01-05-2014, 12:52 AM
Sebelumnya Permisi Sama Admin, Nyelonong Aja Buat Thread Dimari.
Cuma Nambahin Tutorial Aja.
Banyak Yang Bertanya Gimana Caranya Liat User Yang Pake Esteh Kita?
Disini Saya Coba Jawab Langsung.
Gimana Caranya Install Script User Login.
Cuma Nambahin Tutorial Aja.
Banyak Yang Bertanya Gimana Caranya Liat User Yang Pake Esteh Kita?
Disini Saya Coba Jawab Langsung.
Gimana Caranya Install Script User Login.
Check This Out

Code:
Silahkan Login Putty Dengan Akses root
Masukkan Command Ini
Code:
# nano login.sh
Isi Blank Nano Page Dengan Script Berikut :
Code:
#!/bin/bash
# Edited By Jenglotbae a.k.a Hajeclo
data=( `ps aux | grep -i dropbear | awk '{print $2}'`);
echo "Dropbear";
echo "---";
for PID in "${data[@]}"
do
#echo "check $PID";
NUM=` cat /var/log/auth.log | grep -i dropbear | grep -i "Password auth succeeded" | grep "dropbear\[$PID\]" | wc -l`;
USER=` cat /var/log/auth.log | grep -i dropbear | grep -i "Password auth succeeded" | grep "dropbear\[$PID\]" | awk '{print $10}'`;
IP=` cat /var/log/auth.log | grep -i dropbear | grep -i "Password auth succeeded" | grep "dropbear\[$PID\]" | awk '{print $12}'`;
if [ $NUM -eq 1 ]; then
echo "$PID - $USER - $IP";
fi
done
echo "---";
data=( `ps aux | grep "\[priv\]" | sort -k 72 | awk '{print $2}'`);
echo "OpenSSH";
echo "---";
for PID in "${data[@]}"
do
#echo "check $PID";
NUM=` cat /var/log/auth.log | grep -i sshd | grep -i "Accepted password for" | grep "sshd\[$PID\]" | wc -l`;
USER=` cat /var/log/auth.log | grep -i sshd | grep -i "Accepted password for" | grep "sshd\[$PID\]" | awk '{print $9}'`;
IP=` cat /var/log/auth.log | grep -i sshd | grep -i "Accepted password for" | grep "sshd\[$PID\]" | awk '{print $11}'`;
if [ $NUM -eq 1 ]; then
echo "$PID - $USER - $IP";
fi
done
echo "> Promote by : Jenglotbae a.k.a Hajeclo"
agar script berjalan otomatis / sebagai permission sebelum menjalankan peritah
Code:
# chmod +x login.sh
Perintah Menjalankan Script User Login.
Code:
# ./login.sh
Sekian

NB :
Script Di Atas Berlaku Buat Debian
Untuk CentOS
Code:
# cat /var/log/auth.log
Ganti Menjadi
Code:
# cat /var/log/secure
Credit To :
[email protected] & [email protected]