EasyRealM脚本莫名奇妙多了一个名称叫1的进程是啥

gupo · 发表于 2023-5-10 23:35:10

项目地址：
https://github.com/seal0207/EasyRealM
我就git clone了下，也没用它安装realm，今天突然发现多了一个叫1的进程，监听了我的2019端口，目录里面也多了一个名称为1的可执行文件，如下图：

尝试运行了一下那个文件：

佬们知道这是什么鬼嘛？二进制文件已上传(本人域名已被墙)：
https://yun.vpsxb.net/download/1

HOH · 发表于 2023-5-10 23:39:09

目测这个1就是realm，如果是几MB的话那肯定就是了，GO屙出来的东西又臃又肿

gupo · 发表于 2023-5-10 23:40:14

HOH 发表于 2023-5-10 23:39
目测这个1就是realm

可是我没运行过这个脚本，只是clone了一下项目

sebaobao1205 · 发表于 2023-5-10 23:47:21

realm都绿了你告诉我没动过

gupo · 发表于 2023-5-10 23:47:37

HOH 发表于 2023-5-10 23:39
目测这个1就是realm，如果是几MB的话那肯定就是了，GO屙出来的东西又臃又肿

12M

gupo · 发表于 2023-5-10 23:49:24

sebaobao1205 发表于 2023-5-10 23:47
realm都绿了你告诉我没动过

那个realm.sh，是我刚刚加的执行权限，想看一下，我有没有用它安装过realm，

gupo · 发表于 2023-5-10 23:50:50

sebaobao1205 发表于 2023-5-10 23:47
realm都绿了你告诉我没动过

运行那个脚本后是这样：

而且这个脚本是加了密的……看不到具体啥内容……

言和 · 发表于 2023-5-10 23:51:56

cat ~/.bash_history

gupo · 发表于 2023-5-11 00:00:33

言和发表于 2023-5-10 23:51
cat ~/.bash_history

好像也没看到啥奇怪的命令……

gupo · 发表于 2023-5-11 00:38:53

找到日志了：

2023/05/08 15:48:24 [SERVER]--Started, c: 5, m: 40, client #: 5, ip: 10.0.4.1/29, web: http://10.0.4.2:80, mode: web
2023/05/08 15:55:28 [SERVER]--New client leased IP 10.0.4.4/29
2023/05/08 15:55:28 [STREAM]--Client 4,#32 started
2023/05/08 15:55:28 [STREAM]--Client 4,#40 started
2023/05/08 15:55:28 [STREAM]--Client 4,#2 started
2023/05/08 15:55:28 [STREAM]--Client 4,#18 started
2023/05/08 15:55:28 [STREAM]--Client 4,#26 started
2023/05/08 15:55:29 [STREAM]--Client 4,#0 started
2023/05/08 15:55:29 [STREAM]--Client 4,#4 started
2023/05/08 15:55:29 [STREAM]--Client 4,#20 started
2023/05/08 15:55:30 [STREAM]--Client 4,#34 started
2023/05/08 15:55:33 [STREAM]--Client 4,#36 started
2023/05/08 15:55:33 [STREAM]--Client 4,#33 started
2023/05/08 15:55:33 [STREAM]--Client 4,#12 started
2023/05/08 15:55:34 [STREAM]--Client 4,#8 started
2023/05/08 15:55:34 [STREAM]--Client 4,#24 started
2023/05/08 15:55:38 [STREAM]--Client 4,#22 started
2023/05/08 15:55:39 [STREAM]--Client 4,#28 started
2023/05/08 15:55:40 [STREAM]--Client 4,#10 started
2023/05/08 15:55:48 [STREAM]--Client 4,#32 exited: rpc error: code = Unknown desc = inactivity
2023/05/08 15:55:48 [STREAM]--Client 4,#2 exited: rpc error: code = Unknown desc = inactivity
2023/05/08 15:55:48 [STREAM]--Client 4,#18 exited: rpc error: code = Unknown desc = inactivity
2023/05/08 15:55:48 [STREAM]--Client 4,#26 exited: rpc error: code = Unknown desc = inactivity
2023/05/08 15:55:49 [STREAM]--Client 4,#0 exited: rpc error: code = Unknown desc = inactivity
