01-05-2014, 12:52 AM
Sebelumnya Permisi Sama Admin, Nyelonong Aja Buat Thread Dimari.
Cuma Nambahin Tutorial Aja.
Banyak Yang Bertanya Gimana Caranya Liat User Yang Pake Esteh Kita?
Disini Saya Coba Jawab Langsung.
Gimana Caranya Install Script User Login.
Cuma Nambahin Tutorial Aja.
Banyak Yang Bertanya Gimana Caranya Liat User Yang Pake Esteh Kita?
Disini Saya Coba Jawab Langsung.
Gimana Caranya Install Script User Login.
Check This Out
Code:
Silahkan Login Putty Dengan Akses rootMasukkan Command Ini
Code:
# nano login.shIsi Blank Nano Page Dengan Script Berikut :
Code:
#!/bin/bash
# Edited By Jenglotbae a.k.a Hajeclo
data=( `ps aux | grep -i dropbear | awk '{print $2}'`);
echo "Dropbear";
echo "---";
for PID in "${data[@]}"
do
#echo "check $PID";
NUM=` cat /var/log/auth.log | grep -i dropbear | grep -i "Password auth succeeded" | grep "dropbear\[$PID\]" | wc -l`;
USER=` cat /var/log/auth.log | grep -i dropbear | grep -i "Password auth succeeded" | grep "dropbear\[$PID\]" | awk '{print $10}'`;
IP=` cat /var/log/auth.log | grep -i dropbear | grep -i "Password auth succeeded" | grep "dropbear\[$PID\]" | awk '{print $12}'`;
if [ $NUM -eq 1 ]; then
echo "$PID - $USER - $IP";
fi
done
echo "---";
data=( `ps aux | grep "\[priv\]" | sort -k 72 | awk '{print $2}'`);
echo "OpenSSH";
echo "---";
for PID in "${data[@]}"
do
#echo "check $PID";
NUM=` cat /var/log/auth.log | grep -i sshd | grep -i "Accepted password for" | grep "sshd\[$PID\]" | wc -l`;
USER=` cat /var/log/auth.log | grep -i sshd | grep -i "Accepted password for" | grep "sshd\[$PID\]" | awk '{print $9}'`;
IP=` cat /var/log/auth.log | grep -i sshd | grep -i "Accepted password for" | grep "sshd\[$PID\]" | awk '{print $11}'`;
if [ $NUM -eq 1 ]; then
echo "$PID - $USER - $IP";
fi
done
echo "> Promote by : Jenglotbae a.k.a Hajeclo"agar script berjalan otomatis / sebagai permission sebelum menjalankan peritah
Code:
# chmod +x login.shPerintah Menjalankan Script User Login.
Code:
# ./login.shSekian
NB :
Script Di Atas Berlaku Buat Debian
Untuk CentOS
Code:
# cat /var/log/auth.logGanti Menjadi
Code:
# cat /var/log/secureCredit To :
[email protected] & [email protected]
