WooYun.org

# if you run this script manually, please use the sudo -u en-www bash /home/en-www/update-webdata.sh 
cd /home/en-www; git pull origin master
#! /bin/bash
#rollback ROOT.war to the last one.
cp /home/en-www/backup/ROOT.war.last /var/lib/tomcat6/webapps/ROOT.war
/etc/init.d/tomcat restart
Linux app001.wechat 3.2.10-xen #2 SMP Wed Mar 14 07:31:12 PDT 2012 x86_64 GNU/Linux
#
# This file is manged by puppet
#
127.0.0.1	localhost.localdomain localhost
10.192.50.52	app001.wechat.bj1.enops.net app001
; <<>> DiG 9.7.3 <<>> master.wechat.bj1.enops.net
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 23508
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 4, ADDITIONAL: 4
;; QUESTION SECTION:
;master.wechat.bj1.enops.net.	IN	A
;; ANSWER SECTION:
master.wechat.bj1.enops.net. 1800 IN	CNAME	app001.wechat.bj1.enops.net.
app001.wechat.bj1.enops.net. 1800 IN	A	10.192.50.52
;; AUTHORITY SECTION:
bj1.enops.net.		1800	IN	NS	admin001.bj1.enops.net.
bj1.enops.net.		1800	IN	NS	admin002.bj2.enops.net.
bj1.enops.net.		1800	IN	NS	admin002.bj1.enops.net.
bj1.enops.net.		1800	IN	NS	admin001.bj2.enops.net.
;; ADDITIONAL SECTION:
admin001.bj1.enops.net.	1800	IN	A	10.192.9.20
admin001.bj2.enops.net.	1800	IN	A	10.193.9.20
admin002.bj1.enops.net.	1800	IN	A	10.192.9.21
admin002.bj2.enops.net.	1800	IN	A	10.193.9.21
;; Query time: 0 msec
;; SERVER: 10.192.9.20#53(10.192.9.20)
;; WHEN: Fri Jul 19 15:22:58 2013
;; MSG SIZE  rcvd: 242

achen pts/1 vpn-rwc.corp.et**.enops.net

$ last
hxiao    pts/0        10.192.8.28      Fri Jul 19 06:31 - 07:00  (00:28)    
hxiao    pts/0        10.192.8.28      Fri Jul 19 06:08 - 06:16  (00:08)    
hxiao    pts/0        10.192.8.28      Thu Jul 18 04:13 - 07:51  (03:37)    
hxiao    pts/0        10.192.8.28      Wed Jul 17 01:06 - 10:57  (09:51)    
jrevita  pts/1        10.192.8.28      Tue Jul 16 21:55 - 21:57  (00:01)    
gplasky  pts/0        10.192.8.28      Tue Jul 16 21:01 - 00:39  (03:37)    
gplasky  pts/0        10.192.8.28      Tue Jul 16 20:56 - 20:59  (00:03)    
jrevita  pts/1        10.192.8.28      Tue Jul 16 20:55 - 20:58  (00:02)    
gplasky  pts/0        10.192.8.28      Tue Jul 16 20:49 - 20:56  (00:06)    
gplasky  pts/0        10.192.8.28      Tue Jul 16 20:40 - 20:40  (00:00)    
gplasky  pts/0        10.192.8.28      Tue Jul 16 20:29 - 20:39  (00:10)    
fyue     pts/0        10.192.8.23      Tue Jul 16 10:04 - 10:04  (00:00)    
hxiao    pts/0        10.192.8.28      Tue Jul 16 03:38 - 07:14  (03:35)    
hxiao    pts/0        10.192.8.28      Mon Jul 15 02:49 - 10:40  (07:50)    
hxiao    pts/0        10.192.8.28      Mon Jul 15 01:56 - 01:57  (00:00)    
hxiao    pts/1        10.192.8.28      Sun Jul 14 20:08 - 21:12  (01:03)    
hxiao    pts/1        10.192.8.28      Sun Jul 14 19:56 - 20:00  (00:04)    
hxiao    pts/0        10.192.8.28      Sun Jul 14 19:40 - 21:11  (01:31)    
hxiao    pts/1        10.192.8.28      Fri Jul 12 07:59 - 08:27  (00:28)

if [ $# -eq 0 ];  then
	echo -e "Usage: $0 hostname\n\tEX: $0 vpn01.enchina"
	exit
fi
hostname=$1
enopspass="yinxian******"
rootpass="xp2********"
#setup hostname
echo "$hostname" > /etc/hostname
echo -e "127.0.0.1\t $hostname" > /etc/hosts
#setup root password
echo -e "${rootpass}\n${rootpass}" | passwd
#setup sshd
sed -i 's/Port 22$/Port 22022/g' /etc/ssh/sshd_config
sed -i 's/PermitRootLogin yes/PermitRootLogin no/g' /etc/ssh/sshd_config 
#update apt source
echo "deb http://mirrors.163.com/debian squeeze main contrib non-free" > /etc/apt/sources.list
aptitude update
#set up enops user
groupadd enops
useradd -m -p `mkpasswd $enopspass` -g enops -s /bin/bash enops 
aptitude install sudo
chmod 644 /etc/sudoers
sed -i '/%sudo/ a\%enops ALL=(ALL) ALL' /etc/sudoers
chmod 440 /etc/sudoers

root@kali:~# ssh -p 22022 enops@tools.yinxiang.com
The authenticity of host '[tools.yinxiang.com]:22022 ([115.28.33.231]:22022)' can't be established.
RSA key fingerprint is cc:2e:18:a8:56:c8:32:40:91:a3:b6:c8:7f:8a:7d:a2.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '[tools.yinxiang.com]:22022,[115.28.33.231]:22022' (RSA) to the list of known hosts.
enops@tools.yinxiang.com's password: 
Linux tools.enchina 2.6.32-5-amd64 #1 SMP Sun Jan 1 04:57:38 CST 2012 x86_64
Welcome to aliyun Elastic Compute Service!
Last login: Tue Mar 25 10:54:24 2014 from 183.81.181.234
enops@tools:~$ whoami
enops