MyWiki - sandbox

backups

Anonymous (anonymous@undisclosed.example.com) — 2020-10-31T21:03:21+00:00

Backups software * Borg-Backup * Rdiff-backup (1/2) * Rsnapshot * RClone * UrBackup

composer

Anonymous (anonymous@undisclosed.example.com) — 2019-04-25T20:40:17+00:00

Composer Install: cd /tmp php -r "copy('https://getcomposer.org/installer', 'composer-setup.php');" php -r "if (hash_file('SHA384', 'composer-setup.php') === '544e09ee996cdf60ece3804abc52599c22b1f40f4323403c44d44fdfdd586475ca9813a858088ffbc1f233e9b180f061') { echo 'Installer verified'; } else { echo 'Installer corrupt'; unlink('composer-setup.php'); } echo PHP_EOL;" php composer-setup.php --install-dir=/usr/local/bin --filename=composer php -r "unlink('composer-setup.php');"

conntrack

Anonymous (anonymous@undisclosed.example.com) — 2019-04-25T20:40:32+00:00

Conntrack Searching IP max connection: cat /proc/net/nf_conntrack | awk '{ print $6 }' |sort -g | uniq -c | sort -g | tail conntrack -L | grep IP | wc -l conntrack -L | wc -l

cpanel_enable_spamassassin

Anonymous (anonymous@undisclosed.example.com) — 2019-04-25T20:48:34+00:00

Cpanel enable spamassassin globally Enable SpamAssasin Serverwide: for x in `cut -d: -f2 /etc/trueuserdomains` ; do touch /home/$x/.spamassassinenable ; chown $x.$x /home/$x/.spamassassinenable ; done Enable SpamBox Serverwide: for x in `cut -d: -f2 /etc/trueuserdomains` ; do touch /home/$x/.spamassassinboxenable ; chown $x.$x /home/$x/.spamassassinboxenable ; done

debian-install-rdiff

Anonymous (anonymous@undisclosed.example.com) — 2021-01-24T17:41:17+00:00

HOW-TO: debian10 install rdiff-backup version 2 Install deps: apt install build-essential apt install python3-pip python3-setuptools python3-pylibacl python3-pyxattr apt install librsync-dev Install rdiff-backup: pip3 install rdiff-backup

default-ssh-login-user

Anonymous (anonymous@undisclosed.example.com) — 2019-04-25T20:40:59+00:00

Default SSH user A better solution than putting an alias in your bashrc, would be to use a ssh config file cat ~/.ssh/config HOST * USER root You can also specify certain subdomains use certain users. Useful if your laptop travels between networks.

delete-files

Anonymous (anonymous@undisclosed.example.com) — 2019-04-25T20:41:13+00:00

Fastest way to remove files Method # Of Files Deletion Time rsync -a –delete empty/ s1/ 1000000 6m50.638s find s2/ -type f -delete 1000000 87m38.826s find s3/ -type f | xargs -L 100 rm 1000000 83m36.851s find s4/ -type f | xargs -L 100 -P 100 rm 1000000 78m4.658s

editors-settings

Anonymous (anonymous@undisclosed.example.com) — 2021-01-23T11:44:22+00:00

Editors settings Here is my custom preferences for editors. VIM Edit: ~/.vimrc set mouse-=a syntax on set paste set autoindent " With expandtab option set, if you want to enter a real tab character use Ctrl-V key sequence. set expandtab set tabstop=4 set shiftwidth=4

elastic-search-downgrade

Anonymous (anonymous@undisclosed.example.com) — 2018-06-04T09:05:33+00:00

Elasticsearch downgrade to 1.7.x Older releases: Here is simple way how to downgrade elasticsearch to older versions: # yum downgrade https://download.elastic.co/elasticsearch/elasticsearch/elasticsearch-1.7.3.noarch.rpm Prevent from updates in future:

find

Anonymous (anonymous@undisclosed.example.com) — 2019-04-25T20:41:27+00:00

FIND cheatsheet Here are some useful hints about how to use find in Linux. Find + chmod find /path/to/dir/ -type d -exec chmod 0755 {} \; find /path/to/dir/ -type f -exec chmod 0644 {} \; Find files edited in specific time frame find /path/to/dir/ -newermt "2013-01-01 00:00:00" ! -newermt "2013-01-02 00:00:00"

