How to search files for specific code?
Hey this is gonna sound random but my friend got sent a Minecraft add-on that stole his season token and resulted in him losing his Hypix account (a Minecraft server) and i thought it would be a fun exercise to pick thru the files and find were it sent the season token to. Only problem is there is 3 serpent files and iv already done a broad search with grep and was unable to find anything leading to me think the code for that is likely obfuscated. Anyone have any tips for stuff like this? Also virustotal and scanners like that are unable to find anything. Thanks for your help!
5 Replies
the rabbit hole went deep. it obfuscated the code using number arrays and used a handful of variables. They it combined all those variables together. then it decoded hidden javascript that pulled and ran the script from the internet.
In file explorer start a search and open the search options feature and select file contents. This will search every file and every file in every subdirectory to see if any part of said file has the search in it.
What was the plugin's name or what was he trying to install?
It looked to be a hack client they that took and slightly modified to well, hack people. I don’t think it was a pubic one because they privately shared it with him
Ok. Did any new ports open on his PC?
This very well could be a RAT.