Posted on 21-03-2010
Filed Under (Security) by admin

Removing traces of unix system is very important issue for offensive security.
That needs to be cleaned a portion of the log files I’ve shared below.

Solaris System Logs
==
cat /dev/null > /var/adm/wtmpx
cat /dev/null > /var/adm/utmpx
cat /dev/null > /var/adm/loginlog
cat /dev/null > /var/adm/lastlog
cat /dev/null > /var/adm/sulog
cat /dev/null > /var/adm/messages

Redhat System Logs
==
Located in /etc/syslog.conf

Common Linux log files name and usage
==
/var/log/message: General message and system related stuff
/var/log/auth.log: Authenication logs
/var/log/kern.log: Kernel logs
/var/log/cron.log: Crond logs (cron job)
/var/log/maillog: Mail server logs
/var/log/qmail/ : Qmail log directory (more files inside this directory)
/var/log/httpd/: Apache access and error logs directory
/var/log/lighttpd: Lighttpd access and error logs directory
/var/log/boot.log : System boot log
/var/log/mysqld.log: MySQL database server log file
/var/log/secure: Authentication log
/var/log/utmp or /var/log/wtmp : Login records file
/var/log/yum.log: Yum log files

Apache Logs
==

errorlogs
accesslogs

Shell Logs
==

.bash_history

Application Logs
Database Logs

22.03.2010 – izmir

(0) Comments    Read More   

Post a Comment
Name:
Email:
Website:
Comments: