| ``` | |
| ___ _____ _____ _____ _ _ _____ _____ _____ _ _ | |
| / _ \_ _|_ _| ___| \ | |_ _|_ _| _ | \ | | | |
| / /_\ \| | | | | |__ | \| | | | | | | | | | \| | | |
| | _ || | | | | __|| . ` | | | | | | | | | . ` | | |
| | | | || | | | | |___| |\ | | | _| |_\ \_/ / |\ | | |
| \_| |_/\_/ \_/ \____/\_| \_/ \_/ \___/ \___/\_| \_/ | |
| ______ _ _ _ |
| /* blurred background modal for bootstrap v4 */ | |
| body.modal-open > :not(.modal) { | |
| -webkit-filter: blur(5px); | |
| -moz-filter: blur(5px); | |
| -o-filter: blur(5px); | |
| -ms-filter: blur(5px); | |
| filter: blur(5px); | |
| } |
| /************ | |
| *** label *** | |
| ************/ | |
| .label-dark-orange, .label-orange, .label-dark-yellow, .label-yellow, .label-lime-green, | |
| .label-green, .label-dark-green, .label-cyan, .label-blue, .label-dark-blue, .label-blue-green, | |
| .label-purple, .label-fushia, .label-red, .label-dark-red, .label-light-grey, .label-carmin-red, | |
| .label-grey, .label-dark-grey, .label-black { | |
| color: #ffffff; | |
| } |
Un peu de contexte
Il s'agit d'un tout jeune développeur, se présentant comme Senior et missioné par un prestataire de mon client.
La mission était la reprise d'une application très standard de GED (sous symfony 2), le développeur est missioné à temps plein dessus.
L'auteur de ces lignes agissait en rôle de sysadmin pour le client.
Les évenements suivants s'étalent sur environ un mois et demi.
Having to migrate two email servers this year, here's a summary of my options (might not be relevent to your needs) :
Distro : Debian 9 (raw)
MTA : Postfix + Dovecot
Antispam : Spamassassin
Antivirus : Amavis
Webmail : After Logic's WebMail Lite + Lighttpd + SQLite
Monitoring : Munin
Signing & such : SPF, DKIM, DMARC
| # Just a copy of someone else's script, to serve as a basis for my own tunning-script. | |
| # The goal is to get a nice looking system, using plank (configuring it), and some apps from elementary OS, also some generic apps like shotwell, VLC, etc. | |
| # TO DO | |
| # remove mysql bloatdatabase | |
| # replace apache bloatserver with lighttpd | |
| # replace stock php7(.0) with a proper ppa to get php7.2, and use php-fpm | |
| # add paper icons | |
| # remove nodejs | |
| # remove chrome |
| #!/bin/bash | |
| # !!!!!!!!!!!!!!!! DISCLAIMER !!!!!!!!!!!!!!!!!!!!! | |
| # !! THIS WILL NOT SECURE YOUR SYSTEM ON ITS OWN !! | |
| # !! Most of these tools should be set up and/or !! | |
| # !!!!!! ran by a cron with proper repporting !!!!! | |
| # update apt | |
| apt update | |
| # rkhunter : rootkit scanner | |
| apt install rkhunter | |
| # chkrootkit : another rootkit scanner |
| These files have been found on a compromised server, where a mining script (monero) was deposited and sucking CPU ressources. | |
| Mostly honeypot | |
| 1 | |
| dev:qazwsx:165.227.172.201:22:Linux:SSH-2.0-OpenSSH_6.0p1 Debian-4+deb7u2:Intel(R) Core(TM)2 Duo CPU E8200 @ 2.66GHz:7880 7690 189 0 400 5171:honeypot | |
| dev:qazwsx:159.89.171.90:22:Linux:SSH-2.0-OpenSSH_6.0p1 Debian-4+deb7u2:Intel(R) Core(TM)2 Duo CPU E8200 @ 2.66GHz:7880 7690 189 0 400 5171:honeypot | |
| will:will:207.148.106.29:22:Linux:SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.2:Intel(R) Core(TM)2 Duo CPU E8200 @ 2.66GHz:7880 7690 189 0 400 5171:honeypot | |
| mythtv:123456:93.113.125.194:22:UNKNWON_SYSTEM:SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.2:NO_CPU:NO_RAM:novuln | |
| hadoop:hadooppass:128.199.81.203:22:Linux:SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.2:Intel(R) Core(TM)2 Duo CPU E8200 @ 2.66GHz:7880 7690 189 0 400 5171:honeypot | |
| root:default:98.163.157.70:22:UNKNWON_SYSTEM:SSH-2.0-OpenSSH_6.0p1 Debian-4+deb7u2:NO_CPU:NO_RAM:novuln |
| <?php | |
| // cryptographically safe password generator function | |
| // fairly simple password (only one cap, one number, one symbol) | |
| function generatePassword() :string { | |
| // BEWARE, length cannot be set to anything lower that 4. | |
| $length = 8; | |
| $numbers_keyspace = '2345679'; | |
| $letters_keyspace = 'abcdefghijkmnopqrstuvwxyz'; |
| /* | |
| * Brings back : | |
| * Labels | |
| * Panels | |
| * pull-{right/left} | |
| * btn-default | |
| */ | |
| /* LABELS */ | |
| .label { |