Zamfoo Critical Security Vulnerability

Unfortunately, this software has a severe root access vulnerability. Zamfoo WHM Plugin – http://www.zamfoo.com/plugins – $Fee – Security Issues, DO NOT USE http://www.webhostingtalk.com/showthread.php?t=1275572 http://localhost.re/p/zamfoo-120-vulnerability Remove this plugin as quickly as possible unless re-imaging  your server(s) is the favorite part of your day.


10 Ways to Generate a Random Password from the Command Line

From http://www.howtogeek.com One of the great things about Linux is that you can do the same thing hundreds of different ways—even something as simple as generating a random password can be accomplished with dozens of different commands. Here’s 10 ways you can do it. We gathered all of these commands from Command-Line Fu and tested…


Reinstall the Plesk PMA tables

For Plesk 10.11 Basically Plesk updated and broke things. I imagine there could be some other cases when this breaks as well. For further details on the problem, see: http://forum.parallels.com/showthread.php?281752-MU37-phpMyAdmin-errors First locate the database tables that are missing. Usually, it is something like: /var/lib/mysql/phpmyadmin_$randomstringofchars/ and there would only be this file ‘db.opt‘. If you login…


cPanel Quota Issue

Hello, Recently there has been issues on some cPanel servers when attempting to obtain the disk quota for specific users. The problem is that it would return N/A in the cPanel account when looking at disk usage. Same result would appear when trying to get disk space for the user manually in the command line:…


Plesk Compromise

From arstechnica.com Parallels KB article: http://kb.parallels.com/116241 “The exploit for this vulnerability uses a combination of the 2 issues: – PHP vulnerability CVE-2012-1823 related to CGI mode used in older Plesks (http://kb.parallels.com/en/113818). – Plesk phppath script alias usage in Plesk versions 9.0 – 9.2…


Use Google Authenticator For Two-Factor SSH Authentication in Linux

From scottlinux.com For a very secure and convenient way to add two-factor ssh auth to your Linux server, you can use Google Authenticator. I’ll show you how to set this up! 1. In Ubuntu 13.04: $ sudo apt-get install libpam-google-authenticator 2. Then, from an open bash shell with your user account on that server and…


Delete millions of files faster

From http://linuxnote.net Another Benchmark Several days ago, Keith-Winstein replied at the Quora Posts mentioned that my previous benchmark cannot be reproduced due to the time of all deletion operations lasting too long. To make it clear, those weird data might be that my computer was under heavy load in the past years that it may exist some fs errors…


Browser Notepad

Add, save or bookmark this code in Firefox or Chrome for a quick noting app in the browser window data:text/html, Nice…


Exclude Options for Tar +

Quick thought… You can pretty much exclude a file, folder or specific pattern when using tar: # tar cvfp 052613tar.tar /my/path/Example.com_DIR –exclude=/my/path/Example.com_DIR/images   or tar everything in the current directory, but exclude two specific files # tar cvpf 052613tar.tar * –exclude=index.html –exclude=myimage.png   or tar cvpf 052613tar.tar * –exclude=’file1′ –exclude=’pattern*’ –exclude=’file2′    p.s some tar…


Dammit Server, y u kick me off again?!?

or how to Keep SSH Connections Alive… Login to your server and open the /etc/ssh/ssh_config file. sudo vim /etc/ssh/ssh_config   and add the following line to the end of the file: ServerAliveInterval 60   This sends a null packet to the server every 60 seconds during periods of inactivity to keep the SSH connection alive….