| import network | |
| import socket | |
| import time | |
| from machine import Pin | |
| import uasyncio as asyncio | |
| led = Pin(15, Pin.OUT) | |
| onboard = Pin("LED", Pin.OUT, value=0) |
You can use these commands and rules to search for exploitation attempts against log4j RCE vulnerability CVE-2021-44228
This command searches for exploitation attempts in uncompressed files in folder /var/log and all sub folders
sudo egrep -I -i -r '\$(\{|%7B)jndi:(ldap[s]?|rmi|dns|nis|iiop|corba|nds|http):/[^\n]+' /var/log
| import requests # dependency | |
| url = "<your url>" # webhook url, from here: https://i.imgur.com/f9XnAew.png | |
| # for all params, see https://discordapp.com/developers/docs/resources/webhook#execute-webhook | |
| data = { | |
| "content" : "message content", | |
| "username" : "custom username" | |
| } |
| FROM ubuntu | |
| RUN apt update \ | |
| && apt install -y firefox \ | |
| openssh-server \ | |
| xauth \ | |
| && mkdir /var/run/sshd \ | |
| && mkdir /root/.ssh \ | |
| && chmod 700 /root/.ssh \ | |
| && ssh-keygen -A \ | |
| && sed -i "s/^.*PasswordAuthentication.*$/PasswordAuthentication no/" /etc/ssh/sshd_config \ |
| version: "2" | |
| services: | |
| db: | |
| image: mariadb | |
| environment: | |
| - MYSQL_ROOT_PASSWORD=test | |
| - MYSQL_DATABASE=radio | |
| volumes: | |
| - ./database:/var/lib/mysql | |
| phpmyadmin: |
