Linux相关

[ 3886.983875] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/user.slice/user-0.slice/user@0.service/apps.slice/apps-org.gnome.Terminal.slice/vte-spawn-f2101af1-11b9-4c5e-b9ea-241950036390.scope,task=zeek,pid=38846,uid=0 [ 3886.984046] Out of memory: Killed process 38846 (zeek) total-vm:8399880kB, anon-rss:6976348kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:14688kB oom_score_adj:0 [ 3954.429362] perf: interrupt took too long (23536 > 23386), lowering kernel.perf_event_max_sample_rate to 8250

https://askubuntu.com/questions/709336/how-to-find-out-why-process-was-killed-on-server

配置DNS解析

Kali:

/etc/resolv.conf:

nameserver 114.114.114.114
nameserver 8.8.8.8

如何查找局域网内的DHCP服务器地址

Kali:

首先使用namp探测局域网内主机

nmap 192.168.126.0/24

image-20231027113333594

然后利用dhcping -s探测

image-20231027113412925

什么是PAM认证

PAM(Pluggable Authentication Modules 可插拔式认证模块)是Linux中用于身份验证的程序，比如sudo su，本地管理员可以随意选择程序的认证方式，模块默认放在/lib/security下

PAM的配置文件一般放在/etc/pam.d/目录下

配置文件的格式如下：

• 认证类型
  • auth：对用户身份验证
  • account：对账号属性验证
  • password：使用用户信息来更新数据
  • session：会话管理
• 控制类型
  • required
  • requisite
  • sufficient
  • optional
• PAM模块名以及参数

auth       optional   pam_faildelay.so  delay=3000000
auth [success=ok new_authtok_reqd=ok ignore=ignore user_unknown=bad default=die] pam_securetty.so
session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so close
session    required     pam_loginuid.so
session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so open
session       required   pam_env.so readenv=1
session       required   pam_env.so readenv=1 envfile=/etc/default/locale
@include common-auth
auth       optional   pam_group.so
session    required   pam_limits.so
session    optional   pam_lastlog.so
session    optional   pam_motd.so motd=/run/motd.dynamic
session    optional   pam_motd.so noupdate
session    optional   pam_mail.so standard
session    optional   pam_keyinit.so force revoke
@include common-account
@include common-session
@include common-password