inotify-tools

Anonymous (anonymous@undisclosed.example.com) — 2019-04-25T20:42:27+00:00

inotify-tools on OpenVZ watch.sh #!/bin/sh inotifywait -e delete -e modify -r -m $1 | while read dir events file; do echo "$(date) : $events : $dir$file" done run: screen /bin/bash -c "./watch.sh /var/www/yoursite.tld/www > yoursite.files.log"

install-composer

Anonymous (anonymous@undisclosed.example.com) — 2018-07-11T07:47:35+00:00

CentOS install composer To install composer run these commands: cd /tmp php -r "copy('https://getcomposer.org/installer', 'composer-setup.php');" php -r "if (hash_file('SHA384', 'composer-setup.php') === '544e09ee996cdf60ece3804abc52599c22b1f40f4323403c44d44fdfdd586475ca9813a858088ffbc1f233e9b180f061') { echo 'Installer verified'; } else { echo 'Installer corrupt'; unlink('composer-setup.php'); } echo PHP_EOL;" php composer-setup.php --install-dir=/usr/local/bin --filename=composer php -r "un…

mailcleaner

Anonymous (anonymous@undisclosed.example.com) — 2020-08-16T14:12:54+00:00

MailCleaner Something to check later:

megacli-cheatsheet

Anonymous (anonymous@undisclosed.example.com) — 2018-06-21T07:51:55+00:00

MegaCLI cheat sheet Links * * * * Commands Find failed disk: megacli -PDList -a0|grep -E 'Inquiry|Firmware|Slot|ID'

netdata

Anonymous (anonymous@undisclosed.example.com) — 2019-04-25T20:42:45+00:00

NETDATA notes Pre install packages: yum -y install sysstat lm_sensors vnstat smartmontools iotop Netdat Installation: bash <(curl -Ss https://my-netdata.io/kickstart.sh) Netdata files location: - the daemon at /usr/sbin/netdata - config files in /etc/netdata - web files in /usr/share/netdata - plugins in /usr/libexec/netdata - cache files in /var/cache/netdata - db files in /var/lib/netdata - log fil…

netstat

Anonymous (anonymous@undisclosed.example.com) — 2019-04-25T20:43:02+00:00

Snippets for netstat Searching WEB attacks Connections to 80/443 ports: netstat -tn | egrep ':80|:443' Sorted connections to 80/443 and only established: netstat -tn | egrep ':80|:443' | grep ESTABLISHED | awk '{print $5}' | sed 's/:.*//' | sort | uniq -c | sort -n

openssl-sni

Anonymous (anonymous@undisclosed.example.com) — 2019-04-25T20:43:20+00:00

OpenSSL test SNI cert $ openssl s_client -connect server.com:443 -servername another-server-domain.com More info:

openvz

Anonymous (anonymous@undisclosed.example.com) — 2019-04-25T20:43:33+00:00

OpenVZ container Test disk speed: # time (dd if=/dev/zero of=/tmp/test bs=64k count=16k > /dev/null; sync) 16384+0 records in 16384+0 records out 1073741824 bytes (1.1 GB) copied, 244.182 s, 4.4 MB/s real 4m4.440s user 0m0.016s sys 0m3.962s # time ls -la /tmp | wc -l 99 real 0m2.350s user 0m0.004s sys 0m0.011s # ioping -c 10 / 4 KiB <<< / (simfs /dev/simfs): request=1 time=7.24 ms (warmup) 4 KiB <<< / (simfs /dev/simfs): request=2 time=189.6 us 4 KiB <<< / (simfs /dev/simfs): …

outlook-com-delist

Anonymous (anonymous@undisclosed.example.com) — 2019-04-25T20:43:47+00:00

Outlook.com delist url * * Header analyzer:

postfix

Anonymous (anonymous@undisclosed.example.com) — 2019-04-25T20:45:05+00:00

Postfix

public_dns

Anonymous (anonymous@undisclosed.example.com) — 2019-04-25T20:45:29+00:00

Public DNS list My favorites: Provider Primary DNS Server Secondary DNS Server Google3 8.8.8.8 8.8.4.4 Cloudflare 1.1.1.1 1.0.0.1 OpenDNS Home6 208.67.222.222 208.67.220.220 Other: Provider Primary DNS Server Secondary

scan-tools

Anonymous (anonymous@undisclosed.example.com) — 2019-04-25T20:45:41+00:00

Server scanning tools Here are some tools to scan servers: * Clamav + Maldet * Rkhunter * Chkrootkit * Lynis More info:

