scMerlin scMerlin 2.5.8 - Service and script control menu for Asuswrt-Merlin, October 20, 2024

[Ripshod]

I've just run it again:

! Suspicious string found in file /tmp/var/wwwext/scmerlin/top.htm

Shows how random false positives are. I admit it does appear to be scMerlin related, but given that these are custom scripts i'm hardly surprised. These scripts should not be there on Asus firmware, and Asus firmware is what these scanners expect to see.

 

[dave14305]

I've just run it again:

! Suspicious string found in file /tmp/var/wwwext/scmerlin/top.htm

Shows how random false positives are. I admit it does appear to be scMerlin related, but given that these are custom scripts i'm hardly surprised. These scripts should not be there on Asus firmware, and Asus firmware is what these scanners expect to see.

It’s probably finding the top output of a previous file string check from itself in the top.htm file displayed in scMerlin. Checking for vulnerabilities results in false positive vulnerabilities.

 

[Viktor Jaep]

I have scMerlin installed. I ran the script from /tmp rather than from a FAT32 USB stick. I did not get a false positive.

The list of suspicious file strings is in the script:

suspicious_strings="8ewMqdWf9K|3deCSCIoaQ|NIwZI3pvmJ|Klq1BtftKC|gSqf7pcEQQ|asi\.sh|31\.170\.22\.195|asi\.ok|asi\.ko|1-arm-le-t|1-mips-le-t|e4DtOMgfOorTPVnvSXm1D|downl_crt.sh"

Quite the comprehensive list of malware there...

 

[Martinski]

Release Notes for scMerlin 2.5.8 version (now available):

1) Fixed a cron job display issue on the webGUI.

See the following post for details & screenshots regarding the display issue:

scMerlin - scMerlin 2.5.7 - Service and script control menu for Asuswrt-Merlin, September 23, 2024

Release Notes for the scMerlin 2.5.6 version now available [2024-June-30]: 1) FIXED code to get the correct temperatures on the webGUI for the "GT-BE98_PRO" router. 2) Some code improvements.

www.snbforums.com

 

[Tarek Yag]

Thanks for the update @Martinski! I confirm that my cron job display issue got fixed with this update.
Did you forget to update this thread's title?

 

[thelonelycoder]

Did you forget to update this thread's title?

Done.