{"id":1108,"date":"2020-08-30T22:23:43","date_gmt":"2020-08-30T14:23:43","guid":{"rendered":"http:\/\/www.shuran.cn\/?p=1108"},"modified":"2020-08-30T22:23:43","modified_gmt":"2020-08-30T14:23:43","slug":"linux-%e5%a6%82%e4%bd%95%e6%8c%87%e5%ae%9anologin%e7%94%a8%e6%88%b7%e6%89%a7%e8%a1%8c%e5%91%bd%e4%bb%a4www%e7%94%a8%e6%88%b7%e5%ae%89%e5%85%a8%e5%81%9a%e6%b3%95","status":"publish","type":"post","link":"https:\/\/www.shuran.cn\/?p=1108","title":{"rendered":"linux \u5982\u4f55\u6307\u5b9anologin\u7528\u6237\u6267\u884c\u547d\u4ee4www\u7528\u6237\u5b89\u5168\u505a\u6cd5"},"content":{"rendered":"\n<p>\u5728linux\u4e2d\u5efa\u7acb\u7f51\u7ad9\u65f6\uff0c\u6211\u4eec\u4e00\u822c\u5206\u914d\u4e00\u4e2awww\u4e4b\u7c7b\u7684\u7528\u6237\u7ed9\u7f51\u7ad9\u5e94\u7528\u7a0b\u5e8f\u3002<br>\u5982\u679c\u6211\u4eec\u4f7f\u7528root\u6216\u8005\u5177\u6709\u7ba1\u7406\u5458\u6743\u9650\u7684\u8d26\u53f7\u5728\u7f51\u7ad9\u76ee\u5f55\u4e0b\u53bb\u521b\u5efa\u6587\u4ef6\u65f6\uff0c\u4f1a\u9047\u5230\u5404\u79cd\u6743\u9650\u95ee\u9898\u3002<br>\u8fd9\u65f6\u6211\u4eec\u53ef\u4ee5\u5207\u6362\u5230www\u7528\u6237\uff0c\u8fd9\u7c7b\u7528\u6237\u4e00\u822c\u662fnologin\uff0c\u4e0d\u5141\u8bb8\u767b\u5f55\u3002<br>\u5982\u679c\u6211\u4eecsu www\u6216\u8005sudo www,\u5207\u6362\u5230www\u7528\u6237\u65f6\uff0c\u4f1a\u51fa\u9519\u3002<br>\u7f51\u4e0a\u89e3\u51b3\u529e\u6cd5\u65f6\u4fee\u6539\/etc\/passwd\u6587\u4ef6 nologin\u6539\u4e3abin\/bash\uff0c\u8fd9\u6837www\u7528\u6237\u53ef\u4ee5\u767b\u5f55\u670d\u52a1\u5668\uff0c<br>\u6bd4\u8f83\u5371\u9669\u3002\u53ef\u4ee5\u901a\u8fc7\u4ee5\u4e0b\u529e\u6cd5\u4f7f\u7528www\u7528\u6237\u6267\u884c\u547d\u4ee4<br>\u65b9\u6cd51. \u4e3a\u4e86\u5b89\u5168\uff0c\u4f7f\u7528nologin\u8d26\u53f7\u6765\u8fd0\u884c\u7a0b\u5e8f\uff0c<br>su -s \/bin\/bash -c \"ls\" www<br>\u8fd9\u6761\u547d\u4ee4\u5230\u5e95\u505a\u4e86\u4ec0\u4e48\u5462\uff1fsu -s \u662f\u6307\u5b9ashell\uff0c\u8fd9\u91ccwww\u7528\u6237\u662fnologin\u7528\u6237\uff0c\u662f\u6ca1\u6709\u9ed8\u8ba4\u7684shell\u7684\uff0c\u8fd9\u91cc\u6307\u5b9a\u4f7f\u7528\/bin\/bash, -c \u540e\u9762\u63a5\u9700\u8981\u8fd0\u884c\u7684\u547d\u4ee4\uff0c \u540e\u9762www\u662f\u7528www\u7528\u6237\u6765\u8fd0\u884c<br>\u65b9\u6cd52\uff1a<br>sudo -u www command \u8fd9\u6837\u4e5f\u53ef\u4ee5\u4f7f\u7528www\u7528\u6237\u6765\u6267\u884c\u547d\u4ee4<\/p>\n\n\n\n<p>\u975eroot\u7528\u6237su\u5230\u5176\u4ed6\u8d26\u6237\uff0c\u9700\u8981\u5176\u4ed6\u8d26\u6237\u7684\u5bc6\u7801\uff0c\u6240\u4ee5\u9700\u8981\u7ed9www\u52a0\u4e0a\u5bc6\u7801\uff0croot\u8d26\u6237\uff1a passwd www \u3002&nbsp;<\/p>\n\n\n\n<p>centos7.4<br>\u6307\u5b9anologin\u7684\u7528\u6237&nbsp;<br>root\u53ef\u4ee5su&nbsp;<\/p>\n\n\n\n<p>su -s \/bin\/bash&nbsp; www<br>\u5176\u4ed6\u7528\u6237su&nbsp;<\/p>\n\n\n\n<p>su -s \/bin\/bash&nbsp; www<\/p>\n\n\n\n<p>\u7136\u800c\u5728centos7.7 \u4e2d\uff0c\u8fd9\u4e2a\u5df2\u7ecf\u4e0d\u884c\u4e86\u3002<\/p>\n\n\n\n<p>centos7.7<\/p>\n\n\n\n<p>\u6307\u5b9anologin\u7684\u7528\u6237<br>root\u53ef\u4ee5su&nbsp;&nbsp;<\/p>\n\n\n\n<p>su -s \/bin\/bash&nbsp; www<\/p>\n\n\n\n<p><em>\u4e0d\u80fd\u88ab\u5176\u4ed6\u7528\u6237su<\/em><\/p>\n\n\n\n<p>\u6240\u4ee5\u8fd8\u662f\u6253\u5f00www\u7684shell&nbsp;<\/p>\n\n\n\n<p>www:x:1001:1001::\/home\/www:\/bin\/bash<\/p>\n\n\n\n<p>\u7136\u540e\u8bbe\u7f6e sshd<\/p>\n\n\n\n<p>\u5728 \/etc\/ssh\/sshd_config&nbsp; \u6700\u540e\u52a0\u5165 DenyUsers \u4ee3\u8868\u7981\u6b62www\u4f7f\u7528ssh\u3002&nbsp;<br>DenyUsers www<\/p>\n\n\n\n<p>\u8fd9\u6837www \u7528\u6237\u6c38\u8fdc\u4e0d\u80fd\u901a\u8fc7ssh\u767b\u9646\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u5728linux\u4e2d\u5efa\u7acb\u7f51\u7ad9\u65f6\uff0c\u6211\u4eec\u4e00\u822c\u5206\u914d\u4e00\u4e2awww\u4e4b\u7c7b\u7684\u7528\u6237\u7ed9\u7f51\u7ad9\u5e94\u7528\u7a0b\u5e8f\u3002\u5982\u679c\u6211\u4eec\u4f7f\u7528root\u6216\u8005\u5177\u6709\u7ba1\u7406\u5458\u6743\u2026 <span class=\"read-more\"><a href=\"https:\/\/www.shuran.cn\/?p=1108\">Read More &raquo;<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[],"class_list":["post-1108","post","type-post","status-publish","format-standard","hentry","category-os"],"_links":{"self":[{"href":"https:\/\/www.shuran.cn\/index.php?rest_route=\/wp\/v2\/posts\/1108","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.shuran.cn\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.shuran.cn\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.shuran.cn\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.shuran.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1108"}],"version-history":[{"count":2,"href":"https:\/\/www.shuran.cn\/index.php?rest_route=\/wp\/v2\/posts\/1108\/revisions"}],"predecessor-version":[{"id":1110,"href":"https:\/\/www.shuran.cn\/index.php?rest_route=\/wp\/v2\/posts\/1108\/revisions\/1110"}],"wp:attachment":[{"href":"https:\/\/www.shuran.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1108"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.shuran.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1108"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.shuran.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1108"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}