容器内bash会被脚本附加的情况分析

信安成长日记

已于 2022-04-29 15:26:10 修改

阅读量182

点赞数

CC 4.0 BY-SA版权

分类专栏：安全研发文章标签： bash ubuntu linux

于 2022-04-29 14:05:00 首次发布

本文链接：https://blog.youkuaiyun.com/SHELLCODE_8BIT/article/details/124492388

安全研发专栏收录该内容

443 篇文章 ¥9.90 ¥99.00

订阅专栏

超级会员免费看

devent:<id:"b68a3cad5d5d6bbf4d8aade6e2cf44b8ac48a558847f2ba29f161643f662a04b" process_id:"03898b535a31bf119a278ba303821db365bbfbc90b662442bfad867a7a45ba13" process_pid:55491 process_ppid:55490 container_id:"fa1bbdc40c6da9551e818609a8b9b0cf3728bbf631c74d17ba97dbffaef003bf" sensor_id:"9db9f9993b941df1313240a0f4326460563fc985a60b5da53175aa38db09da5a" sensor_sequence_number:62624 sensor_monotime_nanos:1650971466000562907 container_name:"/laughing_visvesvaraya" image_id:"2caf248e52e074f3c378d0ba0beae73ffca96bb1e2f5f66ee0163284b266018e" image_name:"ubuntu" process:<type:PROCESS_EVENT_TYPE_EXEC exec_filename:"/usr/bin/groups" exec_command_line:"groups" cmdline:"groups" name:"groups" aname:"bash" aname:"bash" fdList:<pid:"55491" fdDetails:<type:99 > fdDetails:<type:99