Merhaba,<\/p>\n\n\n\n
Sitenizi olu\u015fturmak i\u00e7in \u00fccretsiz ula\u015fabilece\u011finiz CMS yaz\u0131l\u0131mlar veya firman\u0131z i\u00e7in yazd\u0131rd\u0131\u011f\u0131n\u0131z web yaz\u0131l\u0131m\u0131n\u0131zdaki a\u00e7\u0131klardan sitenize s\u0131zarak kullanm\u0131\u015f oldu\u011funuz hosting, sanal yada fiziksel sunucu kaynaklar\u0131n\u0131 kendilerine tamamen a\u00e7\u0131p, toplu mail g\u00f6nderimi veya bir \u00e7ok zararl\u0131 eylemlerde kullan\u0131lmak \u00fczere haz\u0131rlanm\u0131\u015f shell kodlar\u0131, dosyalar\u0131 SSH \u00fczerinden nas\u0131l tespit edip silece\u011fimizi ve bunlara kar\u015f\u0131 nas\u0131l \u00f6nlemler alabilece\u011finizi payla\u015faca\u011f\u0131m.<\/p>\n\n\n\n
c99, r57 shell kodlar\u0131 kolay ula\u015f\u0131labilir d\u00fczenlenebilir kodlard\u0131r. Genelde base64 ile \u015fifrelenip sitenize bula\u015fa biliyor yada lisansl\u0131 yaz\u0131l\u0131mlar\u0131 decode edip site dosyalar\u0131n\u0131z\u0131n sat\u0131rlar\u0131 aras\u0131na bu kodlar ekleniyor ve sizden habersiz bir \u00e7ok zararl\u0131 eylemler ger\u00e7ekle\u015ftiriliyor. Bunlardan en \u00e7ok s\u0131k yap\u0131lan Toplu mail g\u00f6nderimi ve Phishing (kopyalanm\u0131\u015f) site \u00e7al\u0131\u015fmalar\u0131d\u0131r.<\/p>\n\n\n\n
Ne tarz \u00f6nlemler almal\u0131y\u0131m?<\/strong><\/p>\n\n\n\n Hizmetimde c99 veya r57 shell taramas\u0131 nas\u0131l yapabilirim?<\/strong><\/p>\n\n\n\n Linux bir sunucunuz var ise maldet ile shell taramas\u0131 yapabilirsiniz. Zararl\u0131 dosyay\u0131 tespit edip d\u00fczenleyebilirsiniz.<\/p>\n\n\n\n Di\u011fer bir y\u00f6ntem ise direk c99 ve r57 yi bulmak ve temizlemek,<\/p>\n\n\n\n \u2013 PHP dosyalar\u0131n\u0131zda r57 shell aramas\u0131 yapmak i\u00e7in;<\/strong><\/p>\n\n\n\n find \/home\/domainname\/ -name \u201c*\u201d.php -type f -print0 | xargs -0 grep r57 | uniq -c | sort -u | cut -d\u201d:\u201d -f1 | awk \u2018{print \u201crm -rf \u201d $2}\u2019 | uniq<\/p>\n\n\n\n \u2013 r57 Shell txt dosya aramas\u0131;<\/strong><\/p>\n\n\n\n find \/home\/domainname\/ -name \u201c*\u201d.txt -type f -print0 | xargs -0 grep r57 | uniq -c | sort -u | cut -d\u201d:\u201d -f1 | awk \u2018{print \u201crm -rf \u201d $2}\u2019 | uniq<\/p>\n\n\n\n \u2013 PHP dosyalar\u0131n\u0131zda c99 shell aramas\u0131 yapmak i\u00e7in;<\/strong><\/p>\n\n\n\n find \/home\/domainname\/ -name \u201c*\u201d.php -type f -print0 | xargs -0 grep c99 | uniq -c | sort -u | cut -d\u201d:\u201d -f1 | awk \u2018{print \u201crm -rf \u201d $2}\u2019 | uniq<\/p>\n\n\n\n \u2013 c99 Shell txt dosya aramas\u0131;<\/strong><\/p>\n\n\n\n find \/home\/domainname\/ -name \u201c*\u201d.txt -type f -print0 | xargs -0 grep c99 | uniq -c | sort -u | cut -d\u201d:\u201d -f1 | awk \u2018{print \u201crm -rf \u201d $2}\u2019 | uniq<\/p>\n\n\n\n Yukardaki sat\u0131rlar ile shell bula\u015fm\u0131\u015f dosyay\u0131 tespit edip silebilirsiniz.<\/p>\n\n\n\n Sadece dosyay\u0131 tespit etmek istiyorsan\u0131z<\/p>\n\n\n\n awk \u2018{print \u201crm -rf \u201c<\/strong> $2}\u2019 | uniq<\/p>\n\n\n\n \u201crm -rf\u201d kal\u0131n yaz\u0131lm\u0131\u015f b\u00f6l\u00fcm\u00fc kod sat\u0131rlar\u0131ndan kald\u0131rabilirsiniz. B\u00f6ylelikle dosyan\u0131z silinmeyecek ekran\u0131n\u0131zda listelenecektir.<\/p>\n","protected":false},"excerpt":{"rendered":" Merhaba, Sitenizi olu\u015fturmak i\u00e7in \u00fccretsiz ula\u015fabilece\u011finiz CMS yaz\u0131l\u0131mlar veya firman\u0131z i\u00e7in yazd\u0131rd\u0131\u011f\u0131n\u0131z web yaz\u0131l\u0131m\u0131n\u0131zdaki a\u00e7\u0131klardan sitenize s\u0131zarak kullanm\u0131\u015f oldu\u011funuz hosting, sanal yada fiziksel sunucu kaynaklar\u0131n\u0131 kendilerine tamamen a\u00e7\u0131p, toplu mail g\u00f6nderimi veya bir \u00e7ok zararl\u0131 eylemlerde kullan\u0131lmak \u00fczere haz\u0131rlanm\u0131\u015f shell kodlar\u0131, dosyalar\u0131 SSH \u00fczerinden nas\u0131l tespit edip silece\u011fimizi ve bunlara kar\u015f\u0131 nas\u0131l \u00f6nlemler alabilece\u011finizi payla\u015faca\u011f\u0131m. […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[6,12,8,10,15,16,18,27,11,9,20,32,30],"tags":[],"class_list":["post-204","post","type-post","status-publish","format-standard","hentry","category-centos","category-centos-web-panel","category-cpanel","category-directadmin","category-guvenlik","category-hosting","category-linux-hosting","category-linux-sunucular","category-maestropanel","category-plesk","category-sunucular","category-webmin","category-whm-panel"],"yoast_head":"\n