Discover hidden processes and listening ports

If you ever suspect your system has been hacked, one of the first tools I check against is unhide. It will let you know if any processes (or ports) are hidden from the system. It can be installed with all major package systems (apt/yum/ports/etc) or you can download it directly from the developers website @ http://www.unhide-forensics.info/. To use the application: unhide proc unhide sys unhide brute   also bundled with the application…

Simple MySQL backup script

Here’s a simple MySQL backup script to backup all of your databases at once (and then compress the backup with bzip2) to be used in a crontab: /usr/bin/mysqldump –all-databases | /usr/bin/bzip2 > /backup/mysql-`date +%Y-%m-%d`.bz2   Be sure to change the application paths as needed (you can use the application whereis for this purpose) and change the backup location to wherever you like.

Working with the exim queue

  • August 19, 2015
  • Exim

Here are a few simple commands to use from the command line to view and manage the exim queue. List total emails in the queue: exim -bpc   List all emails in the queue: exim -bp   Get the headers from an email using the message-id: exim -Mvh <message-id>   Get the email body from an email using message-id: exim -Mvb <message-id>   Clear the queue: exim -bp | awk ‘/^…