nix-conf/modules/servers/odin/upfast-cleaner.sh

47 lines
1.5 KiB
Bash
Executable file

instance="http://127.0.0.1:8383"
files=$(curl -s "$instance"/files/)
# Check for keygens on server
if echo "$files" | grep -i "keygen" >> /dev/null; then
for file in $(echo "$files" | grep -i "keygen"); do
echo "Deleting file $file"
curl -X DELETE "$instance/files/$file"
done
fi
# Check for common payload names on server
if echo "$files" | grep -iE "dorpxy|mner|mnpxy" >> /dev/null; then
for file in $(echo "$files" | grep -iE "dorpxy|mner|mnpxy"); do
echo "Deleting file $file"
curl -X DELETE "$instance/files/$file"
done
fi
# Delete common php payloads
if echo "$files" | grep -i ".php" >> /dev/null; then
for file in $(echo "$files" | grep -i ".php"); do
if curl -s "$instance/files/$file" | grep -i "base64_decode" >> /dev/null; then
echo "Found payload, deleting file $file"
curl -X DELETE "$instance/files/$file"
fi
done
fi
# Delete all shell scripts that make direct mention of my upfast instance
if echo "$files" | grep -i ".sh" >> /dev/null; then
for file in $(echo "$files" | grep -i ".sh"); do
if curl -s "$instance/files/$file" | grep -i "upfast.cronyakatsuki.xyz/files" >> /dev/null; then
echo "Found payload, deleting file $file"
curl -X DELETE "$instance/files/$file"
fi
done
fi
# Delete kernel object files
if echo "$files" | grep -iE ".*.ko" >> /dev/null; then
for file in $(echo "$files" | grep -iE ".*.ko"); do
echo "Deleting file $file"
curl -X DELETE "$instance/files/$file"
done
fi