#!\/bin\/bash
\nfor ((i=1;i<=254;i++))
\ndo
\nip=192.168.1.$i
\nping $ip -c 1 |grep -q ‘ttl=’ && echo “$ip” >> alive.txt
\ndone<\/p>\n
#!\/bin\/bash
\ngroupadd websphere
\nfor user in app1 app2 app3 app4
\ndo
\nuseradd -g websphere -s \/sbin\/nologin -d \/dev\/null $user
\n(echo $user;echo $user) | smbpasswd -s -a $user
\ndone<\/p>\n
cat access.log |awk ‘{print $1}’|sort |uniq -c |sort -nr |head -10<\/p>\n
<\/p>\n
#!\/bin\/sh
\nfor i in 1 3 5 7 10
\ndo
\nj=3
\nwhile (( “$j” > “$i” ))
\ndo
\nif [ “$i” -gt 1 ]; then
\nbreak
\nfi
\necho -n ” ”
\nlet “j–”
\ndone<\/p>\n
k=1
\nwhile (( “$k” <= “$i” ))
\ndo
\necho -n “*”
\nlet “k++”
\ndone
\necho ” ”
\ndone
\n#!\/bin\/bash
\nm=1<\/p>\n
for ((i=1;i<=100;i++))
\ndo
\n#temp1
\nlet “temp1=i%7”<\/p>\n
if [ “$temp1” -ne 0 ]; then
\ncontinue
\nfi<\/p>\n
#
\necho -n “$i ”<\/p>\n
#temp2
\nlet “temp2=m%7”<\/p>\n
#7
\nif [ “$temp2″ -eq 0 ]; then
\necho ” ”
\nfi<\/p>\n
let “m++”
\ndone<\/p>\n
\n#!\/bin\/bash
\necho “”This is a system initialization script, careful”
\ninput_fun()
\n{
\nOUTPUT_VAR=$1
\nINPUT_VAR=””
\nwhile [ -z $INPUT_VAR ];do
\nread -p “$OUTPUT_VAR” INPUT_VAR
\ndone
\necho $INPUT_VAR
\n}
\ninput_again()
\n{
\nMYHOSTNAME=$(input_fun “please input the hostname:”)
\nDOMAINNAME=$(input_fun “please input the domainname:”)
\nCARD_TYPE=$(input_fun “please input card type(eth0):”)
\nIPADDR=$(input_fun “please input ip address(192.168.100.1):”)
\nNETMASK=$(input_fun “please input netmask(255.255.255.0):”)
\nGATEWAY=$(input_fun “please input gateway(192.168.100.1):”)
\nMYDNS1=$(input_fun “please input DNS1(114.114.114.114):”)
\nMYDNS2=$(input_fun “please input DNS2(8.8.4.4):”)
\n}
\ninput_again
\nMAC=$(ifconfig $CARD_TYPE | grep “HWaddr” | awk -F[” “]+ ‘{print $5}’)<\/p>\n
#SET COMPUTER NAME
\ncat >\/etc\/sysconfig\/network <<ENDF
\nNETWORK=yes
\nHOSTNAME=$MYHOSTNAME
\nENDF<\/p>\n
cat >\/etc\/sysconfig\/network-scripts\/ifcfg-$CARD_TYPE <<ENDF
\nDEVICE=$CARD_TYPE
\nBOOTPROTO=static
\nHWADDR=$MAC
\nNM_CONTROLLED=yes
\nONBOOT=yes
\nTYPE=Ethernet
\nIPV6INIT=no
\nIPADDR=$IPADDR
\nNETMASK=$NETMASK
\nGATEWAY=$GATEWAY
\nENDF<\/p>\n
\/etc\/init.d\/network restart<\/p>\n
cat >\/etc\/hosts <<ENDF
\n127.0.0.1 $MYHOSTNAME $MYHOSTNAME.$DOMAINNAME localhost
\n$IPADDR $MYHOSTNAME $MYHOSTNAME.$DOMAINNAME\u00a0 localhost
\nENDF<\/p>\n
cat >\/etc\/resolv.conf <<ENDF
\ndomain $DOMAINNAME
\nsearch $DOMAINNAME
\nnameserver $MYDNS1
\nnameserver $MYDNS2
\nENDF<\/p>\n
#Close SELINUX
\nsed -i ‘s\/SELINUX=enforcing\/SELINUX=disabled\/g’ \/etc\/sysconfig\/selinux
\nsetenforce 0<\/p>\n
#Modify number of open files
\necho “* soft nofile 66666” >> \/etc\/security\/limits.conf
\necho “* hard nofile 66666” >> \/etc\/security\/limits.conf<\/p>\n
#Optimize the kernel parameters
\ncat >> \/etc\/sysctl.conf << ENDF
\nnet.ipv4.tcp_max_syn_backlog = 65536
\nnet.core.netdev_max_backlog =\u00a0 32768
