bdienst.sh

#!/bin/bash
#./bdienst.sh
# Israel Torres
# malware research
# observation analyzed stripped and extrapolated to work via bash for intelligible input
url="http://ludihumor.com/wp-admin/solar-energy&page=7"
log="malware-log.txt"
while [ 1 ]
    do
        logstamp=$(date +%s)
        echo "timestamp:$logstamp">>$log
        curl -s --referer http://www.google.com "$url" >> $log
        echo -e "\n" >>$log
        # update filter inside loop using backslash for readablity
        cat malware-log.txt \
        | tr -d '\n' \
        | sed "s/<\/script>/\\`echo -e '\n\r'`/g" \
        | cut -d '?' -f 1 \
        | sed 's/<script>var url = \"//g' \
        | sed "s/http:/\\`echo -e '\t'`http:/g" \
        | sed 's/\/in.cgi//g' \
        | cut -d ':' -f 2,3 \
        | uniq -f 1
        #
        sleep 900
    done
#output using filters is
# unixtimestampe tab poisoned_url
# EOF