in cortado/rtas/funzip_extract_content.py [0:0]
def main():
masquerade = "/tmp/funzip"
masquerade2 = "/tmp/bash"
if _common.get_current_os() == OSType.LINUX:
source = _common.get_resource_path("bin/linux.ditto_and_spawn")
_common.copy_file(source, masquerade)
_common.copy_file(source, masquerade2)
else:
_common.create_macos_masquerade(masquerade)
_common.create_macos_masquerade(masquerade2)
# Execute command
log.info("Launching fake funzip commands to extract suspicious content")
processes: list[Process] = []
for i in range(2):
p = Process(
target=run_command,
args=(
masquerade,
masquerade2,
),
)
processes.append(p)
for i in processes:
i.start()
for i in processes:
i.join()
# cleanup
_common.remove_file(masquerade)
_common.remove_file(masquerade2)