weyne/pwnwiki.github.io
1
0
Fork 0
mirror of https://github.com/oXis/pwnwiki.github.io.git synced 2025-10-29 16:56:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #81 from Eid010n/master

Browse Source 
Formatting of Linux 2besorted
This commit is contained in:
WebBreacher 2014-04-26 17:12:11 -04:00
commit f5c117673a
1 changed files with 46 additions and 44 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

90
2besorted/gdoc_linux.md
View File

@ -1,4 +1,3 @@
# Linux Google Doc Content # # Linux Google Doc Content #
The content below is the raw data from the Google Doc that was first used to collect it. Over time, this content will be moved into sub-pages and organized but is placed here, now, so as to be more complete. We apologize for its appearance. The content below is the raw data from the Google Doc that was first used to collect it. Over time, this content will be moved into sub-pages and organized but is placed here, now, so as to be more complete. We apologize for its appearance.
@ -23,60 +22,63 @@ The content below is the raw data from the Google Doc that was first used to col
| `df -k` | mounted fs, size, % use, dev and mount point | | `df -k` | mounted fs, size, % use, dev and mount point |
| `mount` | mounted fs | | `mount` | mounted fs |
| `last -a` | Last users logged on | | `last -a` | Last users logged on |
| `lastcomm` | | | `lastcomm` | Print out information about previously executed commands. |
| `lastlog` | | | `lastlog` | Reports the most recent login of all users or of a given user |
| `lastlogin (BSD)` | | | `lastlogin (BSD)` | Indicate last login time of users |
| `getenforce` | Get the status of SELinux (Enforcing, Permissive or Disabled) | | `getenforce` | Get the status of SELinux (Enforcing, Permissive or Disabled) |
| `dmesg` | Informations from the last system boot | | `dmesg` | Informations from the last system boot |
| `lspci` | prints all PCI buses and devices | | `lspci` | prints all PCI buses and devices |
| `lsusb` | prints all USB buses and devices/h | | `lsusb` | prints all USB buses and devices/h |
| `lscpu` | prints CPU information | | `lscpu` | prints CPU information |
| `lshw` | | | `lshw` | List Hardware |
| `ex` | | | `ex` | Start vi in ex mode |
| `cat /proc/cpuinfo` | | | `cat /proc/cpuinfo` | Shows types of processers in the system |
| `cat /proc/meminfo` | | | `cat /proc/meminfo` | Displays information about systems RAM usage |
| `du -h --max-depth=1 /` | (note: can cause heavy disk i/o) | | `du -h --max-depth=1 /` | (note: can cause heavy disk i/o) |
| `which nmap` | locate a command (ie nmap or nc) | | `which nmap` | locate a command (ie nmap or nc) |
| `locate bin/nmap` | | | `locate bin/nmap` | Find the location of nmap |
| `locate bin/nc` | | | `locate bin/nc` | Find the location of netcat |
| `jps -l` | | | `jps -l` | Looks for Java Virtual Machines |
| `java -version` | Returns the version of Java. | | `java -version` | Returns the version of Java. |
## Networking ## Networking
hostname -f | Command | Description / Importance |
ip addr show | ------- | ------------------------ |
ip ro show | `hostname -f` | Show long hostname (FQDN) |
ifconfig -a | `ip addr show` | Show IP information |
route -n | `ip ro show` | Show routing information |
cat /etc/network/interfaces | `ifconfig -a` | Show information on network interface configuration |
iptables -L -n -v | `route -n` | Show routing table for all host IPs |
iptables -t nat -L -n -v | `cat /etc/network/interfaces` | Show network interfaces |
ip6tables -L -n -v | `iptables -L -n -v` | Display all iptables rules |
iptables-save | `iptables -t nat -L -n -v` | Display iptable rules for table nat |
netstat -anop | `ip6tables -L -n -v` | Display IPv6 tables |
netstat -r | `iptables-save` | Display iptables content |
netstat -nltupw (root with raw sockets) | `netstat -anop` | Display all open network connections and processes associated |
arp -a | `netstat -r` | Display the kernel routing tables |
lsof -nPi | `netstat -nltupw` | Requires root with raw sockets: numeric, listening, Value of watch dog timer (requires `-i`), Limit statistics to AF_UNIX family, Display program, wait <number of seconds> |
to resume it ? "cat /proc/net/*" (more discreet) | `arp -a` | Shows arp table |
what does the above mean? -> It means that all the information given by the above commands can be found by looking into the files under /proc/net , and that this approach is less likely to trigger monitoring or other stuff. | `lsof -nPi` | list of what processes are listening on what ports |
User accounts | `cat /proc/net/*` | Find all information about the hosts networking using only the cat command--less likely to trigger alarms |
local accounts: cat /etc/passwd
password hashes in /etc/shadow on Linux
password hashes in /etc/security/passwd on AIX
groups in /etc/group (and/or /etc/gshadow on Linux)
all accounts: getent passwd
should dump local, LDAP, NIS, whatever the system is using
same with getent group
Samba's own database: pdbedit -L -w or pdbedit -L -v
privileged accounts: cat
(above: cat ???)
mail aliases: cat /etc/aliases find /etc -name aliases, getent aliases
NIS accounts: ypcat passwd - displays NIS password file
Credentials ## User accounts
| Command | Description / Importance |
| ------- | ------------------------ |
| `cat /etc/passwd` | Display local accounts |
| `cat /etc/shadow on Linux` | Display password hashes on Linux |
| `cat /etc/security/passwd` | Display password hashes on AIX|
| `cat /etc/group` | Show system groups |
| `cat /etc/gshadow` | Show shadow group file on Linux |
| `getent passwd` | List of all user accounts from local, LDAP, NIS, and whatever the system is using |
| `getent group` | List of all groups from local, LDAP, NIS, and whatever the system is using |
| `pdbedit -L -w or pdbedit -L -v` | SAMBA Database |
| `find /etc -name aliases` | Find mail aliases |
| `cat /etc/aliases` | Display mail aliases |
| `getent aliases ` | List of all mail aliases |
| `ypcat passwd` | displays NIS password file |
## Credentials
SSH keys, often passwordless: /home/*/.ssh/id* SSH keys, often passwordless: /home/*/.ssh/id*
SSH agent: SSH agent: