Easy
”Saint John”: what is writing to this log file?
- On login we find a python script in the home directory
- The python script is writing to the log file
- Doing grep on
ps -auxto find the process.ps -aux | badlog.py - Get the process id
sudo kill -9 <pid>
”Saskatoon”: counting IPs.
cut -d " " -f 1 /home/admin/access.log | sort | uniq -c | sort -ncut -d " " -f 1 <logfile>: to get ip address from log filesort: to sort the list of ip’suniq -c: to get the count of each ip, counts how many times a line repeatedsort -n: to sort numbers
”Santiago”: Find the secret combination
- TODO