Zivo NiX BLog

Dynamic SSH

$ssh -D 9999 username@ip-address-of-ssh-server

En firefox usar red manual
solamente

localhost:9999 socks 4

—————————————————————————

Desktop ssh -L 9999:localhost:8000 miservidorseguro.com Server miservidorseguro.com —————————————————

Para squid:
Desktop ssh -L 9999:localhost:3128 squidserver.com servidor squid squidserver.com

locate [options] pattern

Search database(s) of filenames and print matches. Matches include all files that contain pattern unless pattern includes metacharacters, in which case locate requires an exact match. *, ?, [, and ] are treated specially; / and . are not. Searches are conducted against a database of system contents that is updated periodically. To update the database, use the updatedb command.

Options

-d path, –database=path

Search databases in path. path must be a colon-separated list.

-h, –help

Print a help message and then exit.

–version

Print version information and then exit.

Task: How to halt/stop user called didi

Type the skill command as follows:
# skill -STOP -u didi

You muse be root to stop other users.

Task: How to resume already halted user called didi

Send CONT single to user didi, type the following command:
# skill -CONT -u didi

Task: How to kill and logout user called didi

You can send KILL single, type the following command:
# skill -KILL -u didi

Task: Kill and logout all users

The ultimate command to kill and logout all users, type the following command:
# skill -KILL -v /dev/pts/*

Please note that send users warning message or logout notice using wall command to avoid data loss.

If you have unchecked Allow people to post comments on the article on the Options > Discussion panel, then you have only disabled comments on future posts. To completely disable comments, you will have to edit each past post and uncheck Allow Comments from the Write Post SubPanel. Alternatively, you could delete the wp-comments-post.php file, or run this MySQL query, from the command line on a shell account, or using phpMyAdmin: UPDATE wp_posts SET comment_status=”closed”;

Tags: wordpress

sudo mount -t cifs -o username=usuario,password=miclave /compu/awd /mnt/awd

zip -r wp.zip public_html/wp

section .data
 hello:     db ‘Hello world!’,10    ; ‘Hello world!’ plus a linefeed character
 helloLen:  equ $-hello             ; Length of the ‘Hello world!’ string
                                    ; (I’ll explain soon)

section .text
 global _start

_start:
 mov eax,4            ; The system call for write (sys_write)
 mov ebx,1            ; File descriptor 1 - standard output
 mov ecx,hello        ; Put the offset of hello in ecx
 mov edx,helloLen     ; helloLen is a constant, so we don’t need to say
                      ;  mov edx,[helloLen] to get it’s actual value
 int 80h              ; Call the kernel

 mov eax,1            ; The system call for exit (sys_exit)
 mov ebx,0            ; Exit with return code of 0 (no error)
 int 80h

Copy this program into a text editor of your choice (I use vi or SciTE), and save it as hello.asm in your home directory (/home/yourname).
4.5 Compiling and Linking

   1. If you don’t have a terminal or console open, open one now.
   2. Make sure you are in the same directory as where you saved hello.asm.
   3. To assemble the program, type
      nasm -f elf hello.asm
      If there are any errors, NASM will tell you on what line you did what wrong.
   4. Now type ld -s -o hello hello.o
      This will link the object file NASM produced into an executable file.
   5. Run your program by typing ./hello
      (To run programs/scripts in the current directory, you must always type ./ before the name, unless the current directory is in the path.)

You should see Hello world! printed to the screen. Congratulations! You have just written your first assembly program in Linux!

http://tty64.org/code/

Re: IMPORTANT More UpLoad hacks
Click to flag this post 3 stars [3 stars] [3 stars]

by Harold Hallikainen Apr 12, 2007; 12:31pm :: Rate this Message: - Use ratings to moderate (?)

Reply | Reply to Author | View Threaded | Show Only this Message

> 2007/4/12, Harold Hallikainen :
>> > 2007/4/12, Sabri LABBENE :
>> >> Reini Urban wrote:
>> >> >Via the Phpwiki 1.3.x UpLoad feature some hackers from russia upload
>> a
>> >> >php3 or php4 file,
>> >> >install a backdoor at port 8081 and have access to your whole
>> >> >disc and overtake the server.
>> >> >
>> >> >See http://ccteam.ru/releases/c99shell
>> >>
>> >> I think that the URL is wrong.
>> >
>> > This url obviously worked in 2006. Now it is gone.
>> >
>> > I submitted a critical security alert to CERT and it will be in the
>> > cve reports of mitre.org
>> > also then (hopefully).
>>
>> As the one who was attacked, I can give you the IP addresses of the
>> attackers. Second, instead of disallowed extensions, I think it would be
>> much safet to have a list of ALLOWED extensions. I see this as a todo in
>> the upload plugin.
>
> Hm, I will think about it. Other opinions?
>
>> I have set my upload directory as read only and require users to now
>> email
>> me stuff to post.
>>
>> As to how much was visible to the hackers (and I have the code for their
>> script), it SEEMS that it would only be what user apache could see,
>> which
>> would be stuff it owns and stuff that is world readable. Is that
>> correct?
>
> Well not really. The c99shell script tries in various ways to get more
> access.
> At first it compiles and installs a backdoor at port 8081 and then
> with shell access it’s normally quite easy for an experienced hacker
> to get root.
>
> –
> Reini Urban

THANKS for the support on this issue! I did an updatedb, then did locate
c99. The only stuff that comes up is this:

/usr/include/boost/numeric/interval/detail/c99sub_rounding_control.hpp
/usr/include/boost/numeric/interval/detail/c99_rounding_control.hpp
/usr/share/man/man1p/c99.1p.gz
/usr/bin/c99

In addition, port 8081 is blocked at the router (for incoming requests).
So, I’m hoping I’m ok!

Nabble - IMPORTANT More UpLoad hacks.

  Easily access the file system of any computer which is running a SSH daemon. For example, to access the files of caesar.somedomain.com as user bob, enter:

fish://bob@caesar.somedomain.com

into the Konqueror location bar. A dialog prompts for the password, and bob’s files are now available for browsing and editing in Konqueror.

fish://bob@caesar.somedomain.com:22

Konqueror tips

http://en.opensuse.org/Konqueror_Tips_and_Tricks