akde/infosec

Information security is ultimately about managing risk

Linux incidence response

Note: See many, many commands from the Linux privesc post.

On systems: Browse through the /var/log files.

On newer systems with systemd:

See all recent logs:
journalctl
See all logs from a service:
journalctl -t sudo
See all logs from a service within a timeframe:
journalctl -t ssh --since 2025-01-01 --until 2025-02-02

Note: If you have an image, you can also analyze logs from a mounted image like journalctl --root /mnt/hdd23 -t ssh ...

On SysVinit: Browse through /etc/init.d/

On systemd: Browse through /etc/systemd/

You must be logged in to post a comment.

Personal collection of some infosec stuff. Primary purpose of this site is to collect and organize for myself.

Note: Some content is not publicly visible due to copyright issues. Therefore, some links could be broken.

python -c 'import pty;pty.spawn("/bin/bash")';

python3 -c 'import pty;pty.spawn("/bin/bash")';