Results 1 to 4 of 4
  1. #1

    i want a command ... !!

    Hello Friends,

    my last thread was about ifram infection and i've found good idea


    i need someone to write to me cronjob command that do the following

    every 4 hours it runs an php file at following path

    /home/my_hosting_un/public_html/size_detect.php


    how could be the cronjob command i do write ????


    *** since it attack index.php we can record its size and which size_detect.php when it run and found different in size it send you an mail >>

    if it worked i will write here the code the of idea after improvment , i just need the command in order to test it

    thanks in advance

  2. #2
    Join Date
    Oct 2007
    Location
    CA,USA
    Posts
    323
    Try to setup this command as a Cron Job

    0 4 * * * php -q /home/my_hosting_un/public_html/size_detect.php

    If you want to test the file use

    php -q /home/my_hosting_un/public_html/size_detect.php

  3. #3
    Join Date
    Mar 2009
    Location
    Gods Own Country
    Posts
    681
    it will still report if customers change their php files for good..

    may be, you can monitor the ftp logs for immediate download and upload of files.. usually iframe attacks are done like this

    1. A file is downloaded from server using FTP ( in 99% of cases )
    2. The file is changed at attackers end.
    3. The file is uploaded back to server.

    The entire operation takes less than 1 second. So, if there is frequent download and upload of files in short time ( say less than 3 seconds ), then some sort of attack is happening.
    Fabin Mundattil @ Xieles Support
    High Quality Server Management | support @ xieles.com
    https://xieles.com

  4. #4
    Join Date
    Apr 2005
    Location
    Cochin
    Posts
    2,452
    You could prbably use a diff command

    diff <reference file > index.html

Similar Threads

  1. command to stop the wget command?
    By shippuuden in forum Hosting Security and Technology
    Replies: 9
    Last Post: 05-01-2007, 10:18 AM
  2. Perl: how to run a command line command from inside perl
    By fozzy in forum Programming Discussion
    Replies: 3
    Last Post: 10-28-2005, 11:34 AM
  3. what does this command do ?
    By AndyJ in forum Hosting Security and Technology
    Replies: 2
    Last Post: 07-21-2005, 03:00 PM
  4. Linux command/script to run a command for every file in a directory tree?
    By civ in forum Hosting Security and Technology
    Replies: 5
    Last Post: 01-25-2004, 08:48 PM
  5. Need some help with SSH command
    By Tazzman in forum Hosting Security and Technology
    Replies: 12
    Last Post: 06-06-2002, 10:09 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •