PS: 参加过408改卷的ZJU ghsong@zju.edu.cn 开启嘲讽: 你们知道408有多简单吗,操作系统真实水平自己知道就行~~
Requested credits of master in UWSC=30,in ZJU=24,domestic master is too simple
dmesg
dmesg 是一个用于显示内核环形缓冲区消息的命令,主要用于查看系统启动时的消息、驱动程序加载信息、硬件错误、内核崩溃等。它可以帮助用户和系统管理员诊断系统问题。
执行dmesg
后,出现下述信息,
[33360.379961] gdbus[41405]: segfault at 0 ip 000075aaf418afaf sp 000075aae7dffa48 error 4 in libc.so.6[75aaf4028000+188000] likely on CPU 3 (core 1, socket 0)
也许更重要的信息:
[ 0.266925] ACPI BIOS Error (bug): Could not resolve symbol [\_SB.PCI0.GPP2.WWAN], AE_NOT_FOUND (20230628/dswload2-162)
[ 0.266934] ACPI Error: AE_NOT_FOUND, During name lookup/catalog (20230628/psobject-220)
[ 0.266937] ACPI: Skipping parse of AML opcode: Scope (0x0010)
[ 0.267618] ACPI BIOS Error (bug): Could not resolve symbol [\_SB.PCI0.GPP2.WWAN], AE_NOT_FOUND (20230628/dswload2-162)
[ 0.267623] ACPI Error: AE_NOT_FOUND, During name lookup/catalog (20230628/psobject-220)
[ 0.267626] ACPI: Skipping parse of AML opcode: Scope (0x0010)
[ 0.267636] ACPI BIOS Error (bug): Could not resolve symbol [\_SB.PCI0.GPP5.RTL8], AE_NOT_FOUND (20230628/dswload2-162)
[ 0.267641] ACPI Error: AE_NOT_FOUND, During name lookup/catalog (20230628/psobject-220)
[ 0.267643] ACPI: Skipping parse of AML opcode: Scope (0x0010)
[ 0.267667] ACPI BIOS Error (bug): Failure creating named object [\_SB.PCI0.GPP6.WLAN._S0W], AE_ALREADY_EXISTS (20230628/dswload2-326)
[ 0.267675] ACPI Error: AE_ALREADY_EXISTS, During name lookup/catalog (20230628/psobject-220)
[ 0.267678] ACPI: Skipping parse of AML opcode: Method (0x0014)
[ 0.267690] ACPI BIOS Error (bug): Could not resolve symbol [\_SB.PCI0.GPP7.DEV0], AE_NOT_FOUND (20230628/dswload2-162)
[ 0.267694] ACPI Error: AE_NOT_FOUND, During name lookup/catalog (20230628/psobject-220)[ 0.543977] ACPI BIOS Error (bug): Could not resolve symbol [\_TZ.THRM._SCP.CTYP], AE_NOT_FOUND (20230628/psargs-330)
[ 0.543997] ACPI Error: Aborting method \_TZ.THRM._SCP due to previous error (AE_NOT_FOUND) (20230628/psparse-529)
[ 0.917386] hub 6-0:1.0: USB hub found
[ 0.917392] hub 6-0:1.0: config failed, hub doesn't have any ports! (err -19)
[ 6.230646] ucsi_acpi USBC000:00: error -ETIMEDOUT: PPM init failed
gdbus
gdbus 是一个用于与 D-Bus(Desktop Bus)进行交互的命令行工具。D-Bus 是一种消息总线系统,允许不同的应用程序和服务在同一台计算机上进行通信。它广泛用于 Linux 和其他类 Unix 系统中,尤其是在桌面环境中。
gdbus 的主要功能
与 D-Bus 交互:gdbus 允许用户通过命令行与 D-Bus 进行交互,发送消息、调用方法、获取属性等。查看 D-Bus 服务:用户可以使用 gdbus 列出当前运行的 D-Bus 服务和对象。调用方法:可以通过 gdbus 调用 D-Bus 服务提供的方法,传递参数并接收返回值。获取和设置属性:gdbus 允许用户获取和设置 D-Bus 对象的属性。监听信号:用户可以使用 gdbus 监听 D-Bus 信号,这些信号通常用于通知其他应用程序某些事件的发生
gdbus接口使用
命令:help 显示本信息introspect Introspect 一个远程对象monitor 监视一个远程对象call 调用远程对象的一个方法emit 发出一个信号wait 等待总线名称出现
列出所有 D-Bus 服务:
gdbus introspect --session --dest org.freedesktop.DBus --object-path /
调用方法:
gdbus call --session --dest org.freedesktop.DBus --object-path /org/freedesktop/DBus --method org.freedesktop.DBus.ListNames
获取属性:
gdbus call --session --dest <service_name> --object-path <object_path> --method <interface_name>.<method_name>
适用场景
桌面应用程序:许多桌面应用程序使用 D-Bus 进行组件之间的通信,例如媒体播放器、文件管理器和系统设置工具。
系统服务:系统服务(如网络管理、打印服务等)也使用 D-Bus 进行通信和管理。
总之,gdbus 是一个强大的工具,适用于开发者和系统管理员,用于与 D-Bus 进行交互和调试。
ifconfig后出现异常的接口
$ifconfig
mpqemubr0: flags=4099<UP,BROADCAST,MULTICAST> mtu 1500inet 10.173.129.1 netmask 255.255.255.0 broadcast 10.173.129.255inet6 fe80::5054:ff:fe8d:980 prefixlen 64 scopeid 0x20<link>ether 52:54:00:8d:09:80 txqueuelen 1000 (以太网)RX packets 4090 bytes 282242 (282.2 KB)RX errors 0 dropped 0 overruns 0 frame 0TX packets 6346 bytes 31354020 (31.3 MB)TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0tap-9928d551516: flags=4099<UP,BROADCAST,MULTICAST> mtu 1500inet6 fe80::18e0:b5ff:fe97:233 prefixlen 64 scopeid 0x20<link>ether 1a:e0:b5:97:02:33 txqueuelen 1000 (以太网)RX packets 4090 bytes 339502 (339.5 KB)RX errors 0 dropped 0 overruns 0 frame 0TX packets 6375 bytes 31358207 (31.3 MB)TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
端口扫描
$ nmap -A --top-ports 20 10.173.129.1
Starting Nmap 7.94SVN ( https://nmap.org ) at 2024-11-07 11:04 CST
Nmap scan report for lsar (10.173.129.1)
Host is up (0.00028s latency).PORT STATE SERVICE VERSION
21/tcp closed ftp
22/tcp closed ssh
23/tcp closed telnet
25/tcp closed smtp
53/tcp open domain dnsmasq 2.90
| dns-nsid:
|_ bind.version: dnsmasq-2.90
80/tcp closed http
110/tcp closed pop3
111/tcp closed rpcbind
135/tcp closed msrpc
139/tcp closed netbios-ssn
143/tcp closed imap
443/tcp closed https
445/tcp closed microsoft-ds
993/tcp closed imaps
995/tcp closed pop3s
1723/tcp closed pptp
3306/tcp closed mysql
3389/tcp closed ms-wbt-server
5900/tcp closed vnc
8080/tcp closed http-proxyService detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 14.33 seconds
也许是dns中转服务器
librewolf访问zju.edu.cn后,显示签名信息不合法,
但是用firefox访问正常,说明librewolf对HTTPS+SSH的检查更严格,
之前没重装的时候可以用librewolf访问,说明传输的过程出问题了,web攻击~