|
|
My OpenSource Scripts
A Brutal Script against (SSH) Brute Force Attack
ssh-anti-brute-1.3.pl
(Tested on Fedora 4, 5, 6/Mandriva/Redhat 9, Enterprise/Centos 4.4, 5 with syslogd)
size: 3564 bytes
md5: bba63ccd4802805798d6283ad0d7617d
Process the ssh logs in realtime through a named pipe.
Block the IPs with more then $threshold failed login attempts.
It use iptables to block the ips.
Perl lsof
lsof-1.2.pl
(Tested on Gentoo/Debian/Ubuntu/Fedora 4, 5, 6/Mandriva/Redhat 9, Enterprise/Centos 4.4, 5 )
size: 3267 bytes
md5: 94cedd5a1bb6660dfb23848dec7490ff
This script give the output similar to lsof -i.
Shows the PID, uid, local port, local ip, remote port, remot ip, and full pathe of the executeable file which started the process.
It is designed to run on compromised systems where lsof command can not be installed or lsof is already infected by the rootkit.
It retrive the information directly from /proc
|
|
 |
