GoKawiilLinux is an interpreter And why you would want to exec a cpio Linux kexec boot recursion quine elf
This is a standalone addendum to an earlier four-part series. Reading the previous parts is not required.
Links to previous parts, if you are interested:
In a previous article, I left you with this mysterious command.
curl https://astrid.tech/rkx.gz | gunzip | sudo sh
What does it do? This can’t possibly be safe to run, can it? Am I distributing malware to you?
Fine, fine, I’ll open it up and show you what’s inside.
Reverse engineering rkx.gz
First, we download it.
astrid@chungus /tmp ❯ curl https://astrid.tech/rkx.gz | gunzip > rkx % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 14.31M 100 14.31M 0 0 28.16M 0 0
... continue reading