Recent Questions - Unix & Linux Stack Exchange |
- Checking integrity of a created backup archive
- how to install csvkit in bash
- Need help identifying and closing back BIOS level backdoor - OS Agnostic
- copy/paste in terminator stop working after a while
- How to share a folder between two users on the same linux laptop
- When would unsolicited message triggered from wpa_suplicant
- Are connection between Local Microsoft SQL serer and azure microsoft sql server compatible or not?
- prime-run: Segmentation fault
- "Ambigous Redirect" for redirecting text to a variable
- locate specific drive after failure in zfs pool
- How do I use netplan to link my lan port with my wan port?
- Kali OS Not found, not booting
- Installing font packages
- How to send output to next input line?
- Replace values in fifth column
- Boot from USB and run sshd on server without keyboard or display
- dpkg: Remove msodbcsql17
- How to decorate comments in bash?
- Fedora 36 Virtualbox 6.1 Kernel driver not installed
- What is the different use for setopt and zstyle?
- Dual GPU xorg.conf ignores XScreen on one GPU and uses xrandr
- OBS can't do window capture under Sway
- Firewalld forwarded ports are refusing connection
- How to automatically run mkinitramfs on Debian after apt update for kernel packages?
- Arch Linux KDE Plasma Black Screen after login
- Command not executing over SSH
- gksu replacement
- Why is nullglob not default?
- Ffmpeg problems on centOS 5.8 64 bit
Checking integrity of a created backup archive Posted: 20 Jun 2022 11:47 AM PDT I'm wondering how to verify the checksum of a tarball backup with the original directory after creation. Is it possible to do so without extracting it for example if it's a large 20GB backup? Example, a directory with two files: Resulting checksum of directory content: Create tarball: The checksum of the directory content stays constant. But when creating the archive and getting the checksum of the archive I noticed that the results vary. Why is that? How would I go about getting the checksum of the tarball content to compare to the directory content checksum? Or what's a better solution to check that the archive contains all the necessary content from the original directory (without extracting it if it's large)? |
Posted: 20 Jun 2022 11:57 AM PDT Kusalananda nicely recommends using This answer does not seem to involve the use of python. But the csvkit installation tutorial and its installation troubleshooting do seem to rely on, perhaps require, the use of python. This makes me, a newbie, confused: Is it possible to install csvkit in git bash without using python (read: open spyder or anaconda, let's say)? How? |
Need help identifying and closing back BIOS level backdoor - OS Agnostic Posted: 20 Jun 2022 11:17 AM PDT I'm stopping by trying to further narrow down my understanding and ultimately the eradication of one if not multiple Cobalt Strike beacons on multiple machines. Before you ask the normal "How do you know..." questions - This has been going on since late Jan of this year. Picking up intensity and visibility early April. Leaving out the gory details it's been an hell of an experience, to put it lightly. Three months ago I had never even seen a Linux distro boot, had no idea what an ARP broadcast was, and sure as hell had no idea how to use CL. Today I primarily run Linux, am having to do a clean install of an OS on average about once a day. And have been in a battle of attrition with whoever is propagating this. This past weekend I even made it down into their shell. Which, with CSM enabled and using Grub2Hybrid show up as MS-DOS either floppy disks or CDROMs. There are at least six of them. This is just on one machine. Every single piece of circuitry that is network-enabled has been touched by whatever this is. To give context the software/malware stack I'm up against seems to be an offshoot or a variant of Gonna Cry ransomware. As there are multiple files, both in binary and in C, that are labeled 'gcry.'