search-infected-php

Anonymous (anonymous@undisclosed.example.com) — 2019-04-25T20:46:10+00:00

Search infected PHP files Fist scan with maldet (+clamav for performance). * Searching suspicious words: find . -type f -name '*.php' | xargs egrep -i "(shell_exec|system|stream_socket_client|gzinflate|system|passthru|eval|base64_decode) *\(" > /tmp/scanresult_suspicious.txt find . -type f -name '*.php' | xargs egrep -i "eval/" > /tmp/scanresult_eval.txt find . -name 'index.php' -size +1900c > /tmp/scanresult_indexmorekb.txt find . …

shell-scripting

Anonymous (anonymous@undisclosed.example.com) — 2019-09-17T18:47:06+00:00

Shell scripting Here will be some useful examples and snippet Links * Bash single quotes and double quotes: * lockrun: * solo: * Prevent CRON from overlapping: * bash colors: Debug scripts # sh -x some-script-name.sh Differences between single and double quotes

software_raid

Anonymous (anonymous@undisclosed.example.com) — 2019-04-25T20:46:47+00:00

Software RAID Here is some info about software raid. Disk replacement Clone partition from disk in RAID: sfdisk -d /dev/sda | sfdisk /dev/sdb Add disk to RAID: mdadm --manage /dev/md0 --add /dev/sdb1

solusvm-import-vmware

Anonymous (anonymous@undisclosed.example.com) — 2018-06-04T09:06:26+00:00

How to import vmware image to solusvm 1) convert image: kvm-img convert -O raw vm001.vmdk vm001.img # OR qemu-img convert -O raw vm001.vmdk vm001.img 2) Shutdown (New/Empty) VM and overwrite disk image with dd: dd if=vm001.img of=/dev/YourVolumeGroupName/kvm123_img

ssh

Anonymous (anonymous@undisclosed.example.com) — 2019-04-25T20:48:50+00:00

SSH Here some useful thing for SSH. SSH cheatsheet Task Command ========================================================================================= Logging in ========================================================================================= Connect to remote host ssh 192.168.1.100 Connect as another User ssh -l bob 192.168.1.100 Connect on alternate port number ssh -p 1022 192.168.1.100 Combine all of the above ssh bob@192.168.1.100:1022 ===============================…

ssl

Anonymous (anonymous@undisclosed.example.com) — 2021-12-15T19:45:41+00:00

SSL Generate self-signed ssl: openssl req -new -nodes -x509 -out localhost.crt -newkey rsa:4096 -keyout localhost.key -days 3650 or openssl req -newkey rsa:2048 -sha256 -nodes -keyout key.pem -x509 -days 3650 -out certificate.pem SSL certificate match key and cert:

strace

Anonymous (anonymous@undisclosed.example.com) — 2019-04-25T20:47:48+00:00

Strace * *

tools

Anonymous (anonymous@undisclosed.example.com) — 2021-01-27T21:24:23+00:00

Tools Create multiboot USB:

webhosting-panels

Anonymous (anonymous@undisclosed.example.com) — 2019-05-10T18:50:52+00:00

List of webhosting management panels Opensource webhosting panels: * VestaCP * ISPconfig * CWP (Centos web panel) * froxlor * Cockpit * Centminmod Commercial opensource panels: * DirectAdmin * Plesk * cPanel * Cyberpanel

windows10-wls-ssh-agent

Anonymous (anonymous@undisclosed.example.com) — 2019-10-23T19:36:59+00:00

Use an ssh-agent in WSL with your ssh setup from windows 10 To enable ssh-agent work on multiple wls tabs, install keychain: sudo apt install keychain Next add to the end of ~/.bashrc: /usr/bin/keychain --nogui $HOME/.ssh/id_rsa source $HOME/.keychain/$HOSTNAME-sh

wordpress-varnish-https

Anonymous (anonymous@undisclosed.example.com) — 2018-06-04T09:06:04+00:00

How do I configure WordPress to work with Varnish SSL? There are a few extra steps that are needed to ensure Varnish can cache SSL traffic for WordPress. Here they are: 1. Your htaccess rules must not have forced https redirect like this. Do NOT do the following nor install a https redirection plugin:

wordpress

Anonymous (anonymous@undisclosed.example.com) — 2019-04-25T20:47:04+00:00

WordPress stuff Plugins for debug: *