scMerlin scMerlin 2.5.8 - Service and script control menu for Asuswrt-Merlin, October 20, 2024

[Ripshod]

I've just run it again:

! Suspicious string found in file /tmp/var/wwwext/scmerlin/top.htm

Shows how random false positives are. I admit it does appear to be scMerlin related, but given that these are custom scripts i'm hardly surprised. These scripts should not be there on Asus firmware, and Asus firmware is what these scanners expect to see.

 

[dave14305]

I've just run it again:

! Suspicious string found in file /tmp/var/wwwext/scmerlin/top.htm

Shows how random false positives are. I admit it does appear to be scMerlin related, but given that these are custom scripts i'm hardly surprised. These scripts should not be there on Asus firmware, and Asus firmware is what these scanners expect to see.

It’s probably finding the top output of a previous file string check from itself in the top.htm file displayed in scMerlin. Checking for vulnerabilities results in false positive vulnerabilities.

 

[Viktor Jaep]

I have scMerlin installed. I ran the script from /tmp rather than from a FAT32 USB stick. I did not get a false positive.

The list of suspicious file strings is in the script:

suspicious_strings="8ewMqdWf9K|3deCSCIoaQ|NIwZI3pvmJ|Klq1BtftKC|gSqf7pcEQQ|asi\.sh|31\.170\.22\.195|asi\.ok|asi\.ko|1-arm-le-t|1-mips-le-t|e4DtOMgfOorTPVnvSXm1D|downl_crt.sh"

Quite the comprehensive list of malware there...

 

[Martinski]

Release Notes for scMerlin 2.5.8 version (now available):

1) Fixed a cron job display issue on the webGUI.

See the following post for details & screenshots regarding the display issue:

scMerlin - scMerlin 2.5.7 - Service and script control menu for Asuswrt-Merlin, September 23, 2024

Release Notes for the scMerlin 2.5.6 version now available [2024-June-30]: 1) FIXED code to get the correct temperatures on the webGUI for the "GT-BE98_PRO" router. 2) Some code improvements.

www.snbforums.com

 

[Tarek Yag]

Thanks for the update @Martinski! I confirm that my cron job display issue got fixed with this update.
Did you forget to update this thread's title?

 

[thelonelycoder]

Did you forget to update this thread's title?

Done.

 

[AlexHK]

I noticed on my BE86U that the sitemap doesn't show (it's working on AX86U). Not that I need it, but I just wanted to post this.

Not sure how to "debug".

scMerlin 2.5.8

 

[Ripshod]

I noticed on my BE86U that the sitemap doesn't show (it's working on AX86U). Not that I need it, but I just wanted to post this.

Not sure how to "debug".

scMerlin 2.5.8

View attachment 63682

Never noticed before (never looked) but the same on the BE88U. Probably just needs a little rework for the 3006 firmware, I trust it'll be sorted in time.
(beta tester available. Hint, hint).

 

[Martinski]

I noticed on my BE86U that the sitemap doesn't show (it's working on AX86U). Not that I need it, but I just wanted to post this.

Not sure how to "debug".

scMerlin 2.5.8
...

Never noticed before (never looked) but the same on the BE88U. Probably just needs a little rework for the 3006 firmware, I trust it'll be sorted in time.
(beta tester available. Hint, hint).

Can one of you (or both) post a clear screenshot showing any error messages that may appear on the "Browser Console" window?
I might have some time next weekend to take a look at this, but note that it is a low priority at this point.
Just FYI.

 

[AlexHK]

Can one of you (or both) post a clear screenshot showing any error messages that may appear on the "Browser Console" window?
I might have some time next weekend to take a look at this, but note that it is a low priority at this point.
Just FYI.

Clicking scMerlin tab:


Clicking Sitemap tab (no error, what you see only shows because I have verbose enabled);

 

[Ripshod]

I'm not seeing any errors - just warnings
Sitemap tab:


scMerlin tab:

 

[AlexHK]

Yup, that's what I meant with "no error, what you see only shows because I have verbose enabled". If verbose is off in the console, there is nothing at all (on the sitemap tab).

 

[Ripshod]

Ah

Yup, that's what I meant with "no error, what you see only shows because I have verbose enabled". If verbose is off in the console, there is nothing at all (on the sitemap tab).

You use chrome/edge and can see mention of javascript. I tried chrome and got the exact same warnings.
But in my normal browser (firefox) the messages are totally different. I have ensured javascript is enabled in both firefox and chrome.

Additional: