Rabu, 28 September 2011

Jail User + phpmyadmin

Set untuk jail linux user not tested if there is a bug that can be exploited as a hole to be used as escalation hacking method

1. sudo apt-get install scponly
2. sudo chsh -s /usr/bin/scponly
3. sudo dpkg-reconfigure -plow scponly
4. cd /usr/share/doc/scponly/setup_chroot
5. sudo gunzip setup_chroot.sh.gz
6. sudo chmod +x setup_chroot.sh
7. sudo ./setup_chroot.sh

follow on screen instructions


64 bit ada beberapa file yng tidaj tereksekusi oleh script .sh diatas

sudo cp /lib/libnss_files* -av /home/(namauser)/lib

+ HIDE phpmyadmin annoying database :p

sudo nano /usr/share/phpmyadmin/config.inc.php

if (!isset($cfg['Servers'][$i]['hide_db'])) {
$cfg['Servers'][$i]['hide_db'] = 'information_schema';
}

Tidak ada komentar:

Posting Komentar