Tutorial Secure your shell script using obash

[Bon-chan]

Encrypt and obfuscate your shell script

We need to ensure package manager is updated and free from errors, then install dependencies.

Debian/Ubuntu:
export DEBIAN_FRONTEND=noninteractive
apt update
apt autoremove --fix-missing -y -f
apt upgrade -y
apt install build-essential libssl-dev curl -y

RHEL/Fedora:
yum update -y
yum groupinstall "Development Tools" -y
yum install openssl-devel zip curl -y


Then download and extract obash source archive:
curl -skL "https://github.com/louigi600/obash/archive/8976fd2fa256c583769b979036f59a741730eb48.tar.gz" -o obash.tgz
tar xf obash.tgz && rm -f obash.tgz


Now enter obash source directory, run make clean first and start compiling obash, then copy obash executable into bin/sbin path of your machine:
cd obash-8976fd2fa256c583769b979036f59a741730eb48
make clean
make
mv -f obash /usr/local/sbin/obash
cd .. && rm -rf obash-8976fd2fa256c583769b979036f59a741730eb48


Now our obash is now ready to use, run obash -h for guide how to use.

examples:
* Encrypt your myscript.sh with output filename MyEncryptedScript(executable only on local machine):
obash -o MyEncryptedScript myscript.sh

* Encrypt your myscript.sh with output filename MyEncryptedScript(executable on all machine/reusable):
obash -r -o MyEncryptedScript myscript.sh
## Test run: ./MyEncryptedScript

Guides for script sharer:
If sharing script for Debian 9 (oldstable), Debian 10 (stable/kernel v4), Ubuntu 16, 18 and 19: Compile it using Debian 9 or Ubuntu 16.
If sharing script for Ubuntu 20, Debian 10 (stable/kernel v5), Fedora 30+, Compile it to their corresponsive distribution version.
Basta ang logic lang po sa pagcocompile, kung anong linux kernel version (v3, v4 or v5) yung pag eexecutan ng script, dapat doon din po kayo magcompile or magbuild ng script.

Tool for checking bash script errors: You do not have permission to view the full content of this post. Log in or register now.
or via their linux tool: (install) apt install shellcheck -y || yum install ShellCheck -y; (use) shellcheck myscript.sh
green and yellow text codes are just notice and warnings, while red is critical/fatal errors.

 

[P0tchie]

salamat lods..

 

[Ragnverdhr]

huwaw, salamt sa pag share hahaha

 

[Toto123]

Salamat dito^^

 

[XstrikerX]

Tutorial din po sana for Bash Scripting master Bon

 

[Frwa]

salamat sa tutorial sir khit diko alam sa ngayon..

 

[Bon-chan]

salamat lods..

Salamat dito^^

welcome

Tutorial din po sana for Bash Scripting master Bon

start po muna kayo sa basics like usage ng linux utility tools like cd, rm, cp, mv, ls, cat , grep, sed . then after nyo po matutunan yan, kusa po kayong magkakaidea sa bash scripting, para po kasi sakin, matututunan po magsulat or makaintindi ng bash script yung user depende sa haba at tagal na nya pong experience sa linux.

salamat sa tutorial sir khit diko alam sa ngayon..

welcome, babad lang po kayo sa pag manage ng vps nyo via command-line interface/terminal then patagal ng patagal po yan sir magkaka idea napo kayo kung paano gumawa ng bash script

 

[P0tchie]

may panel po ba kayo lods o may lam kayong panel na may ph server?

 

[Ldreedz]

Tnx

 

[Bon-chan]

may panel po ba kayo lods o may lam kayong panel na may ph server?

medyo out-of-topic po ata question nyo. gamit lang po kayo search bar or punta po kayo sa new-topics then hanap po kayo dun kung may nakita kayong new ph server

Tnx

welcome

 

[P0tchie]

sorry po

 

[P0WD3R]

salamat bon !

 

[Bon-chan]

welcome

 

[L1bre]

salamat po

 

[Maldita007]

Thanks sa tutorial sa ngayon wala pa talaga ako alam hahapati sa vps installer kay juice. Baka naman maaksyonan nyo ito ayaw magrun haha Baka mali ang script na ginamit ko ... Salamat boss

 

[PHC_Jayvee]

Nilabas na salamat po bossing

Btw boss centos as rhel/fedora same lang yun diba?

 

[blackestsaint]

Maraming salamat po dito. ilang araw na din ako nag sesearch sa google ng pag obfuscate at no success.

Pero dito sa thread nyo na ito, very detailed steps at fully working. Kaka-test ko lang po now.
May bonus pa na script check, hindi na ko mag mamanual check.
Very big help po ito sa amin newbie sa pag gawa ng bash script.

 

[Bon-chan]

salamat po

welcome

Nilabas na salamat po bossing

Btw boss centos as rhel/fedora same lang yun diba?

yes po same lang po, diko na po kasi alam mangyayari sa centos, ang sabi sa news tatanggalin na daw po yan sa 2021. ang alternative po muna rhel.

 

[Bon-chan]

Thanks sa tutorial sa ngayon wala pa talaga ako alam hahapati sa vps installer kay juice. Baka naman maaksyonan nyo ito ayaw magrun haha Baka mali ang script na ginamit ko ... Salamat boss

You do not have permission to view the full content of this post. Log in or register now.

 

[Bon-chan]

Maraming salamat po dito. ilang araw na din ako nag sesearch sa google ng pag obfuscate at no success.

Pero dito sa thread nyo na ito, very detailed steps at fully working. Kaka-test ko lang po now.
May bonus pa na script check, hindi na ko mag mamanual check.
Very big help po ito sa amin newbie sa pag gawa ng bash script.

di nyo po nadaanan yung shc? pati yung bash-obfuscate na php script? however yung shc may public decompiler saka yung bash-obfuscate napakadaling buklatin , kaya obash po talaga ginagamit ko for now.