Commands by lpanebr

Commands by lpanebr (4)

sorted by

find potentially malicious PHP commands used in backdoors and aliked scripts

Searched strings: passthru, shell_exec, system, phpinfo, base64_decode, chmod, mkdir, fopen, fclose, readfile Since some of the strings may occur in normal text or legitimately you will need to adjust the command or the entire regex to suit your needs.
This is sample output - yours may be different.
0

find ./public_html/ -name \*.php -exec grep -HRnDskip "$passthru\|shell_exec\|system\|phpinfo\|base64_decode\|chmod\|mkdir\|fopen\|fclose\|readfile$ *(" {} \;

lpanebr · 2013-04-03 12:42:19 9
Convert multiple images to multi page PDF (with specific page order)

Creates a PDF from multiple images. One page per image. If you want a specific arbitrary order you can use {1,3,5,10,12} * you may use jpg, tif etc ** if you do use jpg images you might want to add "-compress Zip" as suggested below to prevent from having the images from being re-compressed.
This is sample output - yours may be different.
0

convert {1..12}.png MyMultiPageFile.pdf

lpanebr · 2013-03-26 01:30:38 13
List available upgrades from apt (package names only)

Usefull if you only want to see the package names, or if you want to use them in a script.
This is sample output - yours may be different.
1

apt-get -s upgrade | awk '/Inst.+/ {print $2}'

lpanebr · 2013-03-25 21:23:11 5
List total available upgrades from apt without upgrading the system

This let's you find out the total packages that have available upgrades. Usefull if you want to check or show the total available upgrades on your system. Show Sample Output
This is sample output - yours may be different.
```
65 package updates are available
```
3

apt-get -s upgrade | awk '/[0-9]+ upgraded,/ {print $1 " package updates are available"}'

lpanebr · 2012-03-29 17:04:32 4

What's this?

commandlinefu.com is the place to record those command-line gems that you return to again and again. That way others can gain from your CLI wisdom and you from theirs too. All commands can be commented on, discussed and voted up or down.

Share Your Commands

Check These Out

Find broken symlinks and delete them

This command is adapted from http://otomaton.wordpress.com/2012/12/26/find-broken-symbolic-links/ Solutions with $ find -L don't work when the link is a loop, an error message is printed.

list block devices

Shows all block devices in a tree with descruptions of what they are.

Which processes are listening on a specific port (e.g. port 80)

swap out "80" for your port of interest. Can use port number or named ports e.g. "http"

Recursively remove .svn directories

Get the Volume labels all bitlocker volumes had before being encrypted

Get information of volume labels of bitlocker volumes, even if they are encrypted and locked (no access to filesystem, no password provided). Note that the volume labels can have spaces, but only if you name then before encryption. Renaming a bitlocker partition after being encrypted does not have the same effect as doing it before.

Define Google Chrome urpmi media source for Mandriva/Mageia (works for both 32-bit and 64-bit systems)

This command adds a urpmi media source called "google-chrome" to the urpmi configuration on Mandriva or Mageia. Needs to be run as root. We specify the option "--update" so that when Google provides a newer version of Google Chrome web browser in their download system then running a system update (eg: "urpmi --auto-update") will result in our copy of Google Chrome getting updated (along with any other Mandriva/Mageia pending updates). To install Google Chrome from this source, use: urpmi google-chrome-stable #install Google chrome web browser

Which processes are listening on a specific port (e.g. port 80)

swap out "80" for your port of interest. Can use port number or named ports e.g. "http"

Add prefix onto filenames

Best to try first with -n flag, to preview

pass the output of some command to a new email in the default email client

This depends on 'stripansi' and 'urlencode' commands, which exist on my system as these aliases: $ alias stripansi='perl -ple "s/\033\[(?:\d*(?:;\d+)*)*m//g;"' $ alias urlencode='perl -MURI::Escape -ne "\$/=\"\"; print uri_escape \$_"' The `open` command handles URLs on a Mac. Substitute the equivalent for your system (perhaps gnome-open). I don't use system `mail`, so I have this aliased as `mail` and use it this way: $ git show head | mail

list block devices

Shows all block devices in a tree with descruptions of what they are.

Stay in the loop…

Follow the Tweets.

Every new command is wrapped in a tweet and posted to Twitter. Following the stream is a great way of staying abreast of the latest commands. For the more discerning, there are Twitter accounts for commands that get a minimum of 3 and 10 votes - that way only the great commands get tweeted.

» http://twitter.com/commandlinefu
» http://twitter.com/commandlinefu3
» http://twitter.com/commandlinefu10

Subscribe to the feeds.

Use your favourite RSS aggregator to stay in touch with the latest commands. There are feeds mirroring the 3 Twitter streams as well as for virtually every other subset (users, tags, functions,…):

Subscribe to the feed for:

» all commands
» commands with 3 up-votes (commandlinefu3)
» commands with 10 up-votes (commandlinefu10)
» commands by lpanebr