[root@localhost etc]# history ls chmod +x /etc/rc.d/rc.local cat /etc/rc.d/rc.local vim /etc/rc.d/rc.local echo flag{thisismybaby} exit netstat -atup ls -a /etc/systemd/system/ ls -a /usr/lib/systemd/system cd /usr/local/ ls cd share/ ls cd /etc/ ls ls -a /usr/lib/systemd/system ls -a /etc/systemd/system/ ll -a /etc/systemd/system/ history
[root@localhost etc]# cat /etc/rc.d/rc* cat: /etc/rc.d/rc0.d: 是一个目录 cat: /etc/rc.d/rc1.d: 是一个目录 cat: /etc/rc.d/rc2.d: 是一个目录 cat: /etc/rc.d/rc3.d: 是一个目录 cat: /etc/rc.d/rc4.d: 是一个目录 cat: /etc/rc.d/rc5.d: 是一个目录 cat: /etc/rc.d/rc6.d: 是一个目录 #!/bin/bash # THIS FILE IS ADDED FOR COMPATIBILITY PURPOSES # # It is highly advisable to create own systemd services or udev rules # to run scripts during boot instead of using this file. # # In contrast to previous versions due to parallel execution during boot # this script will NOT be run after all other services. # # Please note that you must run 'chmod +x /etc/rc.d/rc.local' to ensure # that this script will be executed during boot. # flag{kfcvme50} touch /var/lock/subsys/local
[root@localhost defend]# more /etc/redis.conf flag{P@ssW0rd_redis}
# 查看一下有没有设置密码 [root@localhost defend]# cat /etc/redis.conf |grep requirepass # If the master is password protected (using the "requirepass" configuration # requirepass foobared
# 并且是监听所有网卡.怀疑是未授权访问.查看redis日志 [root@localhost defend]# cat /etc/redis.conf |grep bind # By default, if no "bind" configuration directive is specified, Redis listens # the "bind" configuration directive, followed by one or more IP addresses. # bind 192.168.1.100 10.0.0.1 # bind 127.0.0.1 ::1 # internet, binding to all the interfaces is dangerous and will expose the # following bind directive, that will force Redis to listen only into bind 0.0.0.0 # 1) The server is not binding explicitly to a set of addresses using the # "bind" directive. # are explicitly listed using the "bind" directive.
# 查看日志 [root@localhost defend]# cat /var/log/redis/redis.log |grep Acc 11111:M 18 Mar 19:27:54.895 - Accepted 127.0.0.1:41590 11595:M 18 Mar 19:27:57.321 - Accepted 192.168.75.129:54766 11595:M 18 Mar 19:39:31.996 - Accepted 192.168.75.129:53104 11595:M 18 Mar 19:39:34.052 - Accepted 192.168.75.129:57672 11595:M 18 Mar 19:44:53.399 - Accepted 127.0.0.1:41594 12234:M 18 Mar 19:47:02.153 - Accepted 192.168.75.129:45240 12234:M 18 Mar 19:47:03.612 - Accepted 192.168.75.129:53124 12234:M 18 Mar 19:53:40.994 - Accepted 127.0.0.1:41596 12559:M 18 Mar 19:53:45.397 - Accepted 192.168.75.129:44572 12559:M 18 Mar 19:53:46.807 - Accepted 192.168.75.129:44582 12559:M 18 Mar 20:20:57.221 - Accepted 127.0.0.1:41598 13274:M 18 Mar 20:21:56.411 - Accepted 192.168.75.129:54826 13274:M 18 Mar 20:21:58.333 - Accepted 192.168.75.129:54836
