#!/bin/bash # # noscript: A (Bash) Script for faking some "interesting" files which # can be found in P2P networks and which are often used for dissuation abuse. # This Script uses the real file names and fakes a) the file size and c) the # CRC-32 checksum. # The working directory is the actual and the faking takes some hours and about 15 GB disk space. # At the script end the script cleans up by deleting the crcfaker files and itself. # This is a simple example that it's easy to generate indications (fakes) and without # confiscation and forensic analysis there is no court-proof evidence. # Other sorts of fakes in P2P networks, e. g. faking an IP number via an open WLAN, can be # found e. g. in the Heise News. # "THE BEER-WARE LICENSE" (Revision 43): # Dr. Rolf Freitag (rolf.freitag at email.de) wrote this file. # As long as you retain this notice you can do whatever # the GPL (GNU public License) allows with this stuff. # If you think this stuff is worth it, you can send me money via # paypal or if we met some day you can buy me a beer in return. # Version 0.21, 2008-08-10: Successfully tested, works without a bug, # Version 0.22, 2008-08-13: Header optimisation # Todo: Checks, e. g. for wget, multithreading (CRC Faker is single-threaded), parametrisation, # random timestamp for each file/dir, filetype specific faking of the file # header, version for Unix/Linux and Cygwin (MS-Windows), # be verbose set -x # download CRC Faker, which fakes files with random bytes and a given CRC32 checksum wget http://www.crc2003.250x.com/fakecrc-1.0.zip # unzip unzip fakecrc-1.0.zip # fakes # Purzel # fake_program CRC32 size/bytes file name Linux/fakecrc 85363198 733657088 "Masturbation 04 (Scenes) [Purzel-Video.com] (Solo_Mast_Dildo) (512x384 Super High Quality SHQ) (VG) - 1h32m34s.avi" Linux/fakecrc 71216f29 733990912 "Purzel Masturbation Nr.6.avi" Linux/fakecrc 32ca98ae 732518400 "Purzel-Video 125 - Masturbation Nr 3.avi" Linux/fakecrc 1f4b685c 735899648 "Purzel Video 166 - Dicke Lippen kleine L??cher 4 CD1.avi" Linux/fakecrc eba26ebb 736216392 "Purzelvideo 89 - Masturbation Nr 2.avi" Linux/fakecrc 07a07fbc 791248896 "Purzel.Video.Masturbation.11.XXX.DVD-Rip.XviD.(Ripped.&.Released.by.M.E.G.A).avi" Linux/fakecrc 16f3a039 730818560 "Purzel Video - Masturbation Nr. 1.avi" # Updown Entertainment Linux/fakecrc 93378129 712396800 "GGG-Geile Girls-fertig zum vollspritzen(divx,xxx,bukkake).avi" mkdir "GGG.Absolut.Sperma.German.2005.XXX.DVDRiP.XviD-WDE" Linux/fakecrc 4da1e28d 737757184 "GGG.Absolut.Sperma.German.2005.XXX.DVDRiP.XviD-WDE/wde-as.avi" mkdir "GGG.Amili.lernt.schlucken.German.2005.XXX.DVDRiP.XviD-WDE" Linux/fakecrc ff0716d0 737748992 "GGG.Amili.lernt.schlucken.German.2005.XXX.DVDRiP.XviD-WDE/wde-als.avi" Linux/fakecrc ca795a1f 737738752 "GGG.Die.Tittenkoenigin.German.2005.XXX.DVDRiP.XviD-www.Bitworld.mpg" # Videorama GmbH Linux/fakecrc 6db8d43c 1523912704 "Videorama Das beste aus Maximum Perversum 5 (Rip by Egofist).avi" Linux/fakecrc 0020feb4 273002496 "Gina Wild - XXX [DivX].avi" Linux/fakecrc abbef01a 729861120 "ArschgeileFlittchenXXXDivX.avi" Linux/fakecrc 63ef76ce 734271488 "Blutjunge.Pfadfinderinnen.im.Sex-Camp.XXX.MagmaTeeny.Divx502.avi" Linux/fakecrc 02bd1586 161771520 "Flesh Hunter - Krystal Steal.avi" Linux/fakecrc ce08d463 273002496 "Gina Wild - 4 - Durchgefickt.avi" Linux/fakecrc ada737d3 132116992 "Krystal-Steal-Trained-Teens.avi" Linux/fakecrc 38b664fd 732231680 "Porno_Giganten_XXX_German-DivX.avi" Linux/fakecrc 4f4c3691 572391424 "Teenies.auf.Ibiza.dvd-rip.by.BadIragS.avi" Linux/fakecrc c2561fa7 713865216 "Teeny_Exzesse_-_Sommer_Sonne_freche_Goeren__german_XXX.ShareReactor.avi" Linux/fakecrc e41288ff 700702720 "Teeny_Exzesse_Peep.ShareReactor.avi" Linux/fakecrc 00c7c580 87359488 "Gina Wild - After Party.avi" Linux/fakecrc 660d5114 32163840 "Gina Wild - mannervergewaltigung.avi" # some trolling: political, war, weapons, crime, sex, music, industy data, # trading secrets, patent data, trash, dd if=/dev/urandom of=Watergate_$((1+$(($RANDOM %10)))).doc bs=$((1+$(($RANDOM % 512)))) count=$((42+$(($RANDOM / 42)))) dd if=/dev/urandom of=National_Defense_Secrets_$((1+$(($RANDOM %10)))).pdf bs=$((1+$(($RANDOM % 512)))) count=$((42+$(($RANDOM / 42)))) dd if=/dev/urandom of=Blackwater_War_Crimes_$((1+$(($RANDOM %10)))).PDF bs=$((1+$(($RANDOM % 512)))) count=$((42+$(($RANDOM / 42)))) dd if=/dev/urandom of=Al-Qaeda_$((1+$(($RANDOM %10)))).doc bs=$((1+$(($RANDOM % 512)))) count=$((42+$(($RANDOM / 42)))) dd if=/dev/urandom of=Anthrax_Powder_$((1+$(($RANDOM %10)))).pdf bs=$((1+$(($RANDOM % 512)))) count=$((42+$(($RANDOM / 42)))) dd if=/dev/urandom of=Bomb_$((1+$(($RANDOM %10)))).doc bs=$((1+$(($RANDOM % 512)))) count=$((42+$(($RANDOM / 42)))) dd if=/dev/urandom of=Child_Porn_$((1+$(($RANDOM %10)))).jpg bs=$((1+$(($RANDOM % 512)))) count=$((42+$(($RANDOM / 42)))) dd if=/dev/urandom of=Gina_Wild_$((1+$(($RANDOM %10)))).avi bs=$((1+$(($RANDOM % 512)))) count=$((42+$(($RANDOM / 42)))) dd if=/dev/urandom of=Bushidos_Greatest_Hits_$((1+$(($RANDOM %10)))).rar bs=$((1+$(($RANDOM % 512)))) count=$((42+$(($RANDOM / 42)))) dd if=/dev/urandom of=SIEMENS_Plans_2009_$((1+$(($RANDOM %10)))).zip bs=$((1+$(($RANDOM % 512)))) count=$((42+$(($RANDOM / 42)))) dd if=/dev/urandom of=TRADING_SECRETS_$((1+$(($RANDOM %10)))).ZIP bs=$((1+$(($RANDOM % 512)))) count=$((42+$(($RANDOM / 42)))) dd if=/dev/urandom of=Patent_data_$((1+$(($RANDOM %10)))).zip bs=$((1+$(($RANDOM % 512)))) count=$((42+$(($RANDOM / 42)))) dd if=/dev/urandom of=Secret_$((1+$(($RANDOM %10)))).Encrypted bs=$((1+$(($RANDOM % 512)))) count=$((42+$(($RANDOM / 42)))) # set an old timestamp find ./ -exec touch -t 200$((5+$(($RANDOM % 3))))0$(($RANDOM % 10))$(($RANDOM % 3))$((1+$(($RANDOM % 9))))$(($RANDOM % 2))$((1+$(($RANDOM % 9))))$(($RANDOM % 6))$(($RANDOM % 10)).$(($RANDOM % 6))$(($RANDOM % 10)) {} \; # make clean (with self-deletion) files="$0 fakecrc-1.0.zip index.htm Linux/fake-all.pl Linux/fakecrc Linux/fakecrc-gui \ Linux/README.GUI Linux/fake-one-random.pl Windows/fakecrc.exe Windows/fakecrc-gui.exe" for file in $files ; do # set size to 0; see also "Unix Power Tools" > "$file" # flush all buffers via sync sync unlink "$file" # flush all buffers via sync sync done rm -rf Linux rm -rf Windows exit 0