. And the program seems to reinforce that understanding as it is seemingly programmed to immediately, pre boot, take root privileges, and start maneuvering to box me out of system files, and makes efforts to obfuscate its actions. It is 100% more prolific in Windows, particularly 10, and runs in 32 bit. On Linux the user shows up in the logs, and essentially masquerades as me, uuid 1000, but boxes me out of all the pertinent files including The thing automatically propagates on any removeable media device, usually by adding a hidden .trash-1000 file which if not programmed to drop a payload will be focused on information gathering including logs, debug, and dev dumps. It seems to be interested in installs as well. All of that is autonomous. When there is an operator on the other end things get much, much more difficult. As it's already an unfair fight (I just learned how to use chown, usermod, and passwd the past week), but when there's an operator, or at least the one I'm dealing with. It's like fighting with my hands behind my back. It has not been fun. My question is; how and what process is this actor using to get seemingly super root over not just my Linux OS's but also the BIOS or UEFI (using UEFI shell, which is where I'm having the most even playing field). In Windows, it's not even worth installing as he can have me either blue screen'd, bitlocked, or otherwise locked out of my own system in the course of an hour. Additionally I'd like to know what I can do to premptively harden a Linux install by using single user mode, changing permissions to directories such as /etc and /var and if that doesn't work what I can do to exorcise this asshole and his bot once that has failed. Using I've gotten pretty efficient at at least prolonging my fight against them using lynis, tiger, chkboot, lockdown, and a few other tools. But it'll just lock those files and their directories in one of their files, rendering them useless. The whole entire goal of this thing seems to be owning the system, and subsequently me. It's like playing one of the weirdest games of capture the flag I've ever played. Going on three months now... Oh, by the way. It's important to mention that either the script, or the operator are acutely network aware. And whenever I send out traffic that is ambiguous to the infection it can either meter, poison, or just plain kill my connection. It also alters the header file and seemingly collects EFI files and grub.cfg files as scalps. I deleted over 250 from one of their shells this past weekend. Every one having a .mod at the end. Any insight or tips are appreciated. And please, keep the internet meta of questioning me five ways from Sunday at a minimum. I'm honestly tired of having to explain, justify and ultimately defend myself. If you're curious please keep it respectful and I can produce literally any collateral you may want to reinforce my line of questions. Hell, if you want I even have the videos from their shell and almost a play by play as it was happening. I've even gone so far as to offer remote access to multiple people who found it their role to try and discredit me. None have accepted. If you'd like to be the first please let me know. And lastly. You have to look at this from an incredibly granular view. This is not your Daddy's adware. This is or at least was enterprise style phased malware attacks over the course of now over six months. Other most recent observations:
The systems I'm using are, in which are all affected:
Not to mention
Operating systems have primarily been:
Thanks in advance. Forgot to mention: About a month ago I was able to hail mary a couple stacks of this dickheads toolkit at virustotal, hybrid-analysis, kaspersky, etc. The only one as of yet to pick up any thing en masse has been kaspersky. With those showing up as:
|
copy/paste in terminator stop working after a while Posted: 20 Jun 2022 10:26 AM PDT I am running Ubuntu 16 and has Terminator installed, for some strange reason copy/paste either through keyboard shortcut or right-click mouse menu would stop working on certain terminator windows, it would still work on other terminator windows when this happens, the only way that I can fix this is to restart the bad terminator window. Anyone else experience this and is there a quick fix for it? Thanks. |
How to share a folder between two users on the same linux laptop Posted: 20 Jun 2022 11:00 AM PDT
What should I do in order to make it accessible by both the users.? (Still working my way through linux commands. That's why I'm using UI to do all the things) |
When would unsolicited message triggered from wpa_suplicant Posted: 20 Jun 2022 09:05 AM PDT I've been doing some study about wpa_supplicant, while i was going through the manual page i found a term 'unsolicited events', from what i understood, the events that are triggered by wpa-supplicant other than events that are triggered as response for user commands are called 'unsolicited events'. I need to know on what scenarios these events occurs,please give me some 2 realtime examples for atleast 2 events and do we have to respond to these events? I really cant find anything about the real time situations for these events in google. Please share me your thoughts |
