What's the best way to do a daily check for xss scripts injected into php and html files on a linux box?
I am referring to stuff like framer.z
[url]
which essentially has a telltail signature of
<script>eval(unescape("%77%69...
Is there anything for linux that keeps up with those kinds of script signatures?
I doubt CSF or Clam looks for that kind of stuff, right?
So I have a client using Wordpress 3.6, so the scan does little good.
I update the Wordpress to 4.1.1 and do the Scan again. Plesk cannot find the updated install of WP still?
We have a client claming that she gets a Trojan warming when she trys to access her website but using the Trojan scan in cpanel doesn't show anything.
What can we use to scan for Trojan?
What is a rootkit? The following link is a very good read to answer that question.
http://linux.oreillynet.com/pub/a/li...4/rootkit.html
In Summary, a rootkit is a trojan installed on your Linux server after someone has broken into it. These files are used to cover the hackers tracks, and to give the hacker tools to do more dirty work from your server.
Usage:
1. su - (change to root user)
2. mkdir /usr/local/chkrootkit
3. wget ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit.tar.gz
4. tar -xvzf chkrootkit.tar.gz
5. cd chkrootkit*
6. cp * /usr/local/chkrootkit
7. cd /usr/local/chkrootkit
8. make sense
Now scan your system:
1. cd /usr/local/chkrootkit
2. ./chkrootkit
chkrootkit may from time to time give false positives. If you ever get a positive or "infected hit" scan a second time. If you do get a positive hit, google the hit to research the issue and steps to correct.
Part 2 - automated chkrootkit, and emailed results.
I'm lazy, and like my server to do the work for me so I have it scan every day, and email me the results.
Usage:
1. vi /etc/cron.daily/chkrootkit
2. add the following code.
Code:
#!/bin/bash
(cd /usr/local/chkrootkit; ./chkrootkit -q 2>&1 | mail -s "Daily chkrootkt scan" you@yourdomain.com)
3. chmod 0755 /etc/cron.daily/chkrootkit
This will email you@yourdomain.com every morning with your chkrootkit results. the -q option will only show you exploits.
Removal:
If you don't like getting the emails or just want to remove this from your server:
1. rm /etc/cron.daily/chkrootkit
2. rm -rf /usr/local/chkrootkit
All files will now be deleted from your server.
Is this possible we can scan virus on the account on server?
View 1 Replies View Relatedhow to correct it?
Code:
---------------------- Start Rootkit Hunter Scan ----------------------
Warning: Checking for prerequisites [ Warning ]
The file of stored file properties (rkhunter.dat) does not exist, and so must be created. To do this type in 'rkhunter --propupd'.
Warning: WARNING! It is the users responsibility to ensure that when the '--propupd' option
is used, all the files on their system are known to be genuine, and installed from a
reliable source. The rkhunter '--check' option will compare the current file properties
against previously stored values, and report if any values differ. However, rkhunter
cannot determine what has caused the change, that is for the user to do.
One or more warnings have been found while checking the system.
Please check the log file (/var/log/rkhunter/rkhunter.log)
Is it advisable to have someone scan your server setup, ie the firewall? If so, what is used to scan the firewall?
View 13 Replies View Relatedto install secuity patches for each VPS hosted on single host or appling it to host running multiple VPS is enough.
Does same applies to firewall related software..Use it for individual VPS on single host?
i have server and i want to do shell scan and delete the shell
View 4 Replies View RelatedI am not much familiar with windows server scan. How can I do full scan on the server? I want to make sure that server is secure.
View 3 Replies View RelatedAny body knows of free server security scan for my dedicated?
View 4 Replies View Related[url]
[url]
One of my users posted this in the forum saying my server is scanning his computer. His this serious? Do I have virus? Should i be worried? Well i am kinda worried. I tried googling it, but i can't seem to figure the right keywords for a good result.
I am trying to install Magento on my apache server. I am running into the dreaded mcrypt issue as Magento needs it to run. I have now been googling for the past few hours and have gotten nowhere.
Here are my details:
Linux
Centos 5.5
PHP 5.3.3
x86_64
Plesk 12
I have tried installing all sorts of different repos and it just isn't working.
When I try to install using # yum install php-mcrypt I get the following:
Loaded plugins: fastestmirror
Package php-mysql is obsoleted by php-mysqlnd, trying to install php-mysqlnd-5.5.13-3.el5.remi.x86_64 instead
--> Processing Dependency: php53-gd for package: psa-php53-configurator
--> Processing Dependency: php53-imap for package: psa-php53-configurator
[Code].....
Does Parallels support Plesk 12 being installed on a Linux VM that is provisioned on Microsoft Windows Server 2012 R2 Hyper-V?Is it fully supported?
View 2 Replies View RelatedI am looking to start offering web hosting packages and I was wondering if it was worth offering just Linux hosting or Windows as well?
View 12 Replies View RelatedI need a powerfull vps with lxadmin control panel.
With support 24/7/365 and best uptime.
With 384 MB Ram.
Most if not all the applications that we produce use PHP/MySQL and we're currently on Windows/IIS environment.
We're looking to change our hosting company and upgrade our servers and I'm eager to migrate over Linux/Apache.
The only problem is, some of our applications use the COM object to integrate with PowerPoint, can this still be done on Linux.
Also is anybody aware of any other potential floors when migrating over?
i am a wap develper(mobile web).I need a vps with 30-40 Gigs of space and about 200-250 Bandwidth with cpanel.my bugget is under $35 .Please suggest me one for these requirements.
View 4 Replies View RelatedI tried going from swf to mpg by using
[url]
and I was thinking of going from mpg to avi using ffmpeg. The problem is that swf to mpg ran up with an error. I was wondering if anyone know of the best way to proceed with this.
There is also audio on the swf files.
I am looking at linux vps due to money constraints. Ive had lots of experience with windows vps... its really simple, just use remote desktop .
Is there something similar for linux vps? Giving me a desktop like environment to mess around in? How does that work? Is there a tutorial on how to use one, transfer files, etc.
im talking about using windows XP to community to a linux vps.
To make ASP run under Linux, PHP script files are saved as ASP extensions and are redirected to the PHP interpreter. So it looks like the server serves ASP files, but these are actually PHP scripts.
View 3 Replies View RelatedCan anyone recommend a decent VPS place, need atleast decent ram for apache, mysql, xcache, php, 200 - 400 BW, for hosting about 2 websites. (need them on a separate machine from my others). Good connectivity matters since our users will be mainly from all over euorpe, USA and Russia and former Russian region.
View 12 Replies View RelatedThere is some version of ASP.NET for linux that is reliable?
View 1 Replies View Relatedin dos we run dir /p and with if the folder was very long show only 10 list and witn click on enter,show page2 and ...
but in linux how may?
i run ls /p but don`t answer to me
I have Debian Etch 4.0 and am intending to run a LAMP (Linux, Apache, MySQL and PHP) installation on Debian.
I have setup AMP on windows boxes to run successfully. I have very good microsoft O/S skills but have vague skills around Linux which I need to learn quickly for my job. First of all I need to setup a LAMP installation so does anyone have a recommendation of a simple and easy LAMP installation step-by-step solution for me?
I have a dedicated Linux server with CentOS and Directadmin.
How do I get ASP.net on a Linux server, I only could find one that seems something about it, but I cant seem to understand how that will work, and how to install it YEP thats how smart I am.