protocol
Line 66: Line 66:
 CVt0aNVoUYc71EQhNA4Q1XbqrzCwzjB/gun+8J/+vILYSwpi8AUDqNXAd6T66d5WhNpURf9MB1h4W+m3iD0skYL/xRf/+6SRy+P+xIkBSBZQHtSLecAcNWk1cnO+Db4DU0fzeM0 CVt0aNVoUYc71EQhNA4Q1XbqrzCwzjB/gun+8J/+vILYSwpi8AUDqNXAd6T66d5WhNpURf9MB1h4W+m3iD0skYL/xRf/+6SRy+P+xIkBSBZQHtSLecAcNWk1cnO+Db4DU0fzeM0
 Eezua0I2YLm9KizbgE11FxEB+9NQW3fkdRuYtZZGMzd2DHB+V5jwfCxPKl0SpyWmQNL+cpn9Lpt0EP/GGP/7QA4IL4whAPWOcsU5UpdSESz8DT  Eezua0I2YLm9KizbgE11FxEB+9NQW3fkdRuYtZZGMzd2DHB+V5jwfCxPKl0SpyWmQNL+cpn9Lpt0EP/GGP/7QA4IL4whAPWOcsU5UpdSESz8DT 
 +IP deles:
 +103.117.145.130 C&C
 +45.185.15.129 C&C
 +45.148.10.152 C&C
 +62.60.130.193 (entry proxy, most probably some botnet zombie)
 +205.172.58.170 (monero)
 +
 +grep -a -b -o "BZh" server2-mkauth.raw
 +dd if=/root/server1_partition.raw bs=1 skip=24461097825 status=none | grep -a -b -o "BZh"
 +dd if=server2-mkauth.raw of=staged_padded.maz bs=1 skip=62236491651 count=150000000 status=progress
 +
 +# Extrai as linhas financeiras brutas do arquivo de imagem do disco
 +strings server2-mkauth.raw | grep -E "^INSERT INTO \`sis_cliente\`" > /root/backup_urgente_clientes.sql
 +grep ");$" /root/backup_urgente_clientes.sql > /root/clientes_prontas.sql
 +
 +# Extrai as linhas financeiras brutas do arquivo de imagem do disco
 +strings server2-mkauth.raw | grep -E "^INSERT INTO \`sis_lanc\`" > /root/financas_bruto.sql
 +grep ");$" /root/financas_bruto.sql > /root/financas_prontas.sql
 +
 +strings server2-mkauth.raw | grep -E "^INSERT INTO \`radcheck\`" > /root/radcheck_bruto.sql
 +grep ");$" /root/radcheck_bruto.sql > /root/radcheck_pronto.sql
 +
 +strings server2-mkauth.raw | grep -E "^INSERT INTO \`radreply\`" > /root/radreply_bruto.sql
 +grep ");$" /root/radreply_bruto.sql > /root/radreply_pronto.sql
 +
 +strings server2-mkauth.raw | grep -E "^INSERT INTO \`sis_plano\`" > /root/plano_bruto.sql
 +grep ");$" /root/plano_bruto.sql > /root/plano_pronto.sql
 +
 +strings server2-mkauth.raw | grep -E "^INSERT INTO \`sis_srv\`" > /root/srv_bruto.sql
 +grep ");$" /root/srv_bruto.sql > /root/srv_pronto.sql
 +
 +strings server2-mkauth.raw | grep -E "^INSERT INTO \`sis_config\`" > /root/config_bruto.sql
 +grep ");$" /root/config_bruto.sql > /root/config_pronto.sql
 +
 +mysql -u root -p mkradius < /root/clientes_prontos.sql
 +mysql -u root -p mkradius < /root/financas_prontas.sql
 +mysql -u root -p mkradius < /root/radcheck_pronto.sql
 +mysql -u root -p mkradius < /root/radreply_pronto.sql
 +mysql -u root -p mkradius < /root/plano_pronto.sql
 +mysql -u root -p mkradius < /root/srv_pronto.sql
 +mysql -u root -p mkradius < /root/config_pronto.sql
 +
  
 </code> </code>
proxmox.1788206907.txt.gz · Last modified: by protocol