Are connection between Local Microsoft SQL serer and azure microsoft sql server compatible or not? Posted: 20 Jun 2022 09:01 AM PDT If they are not compatible please provide some explanation for somebody who is trying to learn about protocols :) |
Posted: 20 Jun 2022 09:57 AM PDT When I run any graphical program with The problem should be the System Info: OS: Artix Linux x86_64
My Any ideas? Side note: I think I caused this problem when trying to configure my optimus (I tried Side question: Does steam automatically use offloading? Steam games stopped launching shortly before I discoreverd my problem with prime-run. |
"Ambigous Redirect" for redirecting text to a variable Posted: 20 Jun 2022 10:20 AM PDT NOTE: RESOLVED I'm making a shell script to limit the amount of time someone spends on a program but it gives me these errors: Here is the code: I ran it though ShellCheck and it seems fine. Can anyone see the problem? |
locate specific drive after failure in zfs pool Posted: 20 Jun 2022 08:21 AM PDT I have a pool that had a drive fail and zfs is being stupid about it. I added a disk which ended up going to /dev/sdl I used the disk by id to add it in and due to that after the other drive failed during or just before a reboot i get the following line. 5642991870772164099 UNAVAIL 0 0 0 was /dev/sdl1 any idea how to get the info to find what the serial number of 5642991870772164099 is? |
How do I use netplan to link my lan port with my wan port? Posted: 20 Jun 2022 08:52 AM PDT This is part of a project to setup my linux machine with 2 nics as a router. The "routes" key in the below mentioned yaml configuration file is what I think I need to set in the yaml file. What value should I enter against the "to" key? The following are the steps I took to configure network interfaces via netplan. I did not have the entries for the routes key as they had no effect. This is what the values used in my configuration file and commands represent: wan0 — connected to the internet. Has dynamic IP address. lan0 - dhcp and dns server for my local network. Has static ip 192.168.1.1 /etc/netplan/00-installer-config.yaml - netplan configuration file. Entered values in the yaml file:
These are the actual entries in my yaml configuration file (without the routes: key) Executed the following commands:
Additional information: Finally I gave up on netplan and took these steps to get the router working: I did do the steps I mentioned above to configure my network interfaces via netplan. Then, I did these steps:
Saved the file and executed the following commands
|
Kali OS Not found, not booting Posted: 20 Jun 2022 08:06 AM PDT I have Kali Linux installed on my laptop's SSD, I have another SSD on which I wanted to install Windows as a backup. The process was successful, but the next day I went to boot up my laptop (with Kali) and it said there was no OS installed, but I know that Kali is installed. I checked by using a Kali Live USB. Do I need to install grub somewhere different? This is NOT a dual-boot, BTW. |
Posted: 20 Jun 2022 07:52 AM PDT I'm trying to install several font packages (frontproto, inputproto, kbproto, renderproto, xproto, xetproto) in an Ubuntu 20.04 system using either |
How to send output to next input line? Posted: 20 Jun 2022 09:44 AM PDT This my snippet This is what I want Example should be How to fix this? (or enhance the script) |
Replace values in fifth column Posted: 20 Jun 2022 09:41 AM PDT I have multiple text I want to replace the fifth column , but when I use The output should look like this : --- update --- if there is no user1, there will be a name and the second column is just time, it has nothing to do with the name something like this |
Boot from USB and run sshd on server without keyboard or display Posted: 20 Jun 2022 07:49 AM PDT I have an old HP server, would like to
I can then ssh into the box from my laptop. I was wondering if the above setup/startup is possible ? |
Posted: 20 Jun 2022 11:59 AM PDT I'm getting this error when I'm trying to uninstall I've also tried with Also: Any ideas about how to remove it? |
How to decorate comments in bash? Posted: 20 Jun 2022 10:16 AM PDT From time to time I see similar framing for comments in bash scripts: Is there any program to generate such a decoration for comments or do people usually create it manually? |
Fedora 36 Virtualbox 6.1 Kernel driver not installed Posted: 20 Jun 2022 08:56 AM PDT |
What is the different use for setopt and zstyle? Posted: 20 Jun 2022 10:14 AM PDT I don't understand why they are both needed since they seem that |
