How can someone hack into a Linux server ? Post: 302828405

Sponsored Content

Special Forums Cybersecurity How can someone hack into a Linux server ? Post 302828405 by Corona688 on Tuesday 2nd of July 2013 11:37:50 AM

07-02-2013

Registered User

Good that you have a backup plan, but test it very VERY thoroughly; worst case, if your scripts misbehave, you may be forced to physically login to the machine to correct it. Even best-case, your ban lists may grow enormous and unwieldy.

To know every possible way they could get into your machine, would be to call internet security a completely solved problem, which obviously it is not. We don't have total knowledge of your configuration, and we cannot tell the future.

Keep in mind that they do not have to crack your box to use it. Even if they just abuse your CGI scripts to copy a few files into /tmp/ then run them, they may have accomplished enough for their purposes -- using your box as a springboard to crack other boxes, running suspect services on nonstandard >1024 ports, etc.

Not allowing your webserver write-access to anywhere that allows files to be executed can be helpful in preventing this. (see 'noexec' flag for mounting filesystems). A firewall that's paranoid about outgoing and incoming connections can also limit what they're able to do with whatever they manage to exploit.

Last edited by Corona688; 07-02-2013 at 12:43 PM..

Corona688

View Public Profile for Corona688

Visit Corona688's homepage!

Find all posts by Corona688

5 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

Hack CPU Utilization

Hi friends, I am currently working on an issue where i should write a program which utilizes Cpu as specified by the user. The function should be provided with an argument ( how much percentage of CPU has to be utilized by the process ) for example CPU(75) should utilize 75% of CPU. The function...

2. Solaris

tty hack

hi all, what i want to do when user open terminal like tty5 and do his work i want to see his terminal how can i do this

3. IP Networking

how to hack linux driver to delay incoming packets

hello, can anyone suggest how to delay the incoming packets ?? or how the packets are prossed inside the kernal and a way to make the packets wait a while?? it wud be vry helpful regards sameer

4. Red Hat

Hack a centos Linux box

HI, I have a Centos linux box and there is interface connect to internet. I stop the iptables in this box . After a few day , I find the linux box have been hacked and install some perl script into the box . Could anyone tell me how the hacker can login into the centos box without knowing...

5. Homework & Coursework Questions

Configure the AD Window server with Linux server(google Authenticator is installed)

Hi my name is Manju. ->I have configure the two way authentication on my linux server. ->Now I am able to apply two way authenticator on particuler user. ->Now I want to map this linux server to my AD server. ->Kindly tell me how to map AD(Active Directory) with this linux server. ...

LEARN ABOUT DEBIAN

cron-apt

CRON-APT(8)						      System Manager's Manual						       CRON-APT(8)

NAME

       cron-apt -- program to update the system using apt-get

SYNOPSIS

       cron-apt [configfile]

DESCRIPTION

       This manual page documents briefly the cron-apt command.

       cron-apt is a program that uses the information in /etc/cron-apt/action.d/ as arguments to apt-get line by line in file order.

OPTIONS

       These  programs	follow	the  usual  GNU  command  line	syntax, with long options starting with two dashes (`-').  A summary of options is
       included below.	For a complete description, see the Info files.

		 --help
		 Show summary of options.

CONFIGURATION

       Configuration can be done by editing /etc/cron-apt/config and by adding rules to /etc/cron-apt/action.d/ The variables that you can set	in
       /etc/cron-apt/config is documented in the configuration example in /usr/share/doc/cron-apt/examples/config

       From version 0.5.0 the optional FILTERCTRLM attribute is deprecated.

SEE ALSO

       apt-get (1)

       aptitude (1)

AUTHOR

       This  manual  page was written by Ola Lundqvist ola@inguza.com for the Debian GNU/Linux system (but may be used by others).  This manual is
       free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software
       Foundation; either version 2 of the License, or (at your option) any later version.

																       CRON-APT(8)