shc icon indicating copy to clipboard operation
shc copied to clipboard

code is exposed after binary runs

Open hafsiam opened this issue 8 years ago • 6 comments

Hi folks,

I'm using ksh, once I generated my binary executable cmd : shc -v -r -T -f myscript.ksh

I can easly retreive the code in ps command

you can reproduce the issue : while the script is running try to run in another console in the same machine

'ps -ef | grep <name_of-the_script> '

let you see the result .. the original script is exposed via the use of ps -ef !! and will require not too much effort to re-construct the code

info my env build machins is : 2.6.32-504.el6.x86_64 run machine : 3.10.0-327.el7.x86_64

note : I googled a bit and found that some other people are exposing quit a tricky methode to retreive the code

Questions :

  • are developpers aware about this ?
  • any plan to fix or not fix ?

br, M

hafsiam avatar Jul 20 '17 11:07 hafsiam

+1

vpashka avatar Apr 05 '18 16:04 vpashka

duplicate https://github.com/neurobin/shc/issues/7 ?

vpashka avatar Apr 05 '18 16:04 vpashka

There is no -T flag in this shc version. The option is renamed to -U to produce untraceable binary (with ptrace, truss etc.)

neurobin avatar Apr 06 '18 08:04 neurobin

I had added -U parameter to compile script but script still can be seen with the "ps -ef |grep

SilenceDZ avatar Jun 02 '18 12:06 SilenceDZ

https://github.com/neurobin/shc/issues/7#issuecomment-424357661 :100:

Viktova avatar Sep 25 '18 14:09 Viktova

Fixed on the last commit... try with H flag and you should be fine

intika avatar Nov 12 '18 19:11 intika