Dual GPU xorg.conf ignores XScreen on one GPU and uses xrandr Posted: 20 Jun 2022 11:52 AM PDT Dual GPU X11 using xorg to separate workloads and screens. 2 GPU 3 screens/monitors. Basically GPU 0 => XScreen 0.0 => Monitor 0 (left) GPU 1 => XScreen 0.1 => Monitor 1 (center) GPU 0 => XScreen 0.2 => Monitor 2 (right) When I set this up the system only acknowledges 2 XScreens (one per GPU) which then lumps the flanking screens together which breaks placements. Any input on why this is happening would be appreaciated. |
OBS can't do window capture under Sway Posted: 20 Jun 2022 10:28 AM PDT I'm running Fedora Linux with Sway, and I wanted to capture some stuff with OBS. However, there is simply no option to do a "Window capture". As far as I can tell, this is usually attributed to problems with PipeWire or As suggested in However, that didn't really help. What else can cause OBS to refuse to capture windows? |
Firewalld forwarded ports are refusing connection Posted: 20 Jun 2022 10:37 AM PDT I have a problem with Firewalld port forwarding. The issue is that forwarded ports are refusing connections or are not responding (TCP flag RSET? on hypervisor where port forwarding is set up) OS: Oracle Linux 8.4, kernel 4.18 The firewalld configuration: Forwarded ports are open on target VM and its IPv4 address is correct (192.168.1.3): Port 80 and 443 are load balanced using Nginx (as HTTP Load Balancer) and forwarding works fine. IPv4 and IPv6 port forwarding are enabled: What can be the issue here? |
How to automatically run mkinitramfs on Debian after apt update for kernel packages? Posted: 20 Jun 2022 08:06 AM PDT What I am trying to achieve is to have an encrypted root file system on a Raspberry Pi (running Raspian Buster) that gets unlocked at boot via ssh. I got quite far by adapting a tutorial for Kali linux and got it working at least once, but it does not survive kernel updates yet. One of the problems is, that this setup is using an initramfs that is referenced in and that needs to be updated after an kernel update by manually calling e.g. where This is where I got stuck with 2 problems:
Regarding A) I came as far as learning that It determines the filename for the initramfs. No such file got ever generated during the update and I'm not sure if I am on the right track, as wikipedia says that the init.rd scheme was superseded by the initramfs scheme. However, I was not able to find a good documentation that describes how things are supposed to happen after a kernel module upgrade. (Good links appreciated). So my question is: Where is a good place to plug in a script that runs the Regarding B), it is easy to get available kernel versions with But how do I automatically select the right one for the current hardware? For a Pi3B+ this would be Thank you very much for your help! |
Arch Linux KDE Plasma Black Screen after login Posted: 20 Jun 2022 10:07 AM PDT I wanted to install kde plasma, so I followed the next steps: But when i run Btw i installed gdm and works why kde plasma not?? Thx. |
Command not executing over SSH Posted: 20 Jun 2022 11:03 AM PDT I made this script for a course. It executes commands through ssh from the arguments of the script, on a number of remote servers specified in a file: And it works perfectly for simple commands (like Now I don't know if it's a bug in my code or something, but I cannot pipe commands through this. So this command does not work: If I escape the pipe with \| it just literally writes it as \|. This other command also doesn't work: EDIT: I found the problem with piping not working: I have to write sudo AFTER the pipe as well if a command needs sudo priviledges. This one works this way: I still cannot redirect though. |
Posted: 20 Jun 2022 12:05 PM PDT In the old days of CentOS 5 i had an application that run as another user. I created a .desktop file which run a command that looked like this: When the user clicked the icon a popup asked for the password of "anotheruser" and when the password was correct "someapplication" started. Now in the modern days of CentOS 7 i can't find a replacment for this behaviour. I tried beesu: but it is asking me for the root password instead of "anotheruser" password. I also tried pkexec: With the same result. Both methods also have problems finding the correct display variable: Any help will be appreciated. Thank you. |
Posted: 20 Jun 2022 10:48 AM PDT In most shells in an empty directory, it will expand the So, is there a reason why |
Ffmpeg problems on centOS 5.8 64 bit Posted: 20 Jun 2022 09:03 AM PDT I did install Can anyone help? |
You are subscribed to email updates from Recent Questions - Unix & Linux Stack Exchange. To stop receiving these emails, you may unsubscribe now. | Email delivery powered by Google |
Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States |
No comments:
Post a Comment