Whenever you want to add a new user you must make sure that the uidNumber is set to a unique number, if you have many users it could sometimes take a while to find which is the last uidNumber set to a user, to find the last uidNumber run this.
ldapsearch -H ldaps://your-ldap-domain -D "cn=Manager,dc=domain,dc=com" -W | awk '/uidNumber: / {print $2}' | sort | tail -n 1
GitList a popular self-hosted git repository viewer is vulnerable to a very serious bug in their core application. It allows for URL command evaluation to be run by any user able to view their repos.
A common installation on a domain looks like this
http://example.com/gitlist
It’s easy to spot a vulnerable installation by just looking at the footer, if you see “Powered by GitList” odds are it’s vulnerable. Non vulnerable are usually have the version number in the footer like “Powered by GitList 0.4.0”
To exploit this simply find a repo and append a string like the following.
http://example.com/gitlist/someRepoName/blame/master/""`ls -lah`
After you will see a listing of all the files in the repo directory. ls -lah can be any system command.
This vulnerability got fixed in later version but it is still much out there in the wild. A simple google search:
"Powered by GitList"
Results in thousands of results of people running this software. If you have this somewhere, you must update it.
If you have a git repo on a server and allow users to push over ssh using their public keys, then you might want to add this to every entry on the authorized_keys file on .ssh
For each ssh pub key on authorized_keys pre-append this
command="./.gitserve",no-port-forwarding,no-agent-forwarding,no-X11-forwarding,no-pty
Where .gitserve is a script allowing only git commands to be executed
#!/bin/bash exec git-shell -c "$SSH_ORIGINAL_COMMAND"
Downloading JAVA SDK isn’t trivial using wget as Oracle has set it to accept agreement before downloading it from their website. You can get around this issue using wget with the following params.
wget --no-check-certificate --no-cookies --header "Cookie: oraclelicense=accept-securebackup-cookie" http://download.oracle.com/otn-pub/java/jdk/8u25-b17/jdk-8u25-linux-x64.tar.gz
Often you’ll forget that you weren’t on sudo when you started editing a file, you’ll try to save it and will complain that it’s in folder for which you do not have permissions to save it. Instead of discarding the changes you can still save it as sudo.
:w !sudo tee % > /dev/null
Oh no there are BOMs in your files! No not BOMBS, BOMs. These sometimes are accidentally added by some IDEs depending on how the settings are configured. One easy way of removing them is this.
First lets find all these BOMs. This will recursively find any files(excluding binary) and list only those having a BOM
grep -rlI $'\xEF\xBB\xBF' .
If you find any files you might want to de-BOM then pip the output through xargs and vim to remove it
grep -rlI $'\xEF\xBB\xBF' . | xargs vim -c "set nobomb" -c wq!
And just like that all BOMs are gone.
So your hacking away on your linux box when suddenly you notice that you only have 200MB out of 32GB available RAM, you freak out and pull out your hair as you don’t know what could possibly be using so much RAM. Don’t panic, this is normal your box just has most of the memory cached. It doesn’t pose any danger as your system will free it up automatically as you need it. In case you need it here is how to free up all of the cached memory.
free && sync && echo 3 > /proc/sys/vm/drop_caches && free
There are times when you need to access a service on a remote server that does not have a firewall rule in place to allow direct connection from your end. If you have ssh access you can do the following.
In this examples we want to forward remote mysql server port 3306 to our machine(host) 3310
On host:
ssh -f -L3310:localhost:3306 sshUser@remoteserver -N
Test, backup remote DB through forwarded port:
mysqldump -P 3310 -h 127.0.0.1 -u mysql_user -p database_name > backup.sql
Often you’ll find that files edited using IDEs or common editors add a ^M , carriage return, to the end of the line. To view and remove them just open file in vim and use
:e ++ff=unix
This will display all carriage returns, to remove them use
:%s/\r//g
Done
Sometimes you have to delete files on disk to free up space, you proceed to remove it only to find that it didn’t actually free up any space. This usually means that files are being held against their will by some process, to view these files being held run
lsof -n | grep -i deleted
Sample output
mysqld 13493 mysql 4u REG 202,1 0 271066 /tmp/ibicpkpG (deleted) mysqld 13493 mysql 5u REG 202,1 0 271289 /tmp/ibEqTjw4 (deleted) mysqld 13493 mysql 6u REG 202,1 0 271290 /tmp/ibsiLjDs (deleted)
From here just restart the process and it should free up those files