search

DDNetPP / server

Scripts to run production teeworlds servers.
0 stars 1 forks source link

Scan mod for backdoors #43

Open ChillerDragon opened 3 years ago

ChillerDragon commented 3 years ago

Add some fun hobby project scanner to scan the mod for opening network connections, system and shell calls. Unexpected forks and threads. Patterns like (print|log).Config.rcon or /bin/(sh|bash).

ChillerDragon commented 2 years ago

Also detect bidirectional unicode text.

https://github.com/nickboucher/trojan-source https://github.blog/changelog/2021-10-31-warning-about-bidirectional-unicode-text/

Do a grep on the src with this regex https://github.com/nickboucher/bidi-viewer/blob/a88e257d24fa2bcd8da2e711d09c512dbd96c49d/src/App.js#L9-L10

ChillerDragon commented 1 year ago

This perl script probably has better support for banned function calls https://gitlab.com/wireshark/wireshark/-/blob/61d81683c8df03b5219f06a4d7db7c0f6c803676/tools/checkAPIs.pl