2023/05/08 15:55:49 [STREAM]--Client 4,#4 exited: rpc error: code = Unknown desc = inactivity
2023/05/08 15:55:49 [STREAM]--Client 4,#20 exited: rpc error: code = Unknown desc = inactivity
2023/05/08 15:55:49 [STREAM]--Client 4,#14 started
2023/05/08 15:55:49 [STREAM]--Client 4,#30 started
2023/05/08 15:55:49 [STREAM]--Client 4,#32 started
2023/05/08 15:55:49 [STREAM]--Client 4,#4 started
2023/05/08 15:55:50 [STREAM]--Client 4,#34 exited: rpc error: code = Unknown desc = inactivity
2023/05/08 15:55:50 [STREAM]--Client 4,#0 started
2023/05/08 15:55:53 [STREAM]--Client 4,#36 exited: rpc error: code = Unknown desc = inactivity
2023/05/08 15:55:53 [STREAM]--Client 4,#33 exited: rpc error: code = Unknown desc = inactivity
2023/05/08 15:55:53 [STREAM]--Client 4,#2 started
2023/05/08 15:55:53 [STREAM]--Client 4,#12 exited: rpc error: code = Unknown desc = inactivity
2023/05/08 15:55:53 [STREAM]--Client 4,#18 started
2023/05/08 15:55:54 [STREAM]--Client 4,#8 exited: rpc error: code = Unknown desc = inactivity
2023/05/08 15:55:54 [STREAM]--Client 4,#24 exited: rpc error: code = Unknown desc = inactivity
2023/05/08 15:55:54 [STREAM]--Client 4,#26 started
2023/05/08 15:55:54 [STREAM]--Client 4,#12 started
2023/05/08 15:55:54 [STREAM]--Client 4,#6 started
2023/05/08 15:55:55 [STREAM]--Client 4,#24 started
2023/05/08 15:55:57 [STREAM]--Client 4,#8 started
2023/05/08 15:55:58 [STREAM]--Client 4,#22 exited: rpc error: code = Unknown desc = inactivity
2023/05/08 15:55:58 [STREAM]--Client 4,#20 started
2023/05/08 15:55:59 [STREAM]--Client 4,#28 exited: rpc error: code = Unknown desc = inactivity
2023/05/08 15:55:59 [STREAM]--Client 4,#38 started
2023/05/08 15:56:00 [STREAM]--Client 4,#10 exited: rpc error: code = Unknown desc = inactivity
2023/05/08 15:56:00 [STREAM]--Client 4,#28 started
2023/05/08 15:56:03 [STREAM]--Client 4,#22 started
2023/05/08 15:56:04 [STREAM]--Client 4,#16 started
2023/05/08 15:56:04 [STREAM]--Client 4,#36 started
2023/05/08 15:56:08 [STREAM]--Client 4,#10 started
2023/05/08 15:56:09 [STREAM]--Client 4,#14 exited: rpc error: code = Unknown desc = inactivity
2023/05/08 15:56:09 [STREAM]--Client 4,#30 exited: rpc error: code = Unknown desc = inactivity
2023/05/08 15:56:09 [STREAM]--Client 4,#32 exited: rpc error: code = Unknown desc = inactivity
2023/05/08 15:56:09 [STREAM]--Client 4,#4 exited: rpc error: code = Unknown desc = inactivity
2023/05/08 15:56:10 [STREAM]--Client 4,#14 started
2023/05/08 15:56:10 [STREAM]--Client 4,#0 exited: rpc error: code = Unknown desc = inactivity
2023/05/08 15:56:10 [STREAM]--Client 4,#30 started

复制代码

		自动登录	找回密码
密码			注册