gn0s1s
- Total activity 23
- Last activity
- Member since
- Following 0 users
- Followed by 0 users
- Votes 0
- Subscriptions 6
Activity overview
Latest activity by gn0s1s-
gn0s1s commented,
Ok, after a bit more investigation and some help from my host, we've been able to determine that since cPanel version 11.56.0.13, the /usr/bin/passwd file is now equivalent to the file in the main ...
-
gn0s1s commented,
Sure thing, feel free to open a ticket directly to cPanel Technical Support! :) If I did that it would be assuming that there was something wrong with cPanel rather than something wrong locally. T...
-
gn0s1s commented,
May 26 cPanel version: 11.56.0.21 Local md5sum: 792964343f6f916d8025bf9b1eb1e839 Fresh md5sum: 81ccb41e7ee6f41f0b63fa08e779f929
-
gn0s1s commented,
Any chance this might get looked at, cPanel Staff? :-)
-
gn0s1s created a post,
Since 56.0.13, passwd hashes do not match
Because Chkrootkit pretty much always flags the /usr/bin/passwd file as being infected, I have written a script that implements the solution found on this site: crybit.com/passwd-infected-chkrootki...
-
gn0s1s commented,
Thanks, I'll leave them as they are.
-
gn0s1s commented,
Yes, you are using the default entries, and the messages suggest the person connecting is using an unsupported protocol. This can indicate the user attempting to make the connection needs to update...
-
gn0s1s created a post,
Old .relink files safe to delete?
In /usr/bin I have some very old .relink files: root@obscured [/usr/bin]# ls -la | grep relink -rwsr-xr-x 1 root root 57536 Jul 30 2014 crontab.relink.1440525782* -rwsr-xr-x 1 root ro...
-
gn0s1s commented,
Please post the output from the following commands: grep openssl_options /etc/exim.conf grep ssl_protocols /etc/dovecot/dovecot.conf Here it is. root@obscured [~]# grep openssl_options /etc/exi...
-
gn0s1s commented,
Some more unmatched entries today. Would love to get to the bottom of why they keep recurring. dovecot: pop3-login: Error: SSL: Stacked error: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:un...