vaknin

SSDT @ 0x0000000000000000
    0000: 53 53 44 54 49 01 00 00 01 4A 41 4D 44 00 00 00  SSDTI....JAMD...
    0010: 41 6D 64 54 61 62 6C 65 01 00 00 00 49 4E 54 4C  AmdTable....INTL
    0020: 09 05 19 20 A0 0F 00 15 5C 2E 5F 53 42 5F 50 43  ... ....\._SB_PC
    0030: 49 30 06 00 10 44 11 5C 2E 5F 53 42 5F 50 43 49  I0...D.\._SB_PCI
    0040: 30 5B 82 16 50 30 31 30 08 5F 41 44 52 0C 00 00  0[..P010._ADR...
    0050: 01 00 08 5F 53 54 41 0A 0B 5B 82 16 50 30 32 30  ..._STA..[..P020
    0060: 08 5F 41 44 52 0C 00 00 02 00 08 5F 53 54 41 0A  ._ADR......_STA.
    0070: 0B 5B 82 16 50 30 38 30 08 5F 41 44 52 0C 00 00  .[..P080._ADR...
    0080: 08 00 08 5F 53 54 41 0A 0B 5B 82 16 50 31 38 30  ..._STA..[..P180

vaknin

from os import walk, path
from hashlib import md5

print('[+] Running...')

# Find the original file's MD5 sum
with open('original.txt', 'rb') as file:
    webshell_hash = md5(file.read()).hexdigest()

# Scan the entire system, and compare any file's hash to the malicious webshell's hash

vaknin

NEW_USER_BORDER = "____________________________________________________________________________________________________"

# Read the log file
with open("log.txt") as f:
    users = f.read()

final = ''
active_users = 0

# Enumerate all users

vaknin

#
# ~/.bashrc
#

# If not running interactively, don't do anything
[[ $- != *i* ]] && return

# Aliases
alias ls='ls --color=auto'
alias vi='nvim'

vaknin

2024 Update

Anbox had been deprecated, and cannot/shouldn't be used.
One alternative is Waydroid:
https://github.com/waydroid/waydroid

---

Anbox on Arch

References: