plugins/image-symlinks/uploadify/uploadify.css
19/08/2020
IP: 192.200.215.91 Hostname: gfpxe.prdhost.com
https://blog.sucuri.net/2012/06/uploadify-uploadify-and-uploadify-the-new-timthumb.html
Wednesday, August 19, 2020
Sunday, August 2, 2020
Slider Revolution Plugin Critical Vulnerability Being Exploited
http://yoursite.com/wp-admin/admin-ajax.php?action=revslider_show_image&img=..%2Fwp-config.php
02/08/2020 14:17:17 (1 hour 27 mins ago)
IP: 217.160.65.177 Hostname: 217.160.65.177
Slider Revolution: Local File Inclusion at http://exxx.com/wp-admin/admin-ajax.php?action=revslider_show_image&img=..%2Fwp-config.php
17/08/2020
IP: 212.227.174.175 Hostname: 212.227.174.175
https://blog.sucuri.net/2014/09/slider-revolution-plugin-critical-vulnerability-being-exploited.html
SEPTEMBER 3, 2014
Saturday, August 1, 2020
tor
sudo apt-get remove tor
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages will be REMOVED:
tor tor-geoipdb
0 upgraded, 0 newly installed, 2 to remove and 0 not upgraded.
After this operation, 13.2 MB disk space will be freed.
Do you want to continue? [Y/n] y
(Reading database ... 179059 files and directories currently installed.)
Removing tor-geoipdb (0.4.2.7-1) ...
Removing tor (0.4.2.7-1) ...
Processing triggers for man-db (2.9.1-1) ...
This package provides a GeoIP database for Tor, i.e. it maps IPv4 addresses to countries.
Bridge relays (special Tor relays that aren't listed in the main Tor directory) use this information to report which countries they see connections from. These statistics enable the Tor network operators to learn when certain countries start blocking access to bridges.
suricata
sudo apt-get remove suricata
sudo apt-get remove suricata
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages were automatically installed and are no longer required:
libevent-core-2.1-7 libevent-pthreads-2.1-7 libhiredis0.14 libhtp2 libhyperscan5 libluajit-5.1-2 libluajit-5.1-common liblzma-dev libnet1 libnetfilter-queue1
Use 'sudo apt autoremove' to remove them.
The following packages will be REMOVED:
suricata
0 upgraded, 0 newly installed, 1 to remove and 0 not upgraded.
After this operation, 6,401 kB disk space will be freed.
Do you want to continue? [Y/n] y
(Reading database ... 179313 files and directories currently installed.)
Removing suricata (5.0.3-0ubuntu0) ...
Processing triggers for man-db (2.9.1-1) ...
suricata -T
1/8/2020 -- 21:07:39 - <Info> - Running suricata under test mode
Error opening file /var/log/suricata//suricata.log
1/8/2020 -- 21:07:39 - <Notice> - This is Suricata version 5.0.3 RELEASE running in SYSTEM mode
1/8/2020 -- 21:07:39 - <Error> - [ERRCODE: SC_ERR_LOGDIR_CONFIG(116)] - The logging directory "/var/log/suricata/" supplied by /etc/suricata//suricata.yaml (default-log-dir) doesn't exist. Shutting down the engine
suricata -h
Suricata 5.0.3
USAGE: suricata [OPTIONS] [BPF FILTER]
-c <path> : path to configuration file
-T : test configuration file (use with -c)
-i <dev or ip> : run in pcap live mode
-F <bpf filter file> : bpf filter file
-r <path> : run in pcap file/offline mode
-q <qid[:qid]> : run in inline nfqueue mode (use colon to specify a range of queues)
-s <path> : path to signature file loaded in addition to suricata.yaml settings (optional)
-S <path> : path to signature file loaded exclusively (optional)
-l <dir> : default log directory
-D : run as daemon
-k [all|none] : force checksum check (all) or disabled it (none)
-V : display Suricata version
-v : be more verbose (use multiple times to increase verbosity)
--list-app-layer-protos : list supported app layer protocols
--list-keywords[=all|csv|<kword>] : list keywords implemented by the engine
--list-runmodes : list supported runmodes
--runmode <runmode_id> : specific runmode modification the engine should run. The argument
supplied should be the id for the runmode obtained by running
--list-runmodes
--engine-analysis : print reports on analysis of different sections in the engine and exit.
Please have a look at the conf parameter engine-analysis on what reports
can be printed
--pidfile <file> : write pid to this file
--init-errors-fatal : enable fatal failure on signature init error
--disable-detection : disable detection engine
--dump-config : show the running configuration
--build-info : display build information
--pcap[=<dev>] : run in pcap mode, no value select interfaces from suricata.yaml
--pcap-file-continuous : when running in pcap mode with a directory, continue checking directory for pcaps until interrupted
--pcap-file-delete : when running in replay mode (-r with directory or file), will delete pcap files that have been processed when done
--pcap-buffer-size : size of the pcap buffer value from 0 - 2147483647
--af-packet[=<dev>] : run in af-packet mode, no value select interfaces from suricata.yaml
--simulate-ips : force engine into IPS mode. Useful for QA
--user <user> : run suricata as this user after init
--group <group> : run suricata as this group after init
--erf-in <path> : process an ERF file
--unix-socket[=<file>] : use unix socket to control suricata work
--set name=value : set a configuration value
To run the engine with default configuration on interface eth0 with signature file "signatures.rules", run the command as:
suricata -c suricata.yaml -s signatures.rules -i eth0
update-rc.d: warning: start and stop actions are no longer supported; falling back to default
Debian and Ubuntu use the service command to control services and update-rc.d for adding and removing services from start up
The "start" and "stop" arguments are deprecated!
Roger Leigh (Debian developer team) announced that in debian-devel, on May 2013:
update-rc.d install and remove System-V style init script links into the boot sequence.. You can still use it with defaults and remove options but it is still for the boot sequence! systemctl start / stop is not in boot sequence
wtf?
service --status-all
[ + ] acpid
[ - ] alsa-utils
[ - ] anacron
[ + ] apparmor
[ + ] apport
[ + ] avahi-daemon
[ + ] binfmt-support
[ - ] bluetooth
[ - ] console-setup.sh
[ + ] cron
[ + ] cups
[ + ] cups-browsed
[ + ] dbus
[ - ] dns-clean
[ + ] gdm3
[ + ] grub-common
[ - ] hwclock.sh
[ + ] irqbalance
[ + ] kerneloops
[ - ] keyboard-setup.sh
[ + ] kmod
[ + ] network-manager
[ - ] networking
[ - ] openvpn
[ - ] plymouth
[ - ] plymouth-log
[ - ] pppd-dns
[ + ] procps
[ - ] pulseaudio-enable-autospawn
[ - ] rsync
[ + ] rsyslog
[ - ] saned
[ - ] speech-dispatcher
[ - ] spice-vdagent
[ + ] suricata
[ + ] tor
[ + ] udev
[ + ] ufw
[ + ] unattended-upgrades
[ - ] uuidd
[ + ] whoopsie
[ - ] x11-common
sudo update-rc.d openvpn disable
The pppd daemon works together with the kernel PPP driver to establish and ... clients, this option allows pppd to supply one or two DNS (Domain Name Server)
The Procps package provides programs to monitor and halt system processes. Procps gathers information about processes via the /proc directory.
Subscribe to:
Posts (Atom)