Baidu automated O & M leaks general system passwords

Baidu automated O & M leaks general system passwords

Baidu automated O & M leaks general system passwords

 

 

 

<Url>http://cq01-hm-webtest01.vm.baidu.com:8800/web/welcome/login</Url>13      <Username>leeight</Username>14      <Password>MhxzKhl</Password>…23      <Url>http://tongji.baidu.com/</Url>24      <Username>leeight</Username>25      <Password>MhxzKhl</Password>

 

#!/usr/bin/expectspawn ssh luanjunyi@relay01.baidu.comexpect "*CODE:*"send "7590[lrange $argv 0 0]\n"expect "*$*"send "ssh luanjunyi@friday.baidu.com\n"expect "*password:*"send "putian@09\n"send "ssh work@jx-ibase00.jx.baidu.com\n"expect "*password:*"send "MhxzKhl\n"interact

 

 

root@jp01-img-build0-0.jp01.baidu.com"root_pub="ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA2*****************+Ge2cGBPDFs9nKoquii6ORQuLtClF6y75Ud31rSN8t3m82IRAmtOwzVyWFtvf4jCiaXFPbtaADESToNAejvr8xUeirfefRF+IYliG9MuDxQCzX0ub6Nr71bVQq/BT3s1DQdd+avywevtArefvVTas= root@jp01-img-build0-0.jp01.baidu.com"work_pub="$root_pub"rd_pub=""grep -q "$root_pub" /root/.ssh/authorized_keys || {        echo -e "$root_pub" >> /root/.ssh/authorized_keys}grep -q "$work_pub" /home/work/.ssh/authorized_keys || {        echo -e "$work_pub" >> /home/work/.ssh/authorized_keys}grep -q "$work_pub" /home/$init_user/.ssh/authorized_keys || {        echo -e "$work_pub" >> /home/$init_user/.ssh/authorized_keys}grep -q "$rd_pub" /home/rd/.ssh/authorized_keys || {        echo -e "$rd_pub" >> /home/rd/.ssh/authorized_keys}chmod 600 /root/.ssh/authorized_keyschmod 600 /home/work/.ssh/authorized_keyschmod 600 /home/$init_user/.ssh/authorized_keyschmod 600 /home/rd/.ssh/authorized_keys

 

#-----------------## personal scirpt ##-----------------#rm -f /bin/bak{,mv}wget -P /bin ftp://jp01-op-mon00.jp01//home/img/opbin/chenjun/bin/bak*chmod 755 /bin/bak{,mv}#-------------## add work rd ##-------------#/usr/sbin/useradd work || echo "work exist already."echo '#PRASkiKAWRECO' | passwd --stdin workchmod 755 /home/work/usr/sbin/useradd $init_user || echo "$init_user exist already."echo '123456' | passwd --stdin $init_userchmod 755 /home/$init_user/usr/sbin/useradd rd || echo "rd exist already."echo 'MhxzKhl' | passwd --stdin rdchmod 755 /home/rd#----------## rd limit ##----------#echo rd >> /etc/cron.denychmod 644 /etc/cron.deny

 

Solution:

Enhanced verification