\nnet.core.somaxconn = 32768
\nnet.core.wmem_default = 8388608
\nnet.core.rmem_default = 8388608
\nnet.core.rmem_max = 16777216
\nnet.core.wmem_max = 16777216
\nnet.ipv4.tcp_timestamps = 0
\nnet.ipv4.tcp_synack_retries = 2
\nnet.ipv4.tcp_syn_retries = 2
\nnet.ipv4.tcp_tw_recycle = 1
\n#net.ipv4.tcp_tw_len = 1
\nnet.ipv4.tcp_tw_reuse = 1
\nnet.ipv4.tcp_mem = 94500000 915000000 927000000
\nnet.ipv4.tcp_max_orphans = 3276800
\nnet.ipv4.ip_local_port_range = 1024\u00a0 65535
\nENDF
\nsysctl -p<\/p>\n
#Turn off the system without service
\nfor server in `chkconfig –list |grep 3:on|awk ‘{ print $1}’`
\ndo
\nchkconfig –level 3 $server off
\ndone<\/p>\n
for server in crond network rsyslog sshd
\ndo
\nchkconfig –level 3 $server on
\ndone<\/p>\n
## Increase user and sudo privilege escalation
\nuser_add()
\n{
\nUSERNAME=$(input_fun “please input new user name:”)
\nuseradd $USERNAME
\npasswd $USERNAME
\n}
\nuser_add<\/p>\n
chmod +w \/etc\/sudoers
\necho “$USERNAME\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ALL=(ALL)\u00a0\u00a0\u00a0\u00a0 ALL” >>\/etc\/sudoers
\nchmod -w \/etc\/sudoers
\n# Set the time zone synchronization
\nyum -y install ntpdate
\n\/usr\/sbin\/ntpdate time.nist.gov<\/p>\n
echo “*\/5 * * * * root \/usr\/sbin\/ntpdate time.nist.gov 1> \/dev\/null 2>&1” >> \/var\/spool\/cron\/root<\/p>\n
# Configure SSHD
\nsed -i ‘\/^#Port\/s\/#Port 22\/Port 65535\/g’ \/etc\/ssh\/sshd_config
\nsed -i ‘\/^#UseDNS\/s\/#UseDNS yes\/UseDNS no\/g’ \/etc\/ssh\/sshd_config
\nsed -i ‘s\/#PermitRootLogin yes\/PermitRootLogin no\/g’ \/etc\/ssh\/sshd_config
\nsed -i ‘s\/#PermitEmptyPasswords no\/PermitEmptyPasswords no\/g’ \/etc\/ssh\/sshd_config
\niptables -A INPUT -p tcp –dport 65535 -j ACCEPT
\n\/etc\/init.d\/sshd restart<\/p>\n","protected":false},"excerpt":{"rendered":"
#!\/bin\/bash for ((i=1;i<=254;i++)) do ip=192.168.1.$i ping $ip -c 1 |grep -q ‘ttl=’ && echo “$ip” >> alive.txt done<\/p>\n
#!\/bin\/bash groupadd websphere for user in app1 app2 app3 app4 do useradd -g websphere -s \/sbin\/nologin -d \/dev\/null $user (echo $user;echo $user) | smbpasswd -s -a $user done<\/p>\n
cat access.log |awk ‘{print $1}’|sort |uniq -c |sort -nr […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[47],"tags":[],"_links":{"self":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/5091"}],"collection":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5091"}],"version-history":[{"count":4,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/5091\/revisions"}],"predecessor-version":[{"id":5093,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/5091\/revisions\/5093"}],"wp:attachment":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5091"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5091"